Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MZHwVDZVV2wt1XP3Fptd9ZF_lK0.roa
File: MZHwVDZVV2wt1XP3Fptd9ZF_lK0.roa (raw, json)
Hash identifier: AA/Q0NiSwDc4FNKwXx/H8Nhxn2Mq45ykBWb7bkm5Fjk=
Subject key identifier: 31:91:F0:54:36:55:57:6C:2D:D5:73:F7:16:9B:5D:F5:91:7F:94:AD
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01856F2FDFBE4D7BD0D34882FD78F3220EEB
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MZHwVDZVV2wt1XP3Fptd9ZF_lK0.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58281
IP address blocks: 185.30.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:df:be:4d:7b:d0:d3:48:82:fd:78:f3:22:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3191f0543655576c2dd573f7169b5df5917f94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:ed:50:87:99:a1:7b:cb:5a:66:45:8f:65:
cb:76:ea:58:aa:07:99:27:06:e4:c5:5e:56:da:0e:
df:eb:6f:3b:38:98:1e:4b:62:20:b3:7b:32:15:1b:
5e:b8:4e:3e:0a:94:06:2b:50:d9:58:79:af:99:e9:
f6:4c:ef:44:9f:24:6c:13:e0:21:2a:95:78:63:8e:
10:bc:7a:a9:9a:f6:a3:89:cc:b1:e7:fc:2d:e4:b4:
74:67:6f:f9:e5:24:d6:69:43:e1:75:95:88:90:f2:
09:7f:26:3b:6c:98:26:6d:c1:ef:52:0c:19:f2:b3:
72:c8:6b:ab:a4:e9:58:4c:fe:f1:7a:6e:a0:f2:af:
7e:0d:d1:4d:e7:c1:55:52:1e:c9:b4:b7:ea:65:11:
32:1b:ce:c1:0b:78:70:af:9e:1d:fe:15:2d:45:9a:
9e:13:4b:ce:80:b8:73:3f:75:4e:6f:4c:27:78:5b:
ae:17:a0:b8:e1:81:63:77:47:2e:3d:7b:3c:15:70:
7a:f9:b1:b6:6a:54:30:48:fd:7c:f6:a1:c1:02:ff:
85:87:2d:98:10:81:c3:25:30:5e:18:d9:8d:f9:f7:
ae:75:48:bd:4a:f2:59:a1:15:5c:f0:04:cc:34:ff:
53:12:14:c6:3e:7b:15:85:93:0b:b1:94:f6:9c:a3:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:F0:54:36:55:57:6C:2D:D5:73:F7:16:9B:5D:F5:91:7F:94:AD
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MZHwVDZVV2wt1XP3Fptd9ZF_lK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:42:4b:73:f4:95:fc:ce:94:8b:4f:27:1b:5b:62:c6:85:8e:
75:d5:32:eb:58:77:6c:7d:cf:a9:90:1f:67:3d:7b:69:1d:a7:
1e:f8:0b:fd:a4:c5:e2:d2:38:e1:d4:ae:ab:31:25:c6:2e:65:
b5:c9:93:e0:f0:33:35:c1:36:52:81:58:6f:f2:ef:97:7b:9d:
62:90:31:11:5d:f6:38:51:8a:60:17:b5:54:fe:3b:86:eb:34:
c7:fd:fd:3f:e1:e5:e4:f4:df:5b:5a:fe:16:29:e5:4e:29:bf:
9b:7f:7b:16:37:44:95:36:42:9b:d5:a7:4b:d8:cb:8e:1d:f2:
b6:88:15:8d:6e:55:1b:32:f1:7f:f1:80:d2:69:9e:48:ae:5d:
65:15:b0:31:4b:04:1e:7e:7e:e1:49:dc:91:fc:95:b7:2f:d9:
4f:fb:a8:0c:89:75:98:b7:c8:93:7a:13:91:85:b2:34:24:f4:
6a:c6:2a:37:f9:2e:08:b0:bf:3d:3e:69:52:96:65:f8:33:e8:
af:d9:c3:79:2e:ab:26:4f:59:6b:5f:37:b1:96:20:c0:47:8d:
90:8a:55:55:77:c5:b6:f5:bd:34:34:c4:d4:20:c4:7b:72:f9:
63:a3:27:22:72:eb:4a:6b:df:53:a5:47:ea:5f:0c:8e:8d:84:
a2:fc:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:49 2024 by rpki-client on console-fra.rpki-client.org