Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mc0v19T2cR18JbfX7wllFkmwLGg.roa
File: Mc0v19T2cR18JbfX7wllFkmwLGg.roa (raw, json)
Hash identifier: sjn+j2ZDTdhnEAKzo5KMAlVAuWPGWDchRbl38Cvwsew=
Subject key identifier: 31:CD:2F:D7:D4:F6:71:1D:7C:25:B7:D7:EF:09:65:16:49:B0:2C:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E274AD5C3FD28C79CACE14328ECC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mc0v19T2cR18JbfX7wllFkmwLGg.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134666
IP address blocks: 2a0e:b107:30f::/48 maxlen: 48
2a10:2f01:3dc::/48 maxlen: 48
2a10:2f01:3df::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Jan 2025 23:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e2:74:ad:5c:3f:d2:8c:79:ca:ce:14:32:8e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31cd2fd7d4f6711d7c25b7d7ef09651649b02c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d6:43:3c:5d:1f:83:bf:e4:a3:0e:5c:36:3b:
5d:18:1a:e9:50:48:bd:3e:5f:75:4f:e5:b0:55:f8:
c5:74:0e:c0:2c:11:e9:82:14:a9:6b:91:3a:3a:a2:
1a:bb:44:7c:d1:35:9c:22:5a:b0:70:87:ee:43:14:
20:c1:fc:25:e3:6a:df:46:f1:84:b5:69:ed:d5:a0:
b0:0f:9d:00:9f:23:25:bf:02:dc:97:1e:c0:4b:42:
04:76:b4:65:d4:7d:06:d2:89:af:fc:d9:16:d1:7f:
b9:db:23:78:fd:76:b9:58:3c:58:b0:6d:64:b3:60:
7f:8d:41:32:9e:8d:88:d5:40:dc:fa:88:98:7b:0f:
e5:87:08:eb:ad:07:e3:10:27:b5:67:79:45:19:9b:
b9:b0:3b:fe:22:08:f2:5a:34:62:eb:7c:1c:6d:0a:
42:a2:f4:0c:71:6b:2c:99:d5:8c:12:45:20:87:be:
b0:6b:d6:89:0a:7e:88:ee:68:be:f6:de:67:31:80:
a3:2b:d0:0c:5f:b6:88:33:07:58:cf:79:86:59:66:
5e:17:5f:f1:22:5d:0c:6b:b5:bf:00:eb:1c:a3:bd:
df:39:55:97:43:9a:6a:df:08:de:6b:5d:57:6c:05:
f4:f8:80:98:38:95:7b:91:45:21:e9:01:83:1e:7c:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:2F:D7:D4:F6:71:1D:7C:25:B7:D7:EF:09:65:16:49:B0:2C:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Mc0v19T2cR18JbfX7wllFkmwLGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:30f::/48
2a10:2f01:3dc::/48
2a10:2f01:3df::/48
Signature Algorithm: sha256WithRSAEncryption
b5:85:cb:9f:9f:4f:af:d7:1e:fb:81:4d:82:35:20:12:62:e1:
5a:01:f7:80:63:e4:0e:16:32:8e:7e:52:e6:5a:a3:fe:c1:49:
0a:a7:26:87:d4:a5:09:a6:5e:47:c3:c3:8a:57:24:33:be:6f:
0a:2c:6a:71:00:b3:e0:d2:d8:6b:ea:bd:74:d3:bf:e0:9f:42:
04:0c:e9:9f:05:21:89:62:57:c9:57:b9:05:c0:3e:cc:31:a3:
2c:12:6a:7e:d2:27:db:fa:ed:9d:50:80:dd:e8:8b:14:12:cb:
f3:ec:9c:bd:db:a6:a4:7a:eb:44:ba:cf:26:50:80:12:34:f3:
55:0c:a1:77:03:21:dd:65:20:1a:1b:28:2c:4a:1d:68:5c:e3:
10:53:81:2b:20:74:04:31:1a:39:6d:13:5b:f0:68:68:b8:23:
47:fe:28:18:e0:98:26:ef:42:f8:24:58:4e:3a:4b:ca:a6:e4:
4b:fc:b8:fa:5d:41:e2:46:df:83:eb:78:00:94:47:38:04:a1:
c3:e8:ad:cd:71:29:3f:b3:8c:1f:5a:78:15:ea:a3:2f:28:44:
25:ed:1b:c9:b7:7f:55:df:8e:3d:fd:42:87:b9:2d:fa:f6:27:
fc:3d:c2:02:04:93:12:f0:7a:28:40:c8:d9:3b:1d:66:c6:ec:
1c:70:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:49 2025 by rpki-client