Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mzczOKEghE-mN2Xaah23QIsRoQQ.roa
File: mzczOKEghE-mN2Xaah23QIsRoQQ.roa (raw, json)
Hash identifier: p8gxAUVF/9NIztsyztHbStyqz60HmvibiR0u5xPQBWM=
Subject key identifier: 9B:37:33:38:A1:20:84:4F:A6:37:65:DA:6A:1D:B7:40:8B:11:A1:04
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018BFB748E2581F051864CAE3F23FCB6C076
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mzczOKEghE-mN2Xaah23QIsRoQQ.roa
Signing time: Thu 23 Nov 2023 09:13:21 +0000
ROA not before: Thu 23 Nov 2023 09:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43153
IP address blocks: 195.136.160.0/24 maxlen: 24
195.136.160.0/23 maxlen: 24
195.136.192.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:74:8e:25:81:f0:51:86:4c:ae:3f:23:fc:b6:c0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Nov 23 09:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b373338a120844fa63765da6a1db7408b11a104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:73:fb:92:85:c5:60:1b:fb:2e:8d:fb:a5:
1d:a2:05:ac:18:ad:e8:ff:f6:85:d9:51:5d:3b:0d:
01:4c:5b:64:02:b4:37:c7:69:4b:d2:e3:06:9a:bd:
8d:4c:45:fe:9a:0b:65:45:5a:fe:94:4d:a8:ba:ae:
66:96:16:5f:29:c8:dc:e9:0c:0e:39:a7:1d:93:a6:
a2:a3:15:df:32:b9:50:06:a4:a5:2f:20:44:50:6f:
55:29:59:63:eb:26:8a:ac:02:b5:d6:59:6f:40:9d:
c5:31:d8:3c:df:94:32:2b:f9:51:af:e7:fb:4f:73:
83:ae:72:74:b3:ec:cf:c6:ce:00:54:e6:b6:10:61:
42:f5:bb:ae:1b:ff:96:0c:af:99:04:fb:28:00:64:
0b:f3:81:55:3e:a0:eb:73:30:a5:a1:6a:2d:9f:79:
18:f2:98:ea:ae:31:8c:e8:c6:b6:97:bc:cd:e0:ac:
c7:a2:70:aa:ae:6b:e5:80:79:7a:97:73:af:6a:24:
8e:08:6c:46:1d:63:47:53:36:26:a3:76:40:d4:2f:
31:b1:be:73:22:25:ce:3f:cd:df:9f:78:63:e5:fc:
7e:7b:f3:f8:cd:7a:7b:a6:e4:ad:e3:db:c8:43:6f:
29:f0:ef:ee:b3:16:ce:45:0f:66:92:53:7c:be:48:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:33:38:A1:20:84:4F:A6:37:65:DA:6A:1D:B7:40:8B:11:A1:04
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mzczOKEghE-mN2Xaah23QIsRoQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.160.0/23
195.136.192.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:0c:14:50:15:1d:2e:21:7f:fc:4c:d0:08:22:8c:0e:7a:e2:
b6:ef:e4:e0:0b:2c:d3:4b:0c:9a:95:95:4e:23:e6:2f:d6:e8:
eb:b2:90:b2:65:6e:d4:47:c1:71:34:ec:5a:f9:02:d1:95:f0:
c4:f8:6e:1c:da:c1:a7:1a:dc:cc:32:e3:be:3e:65:f7:2a:5f:
5a:92:33:7a:ba:41:8a:f8:a7:c0:c3:11:13:bd:75:4b:b5:e9:
a2:08:b2:ea:2b:ac:d9:ee:ff:4b:f7:c6:c1:d7:38:fe:cb:a7:
36:ed:0e:42:3e:bb:cb:2a:10:14:be:d7:5c:43:4f:2a:22:6a:
66:25:db:7d:3b:b6:80:92:c2:90:8d:da:5a:07:ff:0f:ea:04:
a0:f4:7b:42:3e:e0:88:d2:c1:9a:3e:18:5a:a2:4a:45:b2:91:
1a:71:74:7e:2c:fe:49:4b:30:f6:12:55:32:8c:48:3b:e3:0c:
ea:c8:7b:be:29:1f:c8:ba:c4:2e:1d:e0:b8:b2:90:28:ad:4f:
e5:8f:af:5a:4f:1f:6d:f1:a7:8f:28:41:03:1b:5e:c4:b9:b0:
f6:8e:10:a1:6c:c0:51:8d:92:48:00:ff:90:13:b9:59:c1:82:
6b:f4:d9:e0:78:77:e3:f5:03:72:4c:89:0c:74:ad:9d:f1:23:
97:52:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org