Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mzr1uOkbBlVRF7YDCMd_z9GBe1U.roa
File: mzr1uOkbBlVRF7YDCMd_z9GBe1U.roa (raw, json)
Hash identifier: PB72HOHgv6vosJg28q/peWy90+YIvRVxloZEunmFCqI=
Subject key identifier: 9B:3A:F5:B8:E9:1B:06:55:51:17:B6:03:08:C7:7F:CF:D1:81:7B:55
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D30DB40C25A8D37CB059FAF1AAA314ED5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mzr1uOkbBlVRF7YDCMd_z9GBe1U.roa
Signing time: Mon 22 Jan 2024 11:08:11 +0000
ROA not before: Mon 22 Jan 2024 11:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147287
IP address blocks: 77.81.182.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 17:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:db:40:c2:5a:8d:37:cb:05:9f:af:1a:aa:31:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 22 11:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3af5b8e91b06555117b60308c77fcfd1817b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:24:5f:5f:7a:a1:10:9e:03:c0:62:22:2a:
a4:8b:52:6b:09:b0:2f:95:f9:d2:07:0c:4e:5e:af:
c8:e6:2d:a0:61:26:53:fb:7c:0c:bd:c0:11:9a:fb:
75:ec:aa:ba:06:f9:00:f7:97:9a:dc:1c:b4:e8:56:
b7:ef:49:5f:31:f5:05:94:e8:ed:14:26:ed:f4:3e:
dd:44:fa:f0:bc:bd:9a:77:01:ca:29:bc:dc:bb:bd:
77:af:64:3c:69:23:ba:92:57:06:7b:82:65:58:75:
d0:de:df:8f:07:24:55:86:6e:a2:d5:b2:1c:41:e4:
72:6c:43:52:77:5c:b5:6f:3d:69:18:e6:77:0b:6e:
bf:2d:1c:19:68:76:15:b6:08:9c:7d:7e:a8:c5:b0:
55:5b:79:f1:89:98:bb:b0:d1:fb:bf:00:28:44:0a:
01:de:da:d6:dc:10:07:a4:a9:97:07:d1:2d:b9:46:
a3:1f:72:a5:20:3f:64:50:b9:82:01:ad:34:06:55:
e5:f3:3c:f1:5b:8a:8f:f6:4e:69:6b:1b:3a:ea:1a:
8b:1b:3b:d8:ca:69:99:aa:15:ed:65:70:d1:34:38:
f4:29:21:1c:92:9b:01:08:8b:ab:50:86:fc:cc:bf:
3f:4c:52:47:be:c6:f2:f8:9c:bf:81:0d:ae:0a:cf:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:F5:B8:E9:1B:06:55:51:17:B6:03:08:C7:7F:CF:D1:81:7B:55
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mzr1uOkbBlVRF7YDCMd_z9GBe1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:86:08:cb:e0:03:40:3b:97:0d:05:0f:e6:d2:35:db:ec:19:
26:3a:c3:7e:69:80:18:3c:e8:a8:6a:67:db:0c:88:8c:70:01:
0e:fe:df:5c:40:92:a2:72:1f:43:6b:97:9b:d8:c9:26:57:7b:
bd:c8:62:b2:ba:6b:75:8b:d1:a0:4d:13:3e:68:9c:a8:38:25:
fa:f9:bc:9f:99:88:61:2d:0a:c1:22:be:67:d0:b7:89:84:f9:
30:73:d4:64:fb:7a:f7:6f:ca:36:93:d1:bb:9e:d0:bb:9e:f2:
dd:d0:00:a5:21:33:a7:23:15:03:71:7f:7e:98:5a:96:a0:ff:
e2:f9:73:26:f4:e0:b8:9d:36:db:b1:da:95:3c:da:04:a4:2f:
6f:b7:56:0b:b6:f0:79:08:8a:ab:16:a6:4b:8a:d7:f8:be:72:
26:7b:54:d9:85:28:46:f5:f8:84:25:58:4c:81:9d:da:3d:86:
a8:89:59:1c:d8:f7:67:65:bc:dc:c6:28:f6:ff:d2:69:f7:f5:
34:bb:92:f5:50:9c:9d:a1:58:1d:ea:92:e9:c6:c8:c1:9f:41:
50:ee:c7:d7:ca:1e:36:97:03:7a:a2:3d:9a:4e:2e:47:b5:e7:
02:cd:e9:90:b7:4e:9e:d6:e5:6e:75:63:32:4f:de:c2:47:83:
07:40:3f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org