Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2Muy_IbsdXtWYjiGf1D13YGWXX8.roa
File: 2Muy_IbsdXtWYjiGf1D13YGWXX8.roa (raw, json)
Hash identifier: 42uy4T5rSeblEYhqTOs3EhG1gqUC+jcMbCOcqUZAzUw=
Subject key identifier: D8:CB:B2:FC:86:EC:75:7B:56:62:38:86:7F:50:F5:DD:81:96:5D:7F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018F3CAC4FBF318B66FCE3B37C68D7D6651D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2Muy_IbsdXtWYjiGf1D13YGWXX8.roa
Signing time: Fri 03 May 2024 04:17:56 +0000
ROA not before: Fri 03 May 2024 04:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0f:e000::/29 maxlen: 32
2a11:dcc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Jun 2024 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3c:ac:4f:bf:31:8b:66:fc:e3:b3:7c:68:d7:d6:65:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 3 04:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8cbb2fc86ec757b566238867f50f5dd81965d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:46:3a:d7:20:ef:81:81:92:7e:d9:d0:f4:
48:4c:08:22:51:b6:31:31:6b:83:22:05:c4:5a:e5:
be:0c:4c:53:18:d6:20:01:0c:b6:0a:75:e1:e6:e2:
bb:96:e9:50:6d:a9:8c:15:bd:a0:b0:e5:ac:e2:9f:
de:b8:0a:d3:29:aa:6b:1a:62:89:99:37:a5:73:1e:
27:d2:58:ca:e3:2c:26:1b:e1:2f:cc:d4:15:05:89:
5b:96:a3:7e:71:27:38:07:7e:0c:72:48:b2:6a:88:
7a:24:9b:8e:2b:ec:a4:fd:d1:74:c6:68:f7:d1:a4:
2f:80:d6:38:57:91:48:a6:f4:28:1d:ae:d5:56:9a:
9c:57:ea:60:d8:84:b5:16:c0:ef:d5:56:cd:42:b2:
29:71:88:b9:fa:ed:c3:5a:a0:72:f3:f2:95:f6:a5:
f1:55:40:20:de:6d:45:3c:81:5b:4f:52:5a:db:d5:
5d:f6:48:e4:c0:0f:44:b9:e2:f9:2c:d3:70:6d:88:
7c:54:b2:d4:6c:04:3d:bc:1e:ac:e3:85:12:87:3e:
7a:70:24:45:e3:97:6b:01:5f:40:77:98:28:82:b9:
32:96:64:a2:4b:f7:67:94:1c:01:c6:82:a9:ea:97:
5c:16:de:2c:2b:2e:2b:b1:12:50:2f:4a:d9:a9:9f:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:B2:FC:86:EC:75:7B:56:62:38:86:7F:50:F5:DD:81:96:5D:7F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/2Muy_IbsdXtWYjiGf1D13YGWXX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e000::/29
2a11:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:26:e3:c4:0d:3d:31:f6:ec:be:fa:e3:38:59:74:8d:04:cb:
6f:52:2c:ef:bd:75:79:c0:12:46:61:d8:70:bc:a8:03:fd:c2:
3d:ae:21:cc:6b:ca:06:27:bc:64:10:69:05:72:71:71:e6:c9:
5d:72:0f:61:bd:ba:90:90:62:ca:b0:b5:6b:00:3d:d8:64:77:
08:e4:07:36:57:2a:b9:18:e2:32:c2:c9:62:11:38:5d:d4:a8:
a5:eb:99:f4:b1:61:63:4e:f1:13:77:be:dd:ce:bf:e1:8c:06:
bb:04:3d:48:8e:c3:2b:8b:bc:71:4a:60:d8:b2:e6:cd:cc:7e:
9c:93:6e:2b:00:33:a9:17:29:bb:b1:92:4b:cc:9e:21:c9:18:
41:9b:55:f4:f6:10:42:96:80:7f:01:e4:cc:34:bb:b8:da:07:
e4:d0:3d:d0:cc:93:94:f2:63:e6:27:38:3d:d4:33:6e:f9:9d:
53:56:4d:3c:16:5f:21:55:15:eb:bd:db:44:75:1b:09:0b:e0:
3c:9c:0f:4b:1b:72:03:0b:aa:bc:7e:62:53:c2:55:8a:be:ea:
37:1d:4b:57:e8:d0:11:58:6e:e1:29:7c:34:9e:ae:db:55:1d:
54:ec:b7:e3:15:f0:d9:63:76:3d:60:7d:04:18:2d:9c:a4:c6:
6f:6b:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org