Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MVo8K54bU1TSH47KnVdSzkTIZyI.roa
File: MVo8K54bU1TSH47KnVdSzkTIZyI.roa (raw, json)
Hash identifier: xZAXbc2Nch2AANRPns9dzWA0Vkuje23aoTC7UGzd7ME=
Subject key identifier: 31:5A:3C:2B:9E:1B:53:54:D2:1F:8E:CA:9D:57:52:CE:44:C8:67:22
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C41668977187A741DE072DEB9402976
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MVo8K54bU1TSH47KnVdSzkTIZyI.roa
Signing time: Sun 01 Jan 2023 07:35:03 +0000
ROA not before: Sun 01 Jan 2023 07:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142553
IP address blocks: 2a0d:2587::/36 maxlen: 48
2a0d:2587:3000::/36 maxlen: 48
2a0d:2587:7000::/36 maxlen: 48
2a0d:2587:1000::/36 maxlen: 48
2a0d:2587:5000::/36 maxlen: 48
2a0d:2587:4000::/36 maxlen: 48
2a0d:2587:2000::/36 maxlen: 48
2a0d:2587:6000::/36 maxlen: 48
2a0d:2587:c240::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:66:89:77:18:7a:74:1d:e0:72:de:b9:40:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=315a3c2b9e1b5354d21f8eca9d5752ce44c86722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:bb:1d:88:7f:c5:cb:94:6c:4d:da:09:35:
dc:13:30:b0:05:0d:7e:66:d1:fc:ec:ff:cf:df:05:
92:cc:de:42:54:bb:f2:26:9c:cb:46:f2:ab:25:8d:
1a:0e:99:2f:00:2f:df:8a:8d:5d:57:2c:89:0c:ce:
76:b0:e4:e8:e0:e4:14:95:65:38:3f:d1:ae:df:60:
a1:77:c6:6f:e9:4a:45:3f:b4:c4:a1:5c:73:5a:9e:
49:91:35:86:5f:64:23:1b:a4:6e:a2:62:9b:43:1b:
0a:10:fa:fe:f0:95:1e:1e:3e:28:43:90:3d:5c:3a:
7e:23:6b:c4:24:df:db:27:1c:a4:8a:d9:fc:7f:79:
66:a4:4f:c2:9e:a3:3d:cd:fd:7b:71:3d:4b:05:01:
51:19:81:be:7d:95:18:d0:d8:83:95:f7:b4:2e:08:
ce:0f:c1:4d:6d:50:ee:57:9e:c4:03:c0:1d:ea:af:
16:7d:9b:56:27:1f:3e:ae:d0:b2:a7:db:f4:23:b4:
f6:9e:74:aa:2c:b3:03:49:65:df:7c:35:8a:c4:43:
a0:55:63:2f:32:88:77:11:b4:90:82:16:9b:d1:f2:
57:00:88:a8:2f:e4:11:87:d0:1d:e8:53:3c:c1:94:
14:3a:fc:4c:ef:29:11:39:29:01:e9:88:3f:a7:b8:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:3C:2B:9E:1B:53:54:D2:1F:8E:CA:9D:57:52:CE:44:C8:67:22
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MVo8K54bU1TSH47KnVdSzkTIZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/33
2a0d:2587:c240::/44
Signature Algorithm: sha256WithRSAEncryption
3b:e7:4a:44:53:97:d5:20:1a:08:78:63:22:50:15:43:8b:b4:
8e:61:83:74:90:c2:e4:c7:8a:32:7d:c9:4e:ab:bc:2f:f8:62:
15:9a:1e:41:6a:86:8e:e1:86:ed:63:88:02:7e:4d:c6:85:26:
bf:93:8f:76:23:27:58:c5:c0:2d:e6:a6:37:48:93:33:66:26:
34:f4:5d:f6:e9:cc:86:6d:6e:70:43:bb:42:d0:3f:82:83:88:
48:16:c3:93:b6:59:1a:da:99:72:06:85:d3:80:eb:ef:33:81:
d6:84:de:ed:5f:f2:11:c4:8d:56:89:26:df:e3:08:df:ed:43:
80:49:0e:3c:ec:08:b4:8b:ed:ca:5b:14:4c:76:23:57:16:75:
9f:69:e3:8b:32:67:23:c2:22:b2:7a:76:62:5d:32:a6:72:7c:
92:5c:04:72:ce:05:0d:8e:89:b3:36:b2:4b:4f:5c:6e:2f:f6:
b9:49:14:cf:10:a3:ab:31:26:c0:30:fd:a8:ee:61:c0:71:70:
b4:ad:80:08:38:6b:c1:6e:ae:df:cf:20:de:ed:c8:91:ad:84:
08:7d:db:06:cf:a9:9a:4f:d9:10:e1:01:ed:e4:7c:a9:df:8d:
4d:1f:c7:c2:8f:84:1b:d5:ab:3e:2b:e1:7d:3e:57:56:64:0e:
a3:b0:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org