Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Mzlws_TysHQZ1qZANG9zqercx44.roa
File: Mzlws_TysHQZ1qZANG9zqercx44.roa (raw, json)
Hash identifier: 6kDxtcA5iEplzaugbPXFR6vrMltZi0m5sH0jFX0IZzw=
Subject key identifier: 33:39:70:B3:F4:F2:B0:74:19:D6:A6:40:34:6F:73:A9:EA:DC:C7:8E
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DC3C6DA0F3D493F8D62B813B01855
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Mzlws_TysHQZ1qZANG9zqercx44.roa
Signing time: Sun 01 Jan 2023 23:14:48 +0000
ROA not before: Sun 01 Jan 2023 23:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49027
IP address blocks: 195.33.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c3:c6:da:0f:3d:49:3f:8d:62:b8:13:b0:18:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333970b3f4f2b07419d6a640346f73a9eadcc78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:79:73:06:39:ac:9b:51:1f:99:fb:ee:80:
7f:5a:18:cc:82:20:24:ed:23:71:e0:c7:0d:8e:97:
16:56:0a:d0:1a:5d:76:32:52:98:38:70:4a:1c:a1:
b3:4f:a3:7a:98:9d:00:70:d0:6b:dc:0d:5d:c2:0e:
ee:fd:ef:40:62:1b:1f:71:42:82:3e:10:2d:be:16:
ce:f2:5d:8b:dd:ef:c7:77:8d:5c:c3:74:60:f7:35:
91:ad:51:3f:bc:22:d2:7a:d5:f4:ab:33:e7:13:df:
47:76:aa:68:7c:bb:db:50:b7:a5:40:bc:a6:c1:2e:
44:dc:e8:01:a5:a4:9a:e8:61:a0:c4:07:56:ce:f7:
aa:fa:a7:26:1d:fe:e6:85:b8:46:aa:c2:eb:51:92:
80:d1:fb:f9:38:09:8e:a2:02:9d:52:ae:02:40:f2:
31:a7:ed:b4:5c:24:d4:3c:ff:da:c0:e9:00:d9:f6:
00:2e:8d:51:ab:c8:de:a2:39:4d:6d:d8:2b:96:f5:
4b:0e:a8:0e:e4:55:03:23:ed:3f:73:47:6c:83:7b:
33:50:cb:68:07:f1:e3:0a:8a:45:4e:28:50:b3:76:
9c:e1:53:86:40:fe:3b:f0:2c:e1:02:df:dc:0c:63:
5d:cc:ea:f7:fa:e3:e0:ec:ac:ff:22:13:37:3a:17:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:70:B3:F4:F2:B0:74:19:D6:A6:40:34:6F:73:A9:EA:DC:C7:8E
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Mzlws_TysHQZ1qZANG9zqercx44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.33.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7d:54:2e:be:c0:4f:cf:f4:10:18:19:d2:cf:5e:e8:94:af:
dc:e1:51:0a:6e:e0:cf:f2:75:ee:fb:4d:64:e5:d2:37:22:dd:
f9:38:c7:2d:e5:4b:72:de:ba:58:e5:b5:a2:06:9a:7f:c8:20:
33:ee:25:06:b4:e1:ec:ee:dd:46:b9:bf:8b:88:fb:ac:f9:9c:
5f:68:47:b4:74:e7:25:95:c0:42:01:fe:fe:b0:38:28:f9:dc:
42:2c:9f:f5:5d:81:8c:25:1b:91:a4:5a:3a:64:be:4a:4a:c2:
0f:ad:f8:08:66:b6:9a:95:50:84:ad:36:1f:bc:92:1a:b6:ec:
ba:6a:c4:58:f2:4f:91:9f:f6:17:7c:0e:6c:56:3b:67:c5:07:
7f:86:a8:89:bb:9d:52:be:5f:59:d7:f8:cd:b8:2e:ff:b2:09:
5b:37:09:ad:df:6e:7c:6c:ef:5d:82:0f:62:0d:43:a4:8b:5c:
81:e0:1a:e2:ff:9b:0f:76:2c:25:0b:c8:1c:07:cd:b1:38:5e:
68:2d:ef:8a:95:82:69:5e:df:7f:94:81:91:6e:60:77:94:08:
dc:39:0a:90:26:ad:ef:93:dd:b2:81:91:cb:81:77:9e:a0:bf:
d2:dc:74:f7:0b:b8:3e:b7:f8:f4:6c:3d:c3:a5:95:d5:3f:95:
60:25:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org