Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/mnz-9_MUv3aZc2B2HpvhF24X4e0.roa
File: mnz-9_MUv3aZc2B2HpvhF24X4e0.roa (raw, json)
Hash identifier: Zidg3HaTZC9MNyCftE/6GIT/Bj683MYuRNTNFFuFJXc=
Subject key identifier: 9A:7C:FE:F7:F3:14:BF:76:99:73:60:76:1E:9B:E1:17:6E:17:E1:ED
Certificate issuer: /CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Certificate serial: 01856BDC871512274C03EA8F453CE04293C7
Authority key identifier: 9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/mnz-9_MUv3aZc2B2HpvhF24X4e0.roa
Signing time: Sun 01 Jan 2023 05:44:52 +0000
ROA not before: Sun 01 Jan 2023 05:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 91.199.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:87:15:12:27:4c:03:ea:8f:45:3c:e0:42:93:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7ef2852d4cb2eabc978ec1c5a1a4d09e04afb5
Validity
Not Before: Jan 1 05:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a7cfef7f314bf76997360761e9be1176e17e1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:b1:c9:2d:8b:be:6c:e4:99:2d:d5:7b:d7:
30:d7:db:b9:c1:53:d3:bd:3f:26:5c:2f:ce:ef:a0:
37:19:69:97:0e:86:1b:72:40:e3:cd:07:ca:df:3d:
2d:03:4d:05:ec:e2:cd:48:48:65:42:44:9e:4c:3e:
24:4b:4b:02:24:f4:c1:81:be:ce:3f:a9:bf:95:c5:
21:7c:9f:27:2c:48:f5:87:4c:73:1c:2e:c2:60:e3:
17:9e:81:a9:98:13:1b:e0:f8:40:42:f5:d6:71:ac:
a3:75:66:d1:41:f4:16:14:b7:05:d2:ac:26:18:d2:
95:db:72:15:48:e4:b3:88:7a:3d:00:e9:d5:cd:b9:
23:72:dd:e5:5f:53:a6:23:49:f2:ae:be:a4:52:c2:
90:41:e2:11:e5:c9:03:03:64:49:1a:38:a3:4c:6c:
0e:7c:ad:14:ed:32:92:87:8f:42:a2:1f:e7:5d:c3:
bd:ed:2f:cb:d3:d2:9f:b2:6f:e1:bf:22:85:2c:77:
34:b5:a4:57:79:f8:63:6b:11:e4:f7:62:9a:1b:a8:
90:7f:51:61:7a:2f:cf:7f:02:b9:be:df:c2:87:ee:
7b:c2:f7:e4:74:bb:88:d1:2e:48:46:7d:ce:4e:98:
82:0b:7f:12:69:22:0f:b2:5a:1f:0e:cf:4c:bf:79:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:FE:F7:F3:14:BF:76:99:73:60:76:1E:9B:E1:17:6E:17:E1:ED
X509v3 Authority Key Identifier:
keyid:9C:7E:F2:85:2D:4C:B2:EA:BC:97:8E:C1:C5:A1:A4:D0:9E:04:AF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH7yhS1Msuq8l47BxaGk0J4Er7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/mnz-9_MUv3aZc2B2HpvhF24X4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8c553-3b9e-4edd-a7bb-5237c03b8813/1/nH7yhS1Msuq8l47BxaGk0J4Er7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:cb:fc:f5:b3:32:0b:9e:90:55:65:a8:b6:69:dd:77:f8:66:
ec:45:d8:37:4c:63:f0:8d:a7:b6:d1:92:95:cc:4b:61:78:5d:
12:b5:6d:0c:2d:ce:e9:2e:d4:02:1c:6e:11:fa:9e:5b:e4:a7:
da:c6:31:26:8e:11:0f:78:f4:f8:fb:b1:23:cd:16:9f:06:39:
00:e8:1a:41:86:7c:48:f5:75:f5:1f:46:b3:72:b6:69:9e:cb:
52:d1:50:f3:ea:7d:e4:98:4b:da:be:a2:6c:75:79:3b:1a:49:
3b:4a:4e:77:b0:a5:21:52:b9:fa:c4:a1:5a:92:c1:27:c9:fe:
93:d8:c2:fc:14:c1:54:85:d2:f5:81:19:10:96:04:35:aa:23:
fc:19:58:44:bf:de:0d:1c:cc:e5:ac:a6:a5:4b:7c:b6:3c:d4:
78:6f:73:53:57:58:f9:68:fb:07:46:35:92:08:a2:84:c3:86:
cb:53:8c:97:c6:48:96:84:24:0f:da:df:c7:77:a8:93:9a:c0:
54:d8:64:70:9e:0c:80:6d:5e:bf:c3:43:c0:23:1c:60:35:bc:
c5:63:4a:44:9a:27:86:00:ae:c7:d4:72:06:fb:09:3e:a2:0d:
11:21:0c:22:48:02:0a:59:e2:4c:9f:c1:d7:c3:34:05:eb:ca:
1c:99:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-fra.rpki-client.org