Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MMNG1f318v87wkARdGMRhBzg1oc.roa
File: MMNG1f318v87wkARdGMRhBzg1oc.roa (raw, json)
Hash identifier: glow6DBT2A2BDJ9O2R0LQvhTLiX6OzU3SoGiayt82GM=
Subject key identifier: 30:C3:46:D5:FD:F5:F2:FF:3B:C2:40:11:74:63:11:84:1C:E0:D6:87
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 0190803953339A15BB9C22975D1A3EFDA5D6
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MMNG1f318v87wkARdGMRhBzg1oc.roa
Signing time: Fri 05 Jul 2024 00:09:18 +0000
ROA not before: Fri 05 Jul 2024 00:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a10:3b02::/32 maxlen: 32
2a10:3b04::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jul 2024 16:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:80:39:53:33:9a:15:bb:9c:22:97:5d:1a:3e:fd:a5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jul 5 00:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30c346d5fdf5f2ff3bc24011746311841ce0d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:83:d2:b3:c9:27:03:b8:76:da:9f:1e:e0:
42:e7:8b:f0:9e:2f:27:76:87:e5:b4:87:6b:99:b9:
aa:45:5f:5a:f6:dd:63:5f:46:7a:e2:9f:10:5d:f4:
98:6a:be:9f:cb:07:67:bc:72:67:8d:8c:06:8d:2d:
dd:bc:2d:ea:28:7f:9e:89:53:52:66:9b:c7:f0:06:
af:59:f3:4d:7e:4c:a1:20:11:78:d9:71:90:bc:85:
e8:7e:ec:16:93:7d:96:1a:79:41:b1:6e:ea:a6:7e:
be:23:c2:a4:2e:f0:b8:2d:fd:3a:94:8e:18:e9:13:
e6:d2:23:31:a7:2a:68:f2:8c:4e:99:c2:ec:c7:12:
3d:ec:ce:46:10:bf:49:53:8f:01:8e:15:e8:2a:32:
2f:79:06:2d:45:4b:b5:3c:70:1f:06:26:a7:e4:9b:
62:e3:2a:eb:5b:9a:2c:00:e3:3f:b8:d6:13:fc:07:
fa:e0:4a:f3:47:5f:37:d8:f8:77:8f:a0:a3:57:9b:
42:d8:04:ba:92:4c:86:d8:65:a8:ce:5f:d7:28:81:
b5:26:ff:a0:cd:c5:47:82:cb:b0:61:09:fd:17:d0:
b5:94:df:8e:80:c1:ca:3b:29:8f:6e:44:05:3a:3a:
68:87:e4:5b:53:82:78:7f:93:a7:cd:0b:2c:25:ac:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:46:D5:FD:F5:F2:FF:3B:C2:40:11:74:63:11:84:1C:E0:D6:87
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MMNG1f318v87wkARdGMRhBzg1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3b02::/32
2a10:3b04::/32
Signature Algorithm: sha256WithRSAEncryption
90:5f:86:4c:f4:e8:95:22:aa:1b:89:b0:bb:88:3f:e5:9d:90:
7b:0f:9c:c4:6a:b4:9b:ed:f5:88:3b:73:08:f3:39:4c:82:e0:
85:f7:53:a7:68:49:4c:48:82:e6:29:38:de:0a:be:1e:71:d9:
c8:37:91:7a:9a:b3:79:66:17:1d:79:38:e7:cb:a6:b0:55:f0:
78:a0:89:37:63:c5:75:6a:d6:c1:ae:94:70:7b:37:5c:cf:47:
08:62:77:78:f7:3d:36:03:e4:c9:a2:35:ec:9f:7d:7f:29:6f:
ba:8f:83:c9:4a:c8:39:9a:68:f5:db:6c:c3:65:6c:4d:a9:27:
7b:68:d4:81:7b:3c:4c:37:87:63:a8:b9:fc:df:fc:a8:ae:5f:
d6:05:08:d5:10:e4:23:ec:5b:e7:cf:5a:4c:e0:a9:39:c3:72:
0a:c6:07:26:84:e1:fb:a1:2b:c5:c9:6b:6f:9f:32:5a:a2:5d:
82:84:f1:7e:63:40:92:90:8c:2f:73:5d:7b:89:83:21:c3:72:
e7:b6:aa:f7:80:4b:69:b4:cd:47:6c:c2:73:23:32:ca:b7:9b:
35:e1:0a:e0:1d:38:96:6c:7c:21:d9:65:ec:7c:32:e9:e9:f3:
7a:ff:80:78:53:1a:50:f1:95:d3:ca:ca:0b:47:42:40:bb:93:
3e:25:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 19:43:33 2024 by rpki-client on console-ams.rpki-client.org