Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/MzEfMG8Ws8z8Ic8xaj7Iveod42Y.roa
File: MzEfMG8Ws8z8Ic8xaj7Iveod42Y.roa (raw, json)
Hash identifier: LCgJT4UfwhwaixikgkixkiQTgVMCxZgP8Zq0+kz96Do=
Subject key identifier: 33:31:1F:30:6F:16:B3:CC:FC:21:CF:31:6A:3E:C8:BD:EA:1D:E3:66
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01856E0AE6FF26EDC7A1EA12DECCC1BF3437
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/MzEfMG8Ws8z8Ic8xaj7Iveod42Y.roa
Signing time: Sun 01 Jan 2023 15:54:46 +0000
ROA not before: Sun 01 Jan 2023 15:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:e6:ff:26:ed:c7:a1:ea:12:de:cc:c1:bf:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 1 15:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33311f306f16b3ccfc21cf316a3ec8bdea1de366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:c8:50:d3:fa:10:14:14:8b:2a:cc:c4:fa:
cc:12:bb:dd:64:d1:47:5c:5a:cc:3e:a4:6b:b9:d9:
5a:34:69:e8:2d:84:c2:78:05:2e:7c:d7:8b:be:79:
57:c9:aa:30:2e:b7:f2:8d:fa:65:ac:87:be:b5:fd:
c7:06:ed:9d:39:88:5a:b5:07:9a:86:0d:88:16:31:
ab:a1:b6:99:f8:02:65:cf:cc:ce:f4:55:99:f3:2a:
59:09:e2:61:40:42:66:6f:7f:de:33:03:c4:8f:54:
5c:9a:b5:05:f3:ae:6c:56:be:81:12:8a:f5:59:f0:
4d:14:0d:dd:05:04:13:55:7f:da:c8:73:5f:28:79:
c8:14:8b:60:3b:0a:55:62:78:e5:43:9a:aa:09:8f:
da:fc:29:b5:d3:bc:a4:84:b7:f2:cc:c1:b0:e6:a8:
7a:0f:ac:5d:c5:f0:73:cd:08:45:b8:85:50:eb:75:
d0:cc:36:38:ca:cc:51:3d:8c:6a:db:b9:ee:f7:56:
07:64:48:d9:48:78:7a:b1:1d:9f:d7:ca:9c:98:c5:
69:e1:fd:13:ae:c3:23:20:63:3d:7f:33:e8:b8:f8:
ae:94:3b:58:59:81:bc:55:80:56:c8:12:55:64:cb:
3e:29:6d:31:2f:0e:b8:02:4d:7b:0a:45:82:01:e3:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:1F:30:6F:16:B3:CC:FC:21:CF:31:6A:3E:C8:BD:EA:1D:E3:66
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/MzEfMG8Ws8z8Ic8xaj7Iveod42Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.126.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f6:72:5b:b6:e0:65:ab:d8:d7:0e:eb:3b:02:82:da:0b:af:
40:b0:51:af:d1:31:c6:92:07:c4:9e:17:76:f8:ad:26:e4:92:
7b:4c:ef:f6:10:4e:65:1c:2b:bb:c4:8d:63:f2:19:d3:72:ba:
03:d5:3f:7c:ae:97:26:58:5d:da:f3:6b:72:f6:27:d1:e9:2a:
b0:ef:00:01:66:d5:51:b2:b7:a6:ef:42:c4:13:9a:c1:b5:63:
07:1a:f3:fd:b8:e9:97:a7:f6:ae:c4:13:d8:90:d6:cb:d7:46:
43:23:b9:ac:f4:da:ca:ad:1d:53:f9:36:5c:29:b6:6c:4e:05:
06:3e:15:6a:75:b9:68:f2:0e:64:6b:c7:b3:b6:da:37:36:0c:
9f:2d:90:ae:75:95:b6:87:4c:63:4c:23:d3:b7:f1:39:45:80:
6c:3d:f3:ab:54:71:a1:6d:55:a2:87:47:a4:e6:db:db:23:22:
57:70:a6:6a:27:8d:9e:70:2f:38:b2:3f:fd:5a:f0:d4:e9:14:
eb:c7:0b:54:ac:6d:b1:2c:d6:b3:17:da:36:b8:1b:62:f6:f5:
02:fc:4a:a3:01:fa:2b:36:b7:ed:cd:03:5a:2b:63:03:2f:61:
bb:88:38:29:87:2f:1c:1c:35:0f:37:91:33:5e:a4:3f:72:d9:
4e:66:bf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 19:17:38 2023 by rpki-client on console-ams.rpki-client.org