Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Mm9TH7rKl3autgJBbhMLHVYvtB4.roa
File: Mm9TH7rKl3autgJBbhMLHVYvtB4.roa (raw, json)
Hash identifier: oHRKbihRi/7kVjjrJe40JX789UV8ja8CxlFri/ZUG8I=
Subject key identifier: 32:6F:53:1F:BA:CA:97:76:AE:B6:02:41:6E:13:0B:1D:56:2F:B4:1E
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 018C90DEEE3DD43F01F00C96699D7CEB6F96
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Mm9TH7rKl3autgJBbhMLHVYvtB4.roa
Signing time: Fri 22 Dec 2023 09:32:58 +0000
ROA not before: Fri 22 Dec 2023 09:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.124.0/24 maxlen: 24
185.71.124.0/22 maxlen: 22
185.71.125.0/24 maxlen: 24
185.71.124.128/25 maxlen: 25
185.71.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:de:ee:3d:d4:3f:01:f0:0c:96:69:9d:7c:eb:6f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Dec 22 09:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=326f531fbaca9776aeb602416e130b1d562fb41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:31:b3:bd:e2:33:96:19:8d:a3:7a:11:ad:
52:73:be:e1:a7:16:c8:7c:9b:21:1f:a6:48:e1:a2:
b9:47:c9:c5:e9:ac:f2:a6:1d:8b:94:05:f6:67:4f:
90:3c:ba:9f:77:9d:30:80:a9:79:57:e8:98:08:c4:
54:f8:c5:52:4a:59:5f:9a:3c:f1:fb:bf:7c:a1:5a:
f0:fb:a3:97:36:d8:2f:c8:42:5b:cc:ff:92:80:f7:
f5:77:e6:14:35:66:78:49:2a:e9:f8:51:14:e1:e9:
2b:17:88:da:0d:d5:4a:b7:02:79:a5:b9:ff:9d:91:
47:00:a7:1d:de:c2:2d:db:18:f9:46:4e:14:a5:b3:
7e:81:b8:22:99:0f:e3:61:cb:6a:e5:43:0d:e6:c7:
f1:e2:5e:47:08:db:a5:d1:c7:a9:b5:d1:a1:4d:51:
0a:44:be:fc:a8:fd:8b:70:13:02:b1:8e:03:c8:c3:
79:f5:78:21:7f:98:f4:04:fb:10:ce:2c:e2:25:17:
8c:40:d8:a4:5c:08:a9:60:39:ce:05:c1:e1:25:61:
1a:56:d1:0a:ce:13:04:0e:dc:f4:0e:a7:d1:ca:1c:
eb:eb:86:25:0e:29:81:b6:23:4a:99:6a:e5:36:8d:
44:69:59:79:f3:04:4b:aa:43:47:9f:21:f2:e8:89:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:53:1F:BA:CA:97:76:AE:B6:02:41:6E:13:0B:1D:56:2F:B4:1E
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Mm9TH7rKl3autgJBbhMLHVYvtB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:84:0d:01:de:6f:83:1d:2a:36:6c:40:7a:44:93:4a:aa:ff:
65:1e:92:16:e5:48:dd:e8:b8:54:81:e8:9f:33:43:47:06:04:
db:ea:0e:11:49:1f:fc:13:3a:91:ff:d2:4a:89:72:5d:c9:88:
8b:db:61:6e:37:99:8e:2d:4a:59:d0:2a:f2:13:f3:7e:4c:65:
ba:36:db:b1:99:6b:f7:7b:48:2f:ae:04:7e:40:c7:9b:d0:30:
0d:66:fc:57:75:86:18:81:fe:87:f7:ef:c4:be:65:89:75:5b:
95:9b:a6:99:94:e1:92:9e:17:25:d2:b8:c7:16:e3:46:6d:f0:
aa:84:e1:8d:54:1c:43:23:90:bd:a3:74:08:82:7e:2e:47:a8:
49:59:1b:93:e6:c1:7d:72:d8:fd:7c:a3:d4:53:65:6c:f8:9d:
cd:1e:18:e8:ac:fd:03:1a:3f:e7:1f:15:76:1a:06:52:96:5f:
df:43:f4:56:1c:36:e4:57:82:5d:06:68:ff:8b:cd:85:1e:ca:
8a:dd:b0:5f:8e:d3:80:b6:92:87:0a:e6:76:10:64:90:31:4d:
5e:12:05:2f:4c:03:05:b7:12:d6:68:da:b4:83:51:91:95:d2:
1f:ad:9f:95:5a:58:c3:e0:ec:8e:e5:4b:50:2d:14:53:24:f0:
04:b8:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:41 2024 by rpki-client on console-fra.rpki-client.org