Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/mzr9mfgn6YbIWaxS4PAoRIc_60U.roa
File: mzr9mfgn6YbIWaxS4PAoRIc_60U.roa (raw, json)
Hash identifier: Aakvi1v/I81jHrO5RiQtnWD5Nr3gRfkClmlSUfOLwu0=
Subject key identifier: 9B:3A:FD:99:F8:27:E9:86:C8:59:AC:52:E0:F0:28:44:87:3F:EB:45
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 018570950115E359E921A8C5E072B166A809
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/mzr9mfgn6YbIWaxS4PAoRIc_60U.roa
Signing time: Mon 02 Jan 2023 03:44:51 +0000
ROA not before: Mon 02 Jan 2023 03:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56368
IP address blocks: 91.198.196.0/24 maxlen: 24
2a0f:8840::/29 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:01:15:e3:59:e9:21:a8:c5:e0:72:b1:66:a8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Jan 2 03:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b3afd99f827e986c859ac52e0f02844873feb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:ec:ef:c5:27:3a:38:31:7f:44:f6:bb:8a:
49:93:4b:38:25:9f:f7:d2:a6:de:12:63:eb:8d:08:
d8:0b:ba:83:45:b2:a2:b2:10:99:f7:0e:4c:f1:c7:
73:41:3d:c4:fb:24:eb:e3:3d:11:2c:f0:91:d4:38:
61:bf:0a:ec:a0:33:b7:43:34:a0:95:f3:3f:8a:46:
5d:7e:ba:e0:4c:33:cb:90:32:08:a9:4c:bc:a2:7c:
2a:31:19:f9:de:b7:0f:74:18:f6:9f:f8:ad:f2:97:
7f:02:2f:bd:dc:63:0c:1e:ea:aa:9a:ec:fe:b1:27:
53:f0:e2:14:76:bf:f1:e0:8e:b0:6c:fc:6d:4a:f3:
a4:ea:6d:b7:93:bb:51:9e:50:12:a5:53:d2:d8:a2:
76:fb:5f:35:cf:d1:96:81:ef:45:34:27:65:ff:7b:
06:f3:5c:5f:d6:63:68:97:a4:78:6e:50:34:c8:74:
62:bd:a7:87:5d:5c:af:ab:61:fb:c6:89:35:ba:ad:
81:67:56:7d:46:f5:a3:f2:e6:4e:af:59:71:8a:8c:
43:ef:51:f1:58:ba:b8:1d:6c:53:84:98:ce:9c:5b:
4a:3e:51:7f:9d:11:85:98:b9:3c:70:57:a1:99:d5:
61:fb:e4:76:6f:f6:c3:f2:f1:bf:ae:7d:b3:61:ee:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:FD:99:F8:27:E9:86:C8:59:AC:52:E0:F0:28:44:87:3F:EB:45
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/mzr9mfgn6YbIWaxS4PAoRIc_60U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.196.0/24
IPv6:
2a0f:8840::/29
Signature Algorithm: sha256WithRSAEncryption
8c:21:93:5a:d1:e0:99:2c:d2:64:a2:b1:59:b2:74:7e:a4:e8:
e1:4c:7d:09:69:5b:e1:ba:24:bf:c4:bb:bd:27:79:1d:56:d7:
33:ea:72:61:d5:56:3b:88:4f:8b:4e:fa:ba:7f:8b:ec:41:19:
65:b5:37:89:3a:a2:36:00:de:b3:c3:56:7e:8d:94:16:8c:b7:
03:aa:5b:57:68:72:ed:00:55:3f:24:20:95:e9:91:34:34:63:
cc:86:18:9f:19:99:a4:ef:2c:a8:c8:f3:5d:87:54:5d:81:68:
94:e3:42:e6:b0:d3:c3:3f:66:06:cd:aa:51:c2:23:82:f9:b6:
4d:e5:c0:da:0d:d1:2e:df:e0:79:f6:9e:04:2f:cb:2e:bd:4e:
77:7d:b5:40:00:ca:18:49:1d:65:5d:f5:32:a9:4b:81:03:ea:
5f:e7:ce:0e:08:1c:55:a9:b0:fe:e5:e6:0a:ca:bc:3d:9d:df:
f5:20:d4:c5:3c:ba:a8:f5:82:6d:ab:e9:fa:16:f2:e1:c3:8f:
ee:d7:cc:87:ef:e7:5b:84:b2:97:24:11:4e:46:21:46:86:f8:
2c:c6:fb:ae:61:f9:19:91:36:b8:ee:d4:86:be:e4:d6:9f:d6:
95:71:96:37:b9:c1:f7:f4:e0:43:27:88:77:2d:e3:23:24:25:
85:ff:8e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:24 2024 by rpki-client on console-fra.rpki-client.org