Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MZYhuj0QEDHJV5y2DKYPJs5XtFM.roa
File: MZYhuj0QEDHJV5y2DKYPJs5XtFM.roa (raw, json)
Hash identifier: x33b+ctcueanVfWDTJuJuJnfcUIA/n84NZnLuTDwYHo=
Subject key identifier: 31:96:21:BA:3D:10:10:31:C9:57:9C:B6:0C:A6:0F:26:CE:57:B4:53
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD278F931D2BEF396865670F41A5C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MZYhuj0QEDHJV5y2DKYPJs5XtFM.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8642
IP address blocks: 192.165.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d2:78:f9:31:d2:be:f3:96:86:56:70:f4:1a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=319621ba3d101031c9579cb60ca60f26ce57b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:20:bb:71:d3:5a:0f:b8:4f:9c:61:57:22:
79:87:3c:77:ab:50:de:4a:14:f9:fd:42:a3:cf:e9:
59:7d:54:15:21:e0:09:43:7d:3f:fe:e9:cd:ea:6d:
c1:0e:da:cf:9b:45:74:35:cf:67:78:ca:13:fe:e6:
e6:9d:f9:f6:b2:35:50:c0:3f:b8:1e:84:92:86:04:
7b:29:b3:56:92:ca:f2:7b:a3:86:ea:5e:c2:e3:e0:
c5:d1:f3:19:28:4c:9c:8e:bb:24:4f:0d:6a:fa:7a:
26:be:c6:0b:2c:92:43:eb:23:51:1f:27:38:0d:c7:
26:5a:d6:f4:80:eb:52:00:b7:8f:fc:b9:af:25:73:
b0:eb:bf:c5:73:63:f6:14:f0:09:d7:a1:bf:5d:7e:
ec:c0:7b:33:89:69:50:f0:89:b0:af:c0:c2:b5:7d:
48:62:8f:53:5b:9a:77:be:bb:0f:3c:ea:1e:b3:49:
e3:65:ca:4c:78:b3:bf:53:a1:4a:22:a7:88:8b:47:
37:a9:fc:db:4a:37:a9:5d:fe:9b:90:83:d6:1a:e3:
44:7b:74:8b:57:a1:b4:97:30:c7:a7:68:cc:e2:2b:
b0:0d:ab:be:e1:95:f1:5e:13:3c:98:eb:aa:27:33:
3b:24:dd:b6:70:f5:fc:45:8b:ff:c6:2b:c8:c5:5e:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:21:BA:3D:10:10:31:C9:57:9C:B6:0C:A6:0F:26:CE:57:B4:53
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MZYhuj0QEDHJV5y2DKYPJs5XtFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.86.0/24
Signature Algorithm: sha256WithRSAEncryption
78:95:cf:a1:98:74:ce:ef:82:ce:c9:1c:23:7b:9f:fa:af:8c:
24:32:99:02:a7:5f:4c:40:e8:92:21:d1:dd:09:1a:d5:57:b6:
4a:fe:a9:a5:e7:d2:55:de:c6:d1:da:2f:6b:ed:54:95:cb:a7:
03:b3:20:3b:0f:66:74:94:0e:63:7b:62:e2:75:64:00:38:01:
03:d8:64:39:b8:89:43:78:5b:b5:85:3e:bb:0d:ad:4c:3b:db:
06:f2:33:0c:9f:63:38:f4:0a:a1:21:f0:03:31:94:45:29:f3:
03:07:68:ca:b9:ae:e1:b3:68:55:98:63:27:93:e1:ba:89:d9:
4c:52:7b:9e:45:c7:ac:a2:a1:e3:5c:00:d7:c3:34:5e:f6:6c:
68:56:84:9a:8e:50:31:1e:3f:57:f3:83:68:37:b1:02:cf:3e:
1f:03:38:85:05:63:e5:18:d7:e7:f6:bc:45:4e:e4:a7:7d:53:
67:23:39:be:59:4e:0e:56:a5:f2:43:4d:4d:02:76:f6:aa:1f:
30:b1:21:5b:63:2a:da:07:20:6a:09:0d:07:fc:d9:d6:79:bf:
30:39:fc:50:e6:c9:74:7f:1a:b9:55:e7:6d:6f:4c:26:e9:16:
d6:fc:d2:67:f6:7b:79:e1:f2:f6:a7:84:c7:55:33:b4:f8:1c:
e5:ca:8f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org