Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mfMvpSQXWuTVlTohqvirHE3UZg8.roa
File: mfMvpSQXWuTVlTohqvirHE3UZg8.roa (raw, json)
Hash identifier: yoZfy6pzj5hh2AfaWcv+RMxigtydG1y3cXPvmKKMUig=
Subject key identifier: 99:F3:2F:A5:24:17:5A:E4:D5:95:3A:21:AA:F8:AB:1C:4D:D4:66:0F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0194214418BA123951C69079FC18F60F6A32
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mfMvpSQXWuTVlTohqvirHE3UZg8.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a11:4540::/29 maxlen: 29
2a11:5980::/29 maxlen: 29
2a11:7b00::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 21 Jan 2025 18:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:ba:12:39:51:c6:90:79:fc:18:f6:0f:6a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99f32fa524175ae4d5953a21aaf8ab1c4dd4660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:fd:4f:d7:2f:96:e3:23:9e:fa:a0:85:ce:
ae:b4:e9:f3:54:27:df:01:af:ed:36:78:48:89:2b:
55:3e:64:0c:2f:39:6e:18:f6:4e:3c:f8:79:5f:a5:
b0:7e:f3:d7:60:e2:cf:b7:c0:0b:ad:9a:6e:54:fd:
ae:f7:71:05:83:85:4c:99:8e:7a:0d:4a:26:19:5d:
43:77:e2:12:43:41:db:f0:70:52:d0:78:40:7a:7e:
80:85:73:0b:a4:b3:af:e5:b6:02:82:e4:70:e8:73:
4a:fa:94:2d:8e:e1:8f:13:aa:95:86:c6:a4:1a:4f:
90:c7:8d:3d:e0:c3:4b:c9:6d:69:43:c4:fa:fd:f0:
23:38:56:02:d6:19:27:4f:b3:0d:3f:d7:fb:2a:4a:
94:39:70:c5:af:a6:7d:e5:52:fc:18:7f:52:fa:a7:
4d:87:d7:23:ac:47:12:23:99:4d:e2:a2:91:e4:ea:
19:37:45:fe:83:6b:57:d7:a3:4e:95:46:99:82:36:
41:78:01:a4:99:10:3c:93:cf:e7:f4:57:30:d2:f4:
03:31:90:29:67:aa:e6:4a:83:a3:45:c3:1f:35:3b:
bd:0d:13:08:2e:d8:a7:0e:e6:49:eb:1c:73:b6:ac:
f9:d7:45:4f:8f:d3:ae:27:09:52:10:8c:c7:32:c0:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:2F:A5:24:17:5A:E4:D5:95:3A:21:AA:F8:AB:1C:4D:D4:66:0F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mfMvpSQXWuTVlTohqvirHE3UZg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4540::/29
2a11:5980::/29
2a11:7b00::/29
2a11:8740::/29
2a11:bbc0::/29
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
35:b4:a9:ea:ce:69:5c:68:c7:7e:e8:dd:e5:ec:8f:f5:5a:84:
1e:ee:af:1a:ce:fa:4f:99:b6:0c:b6:e8:79:3a:5c:76:48:d9:
e5:9b:48:d5:55:ee:15:20:01:87:d5:f3:96:80:e0:46:97:fc:
fd:c2:ef:36:e3:9d:08:7a:68:c1:30:0f:c0:64:17:15:e3:68:
a9:71:43:51:f3:ac:e7:d2:ba:87:33:e8:cd:d7:71:f3:8f:9b:
d2:7f:ef:4b:60:75:5b:35:da:dc:66:2e:e3:55:38:92:48:4b:
d3:07:3b:6e:a8:a2:90:35:56:39:55:e6:c3:99:ad:1e:49:0a:
eb:eb:20:c8:9c:08:0d:38:a8:8f:c1:c2:d0:6e:c7:30:d1:9b:
00:50:49:89:c0:7e:42:a9:19:97:2c:d1:fa:3a:6f:1d:31:dc:
b9:7c:83:99:e9:15:28:cd:92:05:cf:0c:8f:30:7b:91:54:24:
c2:22:af:88:ea:b5:fa:d3:44:32:b5:82:25:0c:46:81:5e:9e:
3c:02:61:96:bb:cc:48:dd:fc:df:1d:de:cc:9b:16:82:43:1e:
f8:a7:3c:7e:4d:a8:99:ff:4d:89:be:9a:0f:4e:c8:95:3a:a0:
15:57:cb:16:c4:89:ec:87:b2:ed:d3:45:f1:b7:04:bf:dd:44:
15:cd:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:31 2025 by rpki-client