Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M9ptpB5lboYqbh-KXm1ST9t5-II.roa
File: M9ptpB5lboYqbh-KXm1ST9t5-II.roa (raw, json)
Hash identifier: 2SDeG8+rFy7UFBhy8rPuggK8WvSIJ+8N4Rv/xAdoOnY=
Subject key identifier: 33:DA:6D:A4:1E:65:6E:86:2A:6E:1F:8A:5E:6D:52:4F:DB:79:F8:82
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F9CCB0FA731942C612B7B97A752A9B8A5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M9ptpB5lboYqbh-KXm1ST9t5-II.roa
Signing time: Tue 21 May 2024 20:15:04 +0000
ROA not before: Tue 21 May 2024 20:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216380
IP address blocks: 2a0d:6f80:2302::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Sep 2024 10:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:cb:0f:a7:31:94:2c:61:2b:7b:97:a7:52:a9:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 21 20:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33da6da41e656e862a6e1f8a5e6d524fdb79f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:49:56:58:c8:92:a7:ed:5d:78:e5:46:25:
dc:aa:f9:91:93:60:f2:79:1f:ad:ac:a6:34:6e:97:
d8:62:a9:25:54:d8:2c:95:b5:ea:14:18:f8:fb:19:
3d:5a:4e:1a:26:fe:f9:5c:55:29:85:95:b9:02:6d:
d1:8d:10:54:81:3d:a0:71:63:a9:64:47:9e:11:db:
da:f6:bd:83:3b:90:cb:20:33:de:72:7c:90:33:fc:
f9:8a:b4:5f:e5:6d:07:36:ef:6a:28:cc:80:2e:c0:
cf:39:14:c1:d4:70:cd:62:49:3f:04:75:60:1c:51:
9c:6b:e2:8a:b8:0a:9b:b3:8e:78:bd:da:3d:62:58:
9c:8b:e3:22:e0:13:48:6f:a6:6a:08:a8:4e:44:cf:
e3:d4:7f:f5:a4:1c:fb:25:9f:d0:4e:8f:dc:51:4c:
3f:17:da:ad:87:64:5f:f9:05:6b:e9:0c:00:4a:c2:
54:e3:f5:54:ed:ad:56:39:0e:47:e2:45:26:89:87:
83:b4:e6:70:ac:8c:af:09:2e:04:fd:9e:b8:7e:16:
35:c8:a9:aa:54:c6:8a:13:f3:f0:55:9b:02:39:ba:
46:bf:71:66:a8:fd:70:11:81:df:d5:12:89:88:dd:
ae:17:02:05:d2:04:7e:8a:50:fb:c4:e3:4c:f8:1d:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:6D:A4:1E:65:6E:86:2A:6E:1F:8A:5E:6D:52:4F:DB:79:F8:82
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/M9ptpB5lboYqbh-KXm1ST9t5-II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2302::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f1:86:13:f0:a9:f9:ca:27:0a:89:e7:ab:5a:9e:e9:bf:37:
94:b0:9f:47:15:19:24:96:4c:5b:86:0c:59:9e:3b:64:8b:af:
68:56:9e:77:36:92:04:73:b6:1c:d6:40:d7:e4:88:4e:ea:b5:
fc:44:19:b6:c0:a8:ac:64:44:ed:84:b2:8d:b2:be:cd:38:8d:
47:81:67:60:25:05:0d:04:c7:d3:2b:4f:3e:05:ab:d7:a3:ca:
23:50:9b:5c:f3:61:5a:1b:ac:35:05:58:27:1d:2d:73:9f:f3:
62:88:bf:5b:3c:ff:0d:16:62:8c:23:51:18:a6:e2:27:21:61:
0f:60:46:be:b6:dd:84:09:a0:ad:91:cd:62:d8:57:86:35:55:
70:c4:50:9e:66:98:9c:cf:e3:c5:f3:fd:a4:0f:7c:85:a4:e7:
f8:26:f5:18:db:cd:bf:58:a8:6b:1a:cf:1d:21:3e:67:8d:9e:
37:9a:f1:ef:6e:2f:1a:fc:d7:ee:1d:66:20:6d:d4:43:5b:ec:
56:cb:b5:3e:ee:49:0f:21:ef:ce:f3:79:ac:d7:34:57:1e:f7:
5e:30:3c:a4:c0:fe:95:52:66:51:ae:48:d7:23:e2:60:29:2d:
5c:52:ea:13:91:d9:23:dd:c0:6c:65:68:0a:5c:fe:f7:c1:58:
23:bb:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:43 2025 by rpki-client