Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa
File: mbqYMOrmsDUg1MN8HWmCpciKcVw.roa (raw, json)
Hash identifier: 5TTd7odnQLiPcli2kNIARpzm/DWYYC2sa4Hf9hyCS4I=
Subject key identifier: 99:BA:98:30:EA:E6:B0:35:20:D4:C3:7C:1D:69:82:A5:C8:8A:71:5C
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 018CA4C059055583E68DA99C840F118332B4
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa
Signing time: Tue 26 Dec 2023 06:11:58 +0000
ROA not before: Tue 26 Dec 2023 06:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212541
IP address blocks: 2a12:4946:4050::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:c0:59:05:55:83:e6:8d:a9:9c:84:0f:11:83:32:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Dec 26 06:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99ba9830eae6b03520d4c37c1d6982a5c88a715c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:17:5b:c3:17:fc:cc:4a:a9:b5:08:d2:a4:
75:ab:7d:b4:e0:3c:a5:77:62:35:5d:f4:8b:44:42:
49:0b:24:d1:e2:13:f7:84:ec:f2:b0:22:1a:e1:2f:
ff:ad:47:1b:da:d2:38:be:40:17:0a:f2:54:2d:98:
11:d7:e4:c0:53:c7:97:5c:a1:75:a7:96:b8:2e:75:
61:44:8c:26:cf:28:e4:53:d9:cb:9c:99:6a:2c:33:
18:42:b3:1f:53:0b:32:e9:03:45:7d:35:ab:7b:5b:
11:d3:ab:15:f7:92:1c:07:07:b3:95:e6:ac:36:10:
53:03:fa:f3:90:40:8d:91:b8:d1:b6:c7:e2:7b:22:
87:b8:54:d2:2d:ce:08:6d:ec:fa:05:e7:2b:24:5a:
e4:ad:50:f7:a4:45:85:80:7a:19:e0:ec:21:8b:03:
85:32:c6:49:03:ae:f1:10:8b:20:61:56:9c:32:9f:
4f:97:bb:b6:e1:22:46:2c:32:51:be:7f:e6:87:82:
04:64:cc:00:3f:50:40:c4:36:23:37:15:11:37:c2:
11:49:2b:2f:bb:c0:61:03:1e:94:a8:80:de:bb:95:
64:b3:b0:a5:90:a7:83:b9:db:71:23:b9:35:57:87:
1c:7a:cf:fd:c3:5a:8f:54:19:70:fb:82:eb:fe:5b:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:98:30:EA:E6:B0:35:20:D4:C3:7C:1D:69:82:A5:C8:8A:71:5C
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/mbqYMOrmsDUg1MN8HWmCpciKcVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:4050::/44
Signature Algorithm: sha256WithRSAEncryption
22:41:8e:ce:ac:c8:9c:5e:3d:89:35:30:fc:59:66:ef:3a:a4:
0b:c6:e3:56:f7:b3:61:f3:c5:b4:dd:4d:2b:70:42:81:c9:f3:
bd:61:43:7b:4a:0d:ed:66:37:da:fa:4b:0a:e4:f6:02:dc:9d:
ab:0e:b6:d0:ac:c8:c2:09:b4:16:18:71:bd:8f:bc:9b:a8:26:
a0:cb:ec:e2:55:f1:7d:fc:99:f0:7d:2e:a2:b5:be:db:b0:09:
fc:ec:d6:7d:0e:be:73:50:c1:b8:e9:f9:ad:f3:23:ff:d8:81:
24:38:37:ca:c0:c5:32:a5:63:fd:a9:b0:78:a8:c4:c7:f0:ce:
45:14:a3:a9:a9:28:65:6a:e4:c3:6c:60:1f:da:69:36:e8:a6:
0a:44:ff:a6:c7:91:dd:c3:80:05:da:4a:4e:47:cb:83:d5:b1:
20:19:36:62:3d:ff:ed:a1:ce:4e:0d:57:d5:a2:bf:73:8a:d4:
ba:df:07:81:e6:5e:4e:72:fe:45:9a:c6:98:db:0b:43:72:bf:
36:74:8e:17:44:26:c3:78:75:1e:59:34:e4:cf:bd:2c:07:0e:
d3:27:b3:66:b9:8e:96:c7:be:a8:dc:76:1b:13:18:d4:5e:85:
e3:31:9d:32:54:c5:dc:a5:cb:7d:a0:df:92:0e:04:9f:35:2f:
2f:66:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:34 2024 by rpki-client on console-fra.rpki-client.org