Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/miZYdOmLM95VA_VdkBEWBdXGW_U.roa
File: miZYdOmLM95VA_VdkBEWBdXGW_U.roa (raw, json)
Hash identifier: tqX4DeTR6GztqCooKifNNnfr/KGvMJS6GpPEDwiiBYY=
Subject key identifier: 9A:26:58:74:E9:8B:33:DE:55:03:F5:5D:90:11:16:05:D5:C6:5B:F5
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 01857255BE7CE29D16250FE9C353E3E9945A
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/miZYdOmLM95VA_VdkBEWBdXGW_U.roa
Signing time: Mon 02 Jan 2023 11:55:00 +0000
ROA not before: Mon 02 Jan 2023 11:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29217
IP address blocks: 217.150.160.0/20 maxlen: 20
217.150.165.0/24 maxlen: 24
217.150.161.32/28 maxlen: 28
217.150.171.0/24 maxlen: 24
83.174.64.0/18 maxlen: 18
217.150.175.0/27 maxlen: 27
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:be:7c:e2:9d:16:25:0f:e9:c3:53:e3:e9:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 2 11:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a265874e98b33de5503f55d90111605d5c65bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:dc:cb:47:08:a9:e3:34:e1:f6:6c:b5:6e:
ca:92:c2:bb:d5:90:67:fe:9b:6d:f3:b0:b9:0c:98:
13:9e:08:a7:51:4a:0a:e6:50:73:51:d9:a2:5a:3a:
c2:91:95:cb:f4:b0:cd:3f:16:4f:7a:fa:05:c7:7d:
31:cf:3a:a1:2c:f3:08:f8:48:ed:fc:82:28:58:26:
c5:e3:35:cc:22:62:9e:a4:bd:04:5f:15:77:4a:30:
0d:3d:25:f9:c4:13:27:96:73:59:36:1e:fe:f4:82:
b1:23:d2:a9:60:22:54:9e:fb:fe:fd:ca:57:fe:26:
0a:c8:10:2c:65:a2:e0:91:46:b4:34:0d:a1:ab:31:
95:29:d6:ee:26:f5:9a:b3:47:33:35:8f:92:bd:4e:
3e:83:be:8f:89:77:37:7e:df:24:c6:b3:57:e3:8e:
99:6d:0e:60:04:29:2d:93:43:17:75:0f:a2:43:19:
f1:d7:9a:0c:68:c5:11:61:ad:a7:ab:e6:89:1e:e1:
90:d5:9f:bf:e7:33:fd:dd:ca:26:e2:8b:6b:d6:09:
a3:a8:68:74:60:ec:12:4f:90:6a:48:8b:46:73:f9:
d1:d7:98:53:b9:81:c9:57:27:c7:d0:25:9a:dd:2b:
29:82:95:1c:80:86:f8:ec:31:29:1c:29:bf:4f:a7:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:58:74:E9:8B:33:DE:55:03:F5:5D:90:11:16:05:D5:C6:5B:F5
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/miZYdOmLM95VA_VdkBEWBdXGW_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.174.64.0/18
217.150.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:4c:c0:66:d6:38:78:c1:7b:33:6a:94:bf:a8:dc:bc:09:3a:
95:7c:30:f0:0b:5c:15:98:c5:51:c1:85:b7:1a:b3:21:ee:dd:
4d:f2:8d:e3:d0:70:78:b1:17:ee:32:c7:82:d9:d3:e0:51:88:
3f:40:66:b2:87:11:4f:f3:4a:87:52:2a:4e:e3:7b:6d:5d:90:
ed:a4:2f:71:ac:e1:ec:63:7d:40:a3:a3:87:65:2d:16:f5:0b:
b2:c1:28:ef:1f:6c:1d:3f:fb:f5:0c:7c:d7:60:84:57:13:23:
ab:8b:49:80:ca:77:1d:a9:c3:5d:65:de:67:07:c6:ed:3a:c5:
0d:d3:4e:56:4b:da:9a:9d:3a:fa:62:9f:86:9e:e5:39:32:12:
71:b1:67:27:98:a9:7a:1f:86:67:ca:e8:ee:3d:c1:59:30:ad:
84:fd:3b:e0:a2:02:15:2a:1e:e8:dd:89:3c:77:21:8a:b2:b1:
f9:5b:3d:d1:d4:ad:6b:57:fc:b4:8c:a3:f8:6d:4f:6f:16:11:
2c:20:97:cf:fb:72:56:2e:62:39:27:5e:4a:cc:79:2d:3e:7d:
41:39:29:7c:73:74:d5:cb:71:a6:82:3e:6f:bf:a5:18:91:b2:
43:f8:8f:98:1b:21:9a:bb:82:09:ce:95:f4:93:32:39:35:cd:
97:57:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:20 2024 by rpki-client on console-ams.rpki-client.org