Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MQV_pmxFIhPLpqTIWnUPQ7bLJSA.roa
File: MQV_pmxFIhPLpqTIWnUPQ7bLJSA.roa (raw, json)
Hash identifier: H3R3dJwVmfImHX0ZSGLmLYucL9PM5nflbBpTFeGWN6g=
Subject key identifier: 31:05:7F:A6:6C:45:22:13:CB:A6:A4:C8:5A:75:0F:43:B6:CB:25:20
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019383774026D936A4A8501E55677FB0EE9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MQV_pmxFIhPLpqTIWnUPQ7bLJSA.roa
Signing time: Sun 01 Dec 2024 18:24:10 +0000
ROA not before: Sun 01 Dec 2024 18:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39351
IP address blocks: 2a10:ccc2:20::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Dec 2024 20:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:83:77:40:26:d9:36:a4:a8:50:1e:55:67:7f:b0:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 1 18:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31057fa66c452213cba6a4c85a750f43b6cb2520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:69:68:aa:fc:84:9a:c6:ac:e0:88:30:45:
65:4e:37:28:22:90:dc:f8:99:d9:ce:42:25:6e:fa:
5e:4c:01:9a:b5:f7:d2:f0:44:59:59:60:f0:20:54:
9d:d8:25:36:56:b1:fd:a9:95:11:de:02:63:37:0b:
99:ea:cc:79:13:a2:5b:20:73:63:2f:eb:2c:07:6b:
fc:e6:3b:d5:16:f9:23:c0:cf:c5:52:4b:db:e5:ad:
68:2a:6b:5f:e5:0f:25:fd:2a:f0:f5:32:f7:79:2e:
c7:2d:21:be:9c:a5:9d:ea:c3:e7:a7:84:13:c9:c2:
59:1a:e9:67:c9:e9:11:9a:c8:eb:6a:34:b2:24:38:
f1:35:dd:5a:e1:a1:32:90:3d:04:64:59:19:2e:cc:
21:12:c8:ba:f0:3d:58:f1:71:08:3e:d4:aa:c6:af:
f2:d6:26:7c:04:da:4b:1e:75:bd:34:ca:86:a6:53:
be:5d:ba:33:ef:3e:bd:2f:57:f1:05:07:ce:36:1c:
7c:cb:3e:c5:06:f8:db:6b:59:56:86:5d:1e:55:91:
43:28:29:31:a8:75:e1:df:78:a9:4d:9f:cd:78:d1:
21:d3:56:2a:52:aa:00:9b:21:40:c8:01:97:35:4b:
e7:a3:d5:b9:3a:03:69:78:84:bd:d4:3f:06:01:40:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:05:7F:A6:6C:45:22:13:CB:A6:A4:C8:5A:75:0F:43:B6:CB:25:20
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MQV_pmxFIhPLpqTIWnUPQ7bLJSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc2:20::/44
Signature Algorithm: sha256WithRSAEncryption
04:16:bb:2f:9b:b9:43:a8:b0:92:9d:31:f3:f3:63:77:c9:d5:
54:98:f7:19:51:ad:72:8f:d4:5a:f2:e2:cc:ec:03:5d:74:3b:
4c:43:18:98:cc:fc:67:af:74:a6:1e:6f:52:58:ec:0a:a4:6c:
f0:d8:0d:56:19:cd:c2:b8:5b:3c:53:b5:7d:4e:38:40:35:91:
55:ca:c9:51:9b:ba:c3:59:f8:12:23:7f:ad:1b:b8:c2:1f:26:
54:6e:82:30:2a:6b:2f:47:e1:7b:14:c0:df:77:d5:e3:6c:ce:
36:17:3d:d6:78:ef:88:9e:a2:1d:9f:5c:78:34:ab:60:e4:d3:
11:aa:35:a0:5a:23:5a:7f:83:45:2a:31:9c:f4:6c:22:3b:18:
bb:18:6c:d7:b1:41:7c:25:75:a8:06:2c:da:45:88:43:c1:54:
bb:2b:60:0c:21:87:49:9e:0f:4d:c4:19:f7:ce:b7:8e:8c:d8:
a5:3f:8e:35:94:68:ff:13:0f:97:fa:81:02:0f:f8:b8:59:3d:
e3:44:ae:97:ae:a0:bb:48:48:9e:4a:fb:de:ce:08:65:d8:ff:
b7:6d:3a:e5:c5:40:9b:65:dc:d0:af:f8:be:5c:92:5d:56:65:
93:b9:61:3e:1b:a9:aa:c4:3d:da:d7:c0:b3:58:e8:6a:27:5d:
ea:1a:8b:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZODd0Am2TakqFAeVWd/sO6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMjAxMTgyNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTA1N2ZhNjZjNDUyMjEzY2JhNmE0Yzg1YTc1MGY0M2I2Y2IyNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LNpaKr8hJrGrOCIMEVlTjcoIpDc
+JnZzkIlbvpeTAGatffS8ERZWWDwIFSd2CU2VrH9qZUR3gJjNwuZ6sx5E6JbIHNj
L+ssB2v85jvVFvkjwM/FUkvb5a1oKmtf5Q8l/Srw9TL3eS7HLSG+nKWd6sPnp4QT
ycJZGulnyekRmsjrajSyJDjxNd1a4aEykD0EZFkZLswhEsi68D1Y8XEIPtSqxq/y
1iZ8BNpLHnW9NMqGplO+Xboz7z69L1fxBQfONhx8yz7FBvjba1lWhl0eVZFDKCkx
qHXh33ipTZ/NeNEh01YqUqoAmyFAyAGXNUvno9W5OgNpeIS91D8GAUCyLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDEFf6ZsRSITy6akyFp1D0O2yyUgMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTVFWX3BteEZJaFBMcHFUSVduVVBRN2JMSlNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwgAg
MA0GCSqGSIb3DQEBCwUAA4IBAQAEFrsvm7lDqLCSnTHz82N3ydVUmPcZUa1yj9Ra
8uLM7ANddDtMQxiYzPxnr3SmHm9SWOwKpGzw2A1WGc3CuFs8U7V9TjhANZFVyslR
m7rDWfgSI3+tG7jCHyZUboIwKmsvR+F7FMDfd9XjbM42Fz3WeO+InqIdn1x4NKtg
5NMRqjWgWiNaf4NFKjGc9GwiOxi7GGzXsUF8JXWoBizaRYhDwVS7K2AMIYdJng9N
xBn3zreOjNilP441lGj/Ew+X+oECD/i4WT3jRK6XrqC7SEieSvvezghl2P+3bTrl
xUCbZdzQr/i+XJJdVmWTuWE+G6mqxD3a18CzWOhqJ13qGosa
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:32 2025 by rpki-client