Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/muxSs4GT6-DFHUERs9hKZ_sXFzk.roa
File: muxSs4GT6-DFHUERs9hKZ_sXFzk.roa (raw, json)
Hash identifier: bH4o+Rsec1VIJUgSuITP1h3D2RVMfqSwG4z5OXRBVlA=
Subject key identifier: 9A:EC:52:B3:81:93:EB:E0:C5:1D:41:11:B3:D8:4A:67:FB:17:17:39
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B1027592E7C622C268BC1E7F517F8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/muxSs4GT6-DFHUERs9hKZ_sXFzk.roa
Signing time: Tue 24 Jan 2023 16:09:56 +0000
ROA not before: Tue 24 Jan 2023 16:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213244
IP address blocks: 2a0e:b107:d91::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:10:27:59:2e:7c:62:2c:26:8b:c1:e7:f5:17:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aec52b38193ebe0c51d4111b3d84a67fb171739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:df:fd:91:de:08:b7:04:d5:38:71:4f:e7:
1d:a0:88:db:28:68:27:c9:97:0b:02:ae:bc:d3:b0:
3b:5a:a8:28:d1:3b:35:53:2e:b5:67:6c:ee:b9:ae:
1b:9a:04:35:66:9e:2b:2d:b3:7c:7f:d3:9b:8e:3f:
96:42:c4:34:92:f0:68:b9:dc:d2:7a:12:5b:42:50:
a8:98:7b:df:8d:4c:9b:87:af:e8:7c:db:a7:89:b9:
54:52:7f:de:b1:50:c8:f5:63:b0:51:51:68:c6:38:
65:dc:41:15:a9:48:63:c6:36:07:1c:fa:bc:28:5d:
ce:d1:bd:85:75:d5:d4:37:bd:b1:f0:5b:75:73:a6:
0c:09:bd:c2:1c:c8:5c:a0:4d:0d:8a:6f:71:e4:9d:
76:b4:79:10:c6:11:44:94:7c:06:54:15:c4:1d:61:
97:33:ce:35:ee:9d:b7:2e:3b:e8:c4:68:60:4e:5e:
cb:12:6e:cf:85:d4:22:05:f3:02:58:66:38:ff:eb:
8e:53:06:fa:97:e5:67:1c:1e:3c:9f:01:7b:52:6e:
a4:b5:c5:9e:0d:cd:aa:89:e6:dc:57:71:42:88:62:
90:91:70:0d:fd:4a:6a:45:ec:e2:12:9b:ed:71:a1:
9d:95:2b:96:1d:21:87:21:7e:c3:51:4d:f1:1e:1c:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:52:B3:81:93:EB:E0:C5:1D:41:11:B3:D8:4A:67:FB:17:17:39
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/muxSs4GT6-DFHUERs9hKZ_sXFzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:d91::/48
Signature Algorithm: sha256WithRSAEncryption
31:c8:ec:a0:be:73:2a:57:ff:1f:c9:71:bc:dc:0d:82:0c:cf:
b6:7d:83:91:13:85:d0:5c:0a:8d:21:2f:76:16:c1:6d:25:d4:
6b:4b:85:81:bf:9f:83:d1:09:97:8e:0a:33:73:df:7e:46:c9:
96:77:d6:ca:44:64:62:7c:77:1b:af:c1:83:55:cf:78:5b:45:
06:41:8b:25:c4:b7:4e:74:c6:bd:3e:19:fe:1a:78:65:28:fc:
ed:ba:98:af:da:1c:0d:9d:fa:9c:08:8c:b1:99:46:b5:47:8d:
bc:38:c6:df:84:06:92:82:a4:70:04:db:05:ee:c8:af:5a:a0:
45:96:b3:cc:5d:81:e9:af:c3:16:cc:14:97:66:1b:f2:ba:26:
f8:6f:46:6b:d1:64:e3:e2:2a:bc:e8:ea:76:e4:11:7b:00:2e:
5c:72:27:74:46:c6:6a:67:ca:06:ea:b1:58:c3:60:92:0a:26:
c9:ae:2a:98:2a:cd:80:1c:9a:ce:b5:a0:34:07:7f:14:a2:e0:
ac:65:66:23:06:9f:21:a1:1a:6c:57:ee:fd:7e:1c:f7:55:59:
79:b2:19:d0:ee:1f:34:4a:96:56:7a:a1:a0:04:0f:d7:b7:c8:
e0:46:78:23:00:8b:20:ae:e9:b5:3b:da:4f:ad:c5:2d:e7:c7:
11:e0:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org