Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/2MAc0ehSnITsWnfjU0cfwjGtMXc.roa
File: 2MAc0ehSnITsWnfjU0cfwjGtMXc.roa (raw, json)
Hash identifier: jmTtsRzRNidI4MUKDdT9juISrS7DmB86XrysTuwcyX4=
Subject key identifier: D8:C0:1C:D1:E8:52:9C:84:EC:5A:77:E3:53:47:1F:C2:31:AD:31:77
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019308825D093654C8178B32451720DB4A84
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/2MAc0ehSnITsWnfjU0cfwjGtMXc.roa
Signing time: Thu 07 Nov 2024 21:23:01 +0000
ROA not before: Thu 07 Nov 2024 21:23:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200449
IP address blocks: 2a06:3341::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:82:5d:09:36:54:c8:17:8b:32:45:17:20:db:4a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Nov 7 21:23:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c01cd1e8529c84ec5a77e353471fc231ad3177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:6b:db:f3:f3:80:88:4b:1d:d0:f0:23:73:
f5:28:07:18:89:d1:c6:18:76:df:80:7e:f2:b2:4b:
4a:f3:ad:35:d9:dc:cc:e9:34:67:80:9e:d0:98:8f:
10:d9:7f:c3:39:83:7f:b3:22:fb:75:b6:2d:6b:8d:
d4:3b:5f:d4:e8:e6:39:22:59:97:c6:db:b1:e4:8f:
42:54:92:ef:ef:49:81:e4:eb:8a:96:ef:ca:69:57:
74:38:53:94:25:b8:df:ea:ce:3b:0c:40:75:37:39:
d0:ef:2a:1b:b0:bd:d7:57:4a:7c:bb:49:33:bb:41:
e3:1f:33:79:2b:cd:59:41:d2:8b:9f:18:af:c1:47:
68:92:34:2c:d0:94:f7:6f:50:e1:86:9e:6d:69:55:
72:94:bf:06:16:08:ca:66:c7:1e:90:e8:80:cf:d0:
67:d6:ca:46:d5:83:99:5e:e7:cd:cb:77:6e:da:aa:
b0:38:5a:1a:54:88:b9:a2:12:80:44:d2:33:a7:27:
f3:33:ee:17:c1:a7:84:7e:9c:f9:4e:35:e9:c8:04:
b4:30:5d:68:f7:28:2b:0a:92:77:16:86:04:6a:8f:
89:57:a1:2d:17:37:59:ca:36:10:75:59:18:8f:e5:
4e:75:e3:f5:4c:13:5d:86:31:3c:b0:14:2e:68:3c:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C0:1C:D1:E8:52:9C:84:EC:5A:77:E3:53:47:1F:C2:31:AD:31:77
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/2MAc0ehSnITsWnfjU0cfwjGtMXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3341::/32
Signature Algorithm: sha256WithRSAEncryption
88:cc:7c:95:bc:99:8b:c7:77:46:7a:c3:c7:4a:4e:2e:65:11:
a3:5b:b8:d9:94:6d:87:65:77:cc:2d:5e:39:a0:ea:2d:5c:40:
37:69:48:1d:2c:3a:02:35:f5:b6:b9:c3:fb:26:5b:0b:e5:71:
c7:ff:8b:46:5f:a2:3e:12:46:51:b0:2b:f8:48:d0:3a:f7:de:
92:eb:cd:2b:d9:e7:7a:23:d0:15:2f:ee:fc:07:72:a2:83:d8:
be:b5:36:db:2c:6b:b3:a9:cd:0e:88:37:f6:a1:00:6c:a7:a3:
1a:42:b9:48:ba:b5:20:c1:24:d3:2a:b5:c5:c1:97:9d:41:72:
e8:c5:13:79:51:3e:de:56:fc:d0:9f:d9:e1:fb:8e:d9:ae:d6:
76:32:37:c1:a8:26:e7:1d:cb:31:33:97:d2:7d:c0:c5:0a:08:
51:55:5e:a2:fe:4d:3d:d4:19:41:8f:1d:ed:a1:95:22:99:d1:
3e:23:10:63:e2:32:00:d6:d5:61:f7:b1:27:1b:15:1f:dd:28:
7b:49:a6:ea:ec:d5:90:07:f4:75:af:d8:3c:70:7c:50:8f:09:
a7:73:39:00:f6:1d:de:32:83:53:9a:17:0d:1c:a9:0c:ae:f6:
4e:7e:c0:0e:41:28:6f:e1:aa:2f:06:40:df:be:e2:d6:14:12:
ff:f4:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:45 2025 by rpki-client