Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/MvysK30SOnQUQZXj63Q9r0Zmx8w.roa
File: MvysK30SOnQUQZXj63Q9r0Zmx8w.roa (raw, json)
Hash identifier: K9UzNbDf/y+LyTFnuse+j/e8o45oA2bN8jI5Fff9lBg=
Subject key identifier: 32:FC:AC:2B:7D:12:3A:74:14:41:95:E3:EB:74:3D:AF:46:66:C7:CC
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C898B8F8BBAB88263FFC7D5BED460
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/MvysK30SOnQUQZXj63Q9r0Zmx8w.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 2a0c:c183::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Feb 2025 15:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:8b:8f:8b:ba:b8:82:63:ff:c7:d5:be:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32fcac2b7d123a74144195e3eb743daf4666c7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:e8:91:23:c4:3c:0d:03:ce:81:8c:ee:ca:
e2:e2:a8:5e:44:e2:e8:e3:af:40:26:c1:28:73:33:
ed:00:1d:33:4e:3a:49:c2:2c:64:7c:b4:85:20:de:
63:e4:bd:36:74:7b:df:29:8c:e4:0b:7d:e6:08:0b:
c7:37:57:af:91:e3:be:25:e7:e4:d9:08:8c:d1:31:
40:6b:a4:cd:96:99:d5:22:23:c4:ff:ca:4a:bd:8b:
0c:38:61:a5:29:d5:19:51:b4:c8:d4:76:4a:9a:0e:
36:9a:f6:41:fe:72:7c:3f:f4:7b:39:41:7c:86:41:
9b:11:67:17:21:19:65:08:c2:83:e6:ef:6a:b5:7b:
18:e7:df:35:30:76:7d:06:72:79:98:fc:cf:2f:f7:
a8:19:71:43:6d:b1:f4:80:a4:f0:ee:52:96:e1:6b:
ee:e4:15:4d:89:29:32:42:c0:c6:ce:58:21:49:d3:
1a:27:59:a7:38:e8:4f:1a:75:d8:67:51:01:49:35:
ce:d9:f4:75:af:81:aa:06:91:ca:80:17:c4:a8:e1:
fa:9e:19:ba:38:3a:ab:36:1b:a5:b2:6b:01:6a:c9:
fd:8f:2f:9a:5f:3b:42:fc:28:cf:1a:70:8d:85:c9:
2a:6e:26:7f:5e:ab:4e:6d:13:f0:ad:90:87:3d:22:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:AC:2B:7D:12:3A:74:14:41:95:E3:EB:74:3D:AF:46:66:C7:CC
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/MvysK30SOnQUQZXj63Q9r0Zmx8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:c183::/32
Signature Algorithm: sha256WithRSAEncryption
49:3d:02:f8:5d:ab:e2:d6:94:2f:3d:da:77:fd:d2:b7:f9:8f:
cf:ce:64:9f:05:32:de:37:60:3f:ed:80:8f:78:66:62:93:aa:
3e:80:0c:30:a8:e1:83:38:6b:69:b8:63:17:1d:77:77:53:0a:
7b:78:4f:91:b0:75:df:d6:6f:6d:9b:20:11:90:73:1b:94:68:
eb:fc:ae:eb:96:2d:9b:8f:e0:ba:e8:0f:b4:da:30:4d:67:d0:
4f:16:af:95:53:32:48:27:e5:d7:dd:3e:99:1a:d7:68:b0:87:
6c:e3:0d:fb:65:03:98:b7:74:44:3e:25:5f:f6:0b:7f:ad:b7:
90:e8:10:d7:6e:08:75:20:b6:28:d8:c5:a5:23:07:62:a8:0e:
61:e1:6c:ee:09:a8:d9:81:8d:fb:8b:5d:51:4c:36:6f:e8:1b:
8f:d3:6b:f9:09:2b:89:6f:35:ad:0d:a0:94:4b:f8:3a:72:04:
03:26:d4:37:da:dd:b1:73:3e:ce:22:f7:8e:5c:7c:2f:45:ea:
1b:df:b1:e8:10:a4:e7:53:c7:b8:1c:a3:88:14:f9:58:f9:ee:
b3:08:2a:ac:c0:46:0f:f8:fe:0f:35:8f:a9:17:1e:90:10:fa:
42:ee:0a:fc:40:4e:aa:11:8a:2f:19:24:16:dd:c5:77:84:e3:
06:82:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:19 2025 by rpki-client