Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MxeTYCIj_dS-75TpvjFnONJGbjw.roa
File: MxeTYCIj_dS-75TpvjFnONJGbjw.roa (raw, json)
Hash identifier: hIZhKA/YWLr3ChKqeI698MPfWC27I9jQQN1OOtDoqmE=
Subject key identifier: 33:17:93:60:22:23:FD:D4:BE:EF:94:E9:BE:31:67:38:D2:46:6E:3C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FCAC91AA6C0EA43725B760C7182F5900C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MxeTYCIj_dS-75TpvjFnONJGbjw.roa
Signing time: Thu 30 May 2024 18:35:28 +0000
ROA not before: Thu 30 May 2024 18:35:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214801
IP address blocks: 2a0e:b107:1e10::/48 maxlen: 48
2a0e:b107:1e11::/48 maxlen: 48
2a0e:b107:1e12::/48 maxlen: 48
2a0e:b107:1e13::/48 maxlen: 48
2a0e:b107:1e14::/48 maxlen: 48
2a0e:b107:1e15::/48 maxlen: 48
2a0e:b107:1e16::/48 maxlen: 48
2a0e:b107:1e17::/48 maxlen: 48
2a0e:b107:1e18::/48 maxlen: 48
2a0e:b107:1e1a::/48 maxlen: 48
2a0e:b107:1e1b::/48 maxlen: 48
2a0e:b107:1e1e::/48 maxlen: 48
2a10:2f00:1a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 31 May 2024 03:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:c9:1a:a6:c0:ea:43:72:5b:76:0c:71:82:f5:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 30 18:35:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=331793602223fdd4beef94e9be316738d2466e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:2e:a3:71:5a:59:a5:09:b7:5e:f4:9a:04:
50:90:62:a9:fc:65:83:12:06:a7:60:cc:91:55:b2:
5e:25:44:77:5d:5d:d2:68:00:bc:c0:92:9e:61:3c:
69:41:ab:a0:b5:a0:59:f8:83:6c:09:68:7b:3c:a0:
84:7e:b1:7a:2c:d3:3a:b1:c4:67:e2:65:db:7e:2d:
38:87:7b:4c:f1:09:56:79:61:72:1f:fc:97:0e:aa:
89:a9:e7:d5:73:7c:92:f3:1b:b4:5e:10:c4:d8:08:
ef:6a:6e:d5:b9:08:7a:99:3e:d3:3d:9d:05:fd:ed:
96:a0:3c:d7:4d:3e:4b:90:8e:7d:1b:df:e6:d4:5f:
3f:80:d0:55:63:da:64:30:53:a8:b7:b2:fe:8b:54:
c2:ec:46:cb:7a:f5:51:61:0e:f1:44:82:e4:1f:e9:
2f:02:a7:3b:78:b3:6d:ec:24:7e:a5:14:a4:59:bf:
77:7e:34:e6:78:b3:a7:50:0d:ac:6a:7a:7f:23:4c:
fb:60:fe:ff:a1:e7:74:98:45:76:8c:d3:f4:42:1f:
d0:86:a1:29:71:ce:42:4b:40:c4:30:cb:2d:b6:b4:
eb:fe:95:ec:ab:1d:ef:06:dc:d4:51:f0:21:c6:38:
0b:38:49:fc:9f:01:68:76:a7:4b:c9:34:e5:39:ff:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:93:60:22:23:FD:D4:BE:EF:94:E9:BE:31:67:38:D2:46:6E:3C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MxeTYCIj_dS-75TpvjFnONJGbjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e10::-2a0e:b107:1e18:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1e1a::/47
2a0e:b107:1e1e::/48
2a10:2f00:1a1::/48
Signature Algorithm: sha256WithRSAEncryption
a0:76:53:08:c5:4b:1f:6d:84:cd:b2:e9:f8:a7:dd:d9:3d:21:
5e:8b:c6:ae:9b:7a:6c:00:4f:60:da:b9:f0:c8:65:ba:da:22:
5a:34:bc:3a:1d:41:92:72:20:8d:28:eb:64:d7:94:83:e0:57:
6a:a9:6c:57:09:6c:5b:a0:b2:54:86:48:27:ef:13:79:28:2e:
05:9b:15:2d:1e:53:66:44:da:b2:ba:42:3b:8a:cc:19:1b:2f:
83:f5:16:29:c2:07:51:12:3a:0c:b8:de:57:84:9e:16:69:76:
78:b8:82:c7:8a:f1:90:21:14:a8:86:14:f1:78:a1:93:c9:5f:
9e:ee:87:0e:6c:b7:a4:a0:e7:ef:ae:4a:ae:e0:b8:ae:7d:f9:
31:25:40:92:28:50:e7:21:74:de:b6:6d:7f:20:d5:f9:0f:2d:
c4:ec:1d:b7:bb:c1:b5:28:88:36:e8:c0:be:6d:89:7a:28:c1:
59:b0:3a:31:5e:e5:cd:9b:a8:08:22:1e:f8:52:8f:8f:1e:04:
62:24:90:d1:45:e7:27:10:d8:5c:07:32:f9:92:aa:2a:21:f8:
91:36:36:6d:65:c9:3d:8d:5c:46:f0:ee:c5:bf:f1:12:56:49:
c3:55:91:c5:e0:8e:7b:51:d7:14:b6:e0:33:0e:fd:6f:d5:bb:
9a:67:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org