Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Mwxbdx5_lNSJ9W3_OZGFT68KJ_c.roa
File: Mwxbdx5_lNSJ9W3_OZGFT68KJ_c.roa (raw, json)
Hash identifier: LIZpSNLOqtWlO8Dh6VEF8Cv9XdOSMMVNrVT8rpev7rk=
Subject key identifier: 33:0C:5B:77:1E:7F:94:D4:89:F5:6D:FF:39:91:85:4F:AF:0A:27:F7
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 0187955C85C4CDADF0A2FA3B59D718FA739E
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Mwxbdx5_lNSJ9W3_OZGFT68KJ_c.roa
Signing time: Tue 18 Apr 2023 17:14:41 +0000
ROA not before: Tue 18 Apr 2023 17:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206081
IP address blocks: 2001:67c:c64::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:5c:85:c4:cd:ad:f0:a2:fa:3b:59:d7:18:fa:73:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Apr 18 17:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=330c5b771e7f94d489f56dff3991854faf0a27f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:36:f6:42:a6:ac:69:99:d7:56:2d:e2:47:88:
42:ff:00:4e:29:f1:d3:16:67:0e:57:82:3e:d0:db:
db:d2:1b:6e:af:7c:fb:74:bc:69:e9:82:cd:07:9b:
c7:68:75:fa:f3:4c:7f:df:a3:2f:77:20:14:61:b1:
fe:b1:60:ce:34:4f:a4:46:c1:0b:1b:92:4e:ae:37:
29:f1:28:54:34:2b:9a:95:1b:9c:81:92:ee:20:b8:
3b:76:59:4d:57:25:1c:09:68:56:3f:b0:5f:e3:1a:
18:40:04:69:60:67:5f:f2:0a:88:f7:a1:ec:43:aa:
42:1a:72:db:7b:74:01:2e:4f:7b:e1:e4:5e:35:f3:
e0:dd:d6:bd:1b:2e:c1:b3:be:33:37:82:bf:58:7b:
ba:e9:2c:29:d8:a7:c7:a5:85:6e:06:ab:c3:11:51:
6b:ec:76:29:f7:19:59:47:db:b8:db:e9:31:ae:c0:
1f:af:86:29:e3:61:73:ec:d4:19:81:b6:49:dd:a0:
03:22:c4:33:0a:5f:70:a0:a9:77:fa:c0:de:dc:f3:
90:df:51:b5:47:d1:19:08:22:3c:50:9f:da:21:93:
ac:b2:36:12:aa:50:64:75:05:ea:c1:cb:90:49:22:
f4:e9:ae:68:e4:d0:9e:0a:98:52:f5:9a:ab:2d:97:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:5B:77:1E:7F:94:D4:89:F5:6D:FF:39:91:85:4F:AF:0A:27:F7
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/Mwxbdx5_lNSJ9W3_OZGFT68KJ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c64::/48
Signature Algorithm: sha256WithRSAEncryption
37:bf:80:11:54:d3:4c:a5:1c:cf:5e:92:6b:1b:a3:41:43:ca:
bc:45:51:4a:c7:5e:b2:37:df:0b:ce:80:21:34:72:00:1c:af:
44:10:04:2c:64:58:34:26:41:60:76:77:3d:68:8d:7d:6d:39:
43:ce:5c:14:28:67:dc:cb:c3:65:e0:a2:a6:b2:c7:ff:14:9a:
ca:b0:89:c6:c7:27:b3:76:4f:90:00:eb:4c:b5:61:a6:5e:e1:
50:eb:5b:4c:6d:ca:fa:42:35:87:12:89:be:bc:6d:75:27:39:
c8:87:b9:4d:d0:2a:b8:3c:f6:3f:36:95:06:8c:9b:2d:da:94:
a1:86:f7:58:ad:e5:64:4b:b7:19:3e:3f:87:f3:4f:01:84:02:
a8:88:8e:fb:a3:c3:95:f5:fc:97:8b:13:d2:1f:f0:03:79:a4:
a6:8f:0f:c9:17:65:86:ba:cb:66:aa:d4:76:76:71:bc:22:0c:
8b:16:ec:44:b8:30:11:67:cd:f1:37:5f:2b:ad:d9:81:0a:99:
72:78:47:41:74:ae:09:2d:9e:cd:fa:17:a3:ec:30:ac:55:fd:
2b:e5:07:ac:d1:32:d4:3a:a9:21:d8:c9:7c:4c:f2:9d:bd:26:
ef:1f:65:6d:65:c8:8c:51:72:c7:7a:46:34:fa:11:41:39:3e:
b8:dd:a3:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYeVXIXEza3wovo7WdcY+nOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj
Yzc0MzUwHhcNMjMwNDE4MTcxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzBjNWI3NzFlN2Y5NGQ0ODlmNTZkZmYzOTkxODU0ZmFmMGEyN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjb2QqasaZnXVi3iR4hC/wBOKfHT
FmcOV4I+0Nvb0htur3z7dLxp6YLNB5vHaHX680x/36MvdyAUYbH+sWDONE+kRsEL
G5JOrjcp8ShUNCualRucgZLuILg7dllNVyUcCWhWP7Bf4xoYQARpYGdf8gqI96Hs
Q6pCGnLbe3QBLk974eReNfPg3da9Gy7Bs74zN4K/WHu66Swp2KfHpYVuBqvDEVFr
7HYp9xlZR9u42+kxrsAfr4Yp42Fz7NQZgbZJ3aADIsQzCl9woKl3+sDe3POQ31G1
R9EZCCI8UJ/aIZOssjYSqlBkdQXqwcuQSSL06a5o5NCeCphS9ZqrLZePKQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDMMW3cef5TUifVt/zmRhU+vCif3MB8GA1UdIwQY
MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt
Yjg0NTNlZWJiMjY3LzEvTXd4YmR4NV9sTlNKOVczX09aR0ZUNjhLSl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3
LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxk
MA0GCSqGSIb3DQEBCwUAA4IBAQA3v4ARVNNMpRzPXpJrG6NBQ8q8RVFKx16yN98L
zoAhNHIAHK9EEAQsZFg0JkFgdnc9aI19bTlDzlwUKGfcy8Nl4KKmssf/FJrKsInG
xyezdk+QAOtMtWGmXuFQ61tMbcr6QjWHEom+vG11JznIh7lN0Cq4PPY/NpUGjJst
2pShhvdYreVkS7cZPj+H808BhAKoiI77o8OV9fyXixPSH/ADeaSmjw/JF2WGustm
qtR2dnG8IgyLFuxEuDARZ83xN18rrdmBCplyeEdBdK4JLZ7N+hej7DCsVf0r5Qes
0TLUOqkh2Ml8TPKdvSbvH2VtZciMUXLHekY0+hFBOT643aMh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org