Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/m69GUAdnAt5u5F5poVogMOhvav0.roa
File: m69GUAdnAt5u5F5poVogMOhvav0.roa (raw, json)
Hash identifier: oRGsXpBa6BxsxUG07z1b+64fuaCF92EziKpnucvCScE=
Subject key identifier: 9B:AF:46:50:07:67:02:DE:6E:E4:5E:69:A1:5A:20:30:E8:6F:6A:FD
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 01857295A88A4FF80985FBC40A69B412487A
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/m69GUAdnAt5u5F5poVogMOhvav0.roa
Signing time: Mon 02 Jan 2023 13:04:48 +0000
ROA not before: Mon 02 Jan 2023 13:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207716
IP address blocks: 2001:67c:988::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a8:8a:4f:f8:09:85:fb:c4:0a:69:b4:12:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Jan 2 13:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9baf4650076702de6ee45e69a15a2030e86f6afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:f8:22:4c:33:d2:47:12:9b:02:15:75:0c:
80:a4:2b:10:fe:b5:52:86:d8:80:92:10:77:3c:9c:
89:86:c0:ee:82:b6:6d:23:e4:be:48:12:92:06:6a:
97:33:5f:60:08:6b:34:e2:bf:1f:f4:46:97:eb:11:
17:51:15:73:ee:31:ee:73:a0:dc:52:bf:9f:76:a9:
bc:38:6c:f9:d1:5c:6d:a2:a8:ea:e1:b9:49:39:b9:
1f:8b:47:bd:88:76:55:e2:c2:a5:c1:fa:df:89:db:
8b:fb:f4:65:57:fe:4f:73:22:ae:aa:95:ad:dd:6a:
be:15:a3:54:69:a0:9c:23:88:ce:d2:dc:66:a3:61:
55:77:95:cb:9c:07:10:8b:33:5b:57:ce:9f:be:1d:
68:74:1f:14:fd:5b:30:bd:74:60:10:2a:0b:bc:47:
24:58:41:62:02:15:fd:01:74:37:5b:4a:4e:93:a7:
a6:c1:e9:d3:14:76:b6:26:01:20:07:92:ef:d6:98:
23:3b:7d:e1:52:0d:55:ac:21:d8:c2:e7:75:b8:63:
2b:ef:42:5a:74:c9:3a:ce:a7:0a:ed:a1:13:01:95:
48:19:35:6b:24:47:4e:21:b6:4d:ed:b5:ab:1b:e0:
d6:af:d6:55:10:ce:19:af:58:03:d9:b4:53:f1:d1:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:46:50:07:67:02:DE:6E:E4:5E:69:A1:5A:20:30:E8:6F:6A:FD
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/m69GUAdnAt5u5F5poVogMOhvav0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:988::/48
Signature Algorithm: sha256WithRSAEncryption
1c:bb:9b:24:e5:d4:0f:3e:62:8a:53:4e:86:f4:fa:aa:23:84:
11:94:00:ca:2e:83:0e:06:fa:c3:f3:d6:cb:a3:a3:63:83:a8:
ef:ac:7f:04:42:c4:2c:5a:c4:56:de:45:46:42:47:c5:6e:7c:
5d:71:8d:dc:74:05:90:66:5c:91:71:cf:32:31:ff:0e:27:92:
51:7a:48:a4:e4:e1:e3:06:0d:3f:be:eb:b1:bb:7a:2b:29:ec:
d7:eb:7e:4d:25:5a:7a:14:5c:c3:b0:72:74:b3:92:20:b7:da:
07:fa:71:e6:58:07:1e:ad:cd:fa:d1:75:93:8b:80:43:2d:2c:
f9:bc:d6:24:87:4c:71:5e:04:55:b5:42:ff:7c:30:00:4d:9b:
c6:c4:6e:3b:92:e1:dd:e6:a3:a6:49:3d:6a:44:ba:7f:3e:ba:
9e:d3:94:1b:d8:ba:57:6d:53:f1:57:fa:86:30:f1:b3:50:81:
45:40:13:aa:f9:d0:4d:2b:82:6e:13:27:e4:7c:da:19:51:db:
41:d4:c7:b5:e0:16:1f:fd:7a:4c:9f:c6:dc:27:53:1f:fd:79:
2f:e8:1a:d2:60:a0:ef:ad:4d:b1:c0:d7:af:d4:e9:e8:e8:32:
41:cf:4c:42:49:97:22:1a:4e:73:e3:f0:2f:19:15:4a:f7:0a:
f5:e4:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:51 2024 by rpki-client on console-fra.rpki-client.org