Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa
File: 3MMu-5AGoqHJ2AgIGOazIryJ8go.roa (raw, json)
Hash identifier: /272J3w3mhrXoMlqdnsveIA4HBeIp6LlW6H67xJZnfE=
Subject key identifier: DC:C3:2E:FB:90:06:A2:A1:C9:D8:08:08:18:E6:B3:22:BC:89:F2:0A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F3004085EB136AE044FE825BF5A4DCE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa
Signing time: Sun 01 Jan 2023 21:14:55 +0000
ROA not before: Sun 01 Jan 2023 21:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211035
IP address blocks: 2a0e:aa07:e023::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:04:08:5e:b1:36:ae:04:4f:e8:25:bf:5a:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcc32efb9006a2a1c9d8080818e6b322bc89f20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:b7:17:cb:64:a8:50:ab:a6:48:9d:80:b9:
f0:00:75:cc:76:9f:85:22:56:e7:e4:c9:d0:69:47:
a7:ed:9b:39:59:3c:6f:65:76:05:f2:63:a3:89:ea:
04:c0:9f:7b:0b:fc:7b:48:f7:5b:fd:fa:f7:9e:96:
32:7b:1f:de:88:77:91:8c:35:63:b1:c2:6d:f0:1b:
17:93:04:25:4b:88:07:cb:d3:44:13:53:2a:76:e7:
d3:4e:a4:38:e2:07:56:c4:92:4c:17:16:5a:d0:25:
af:bd:0e:93:2e:71:0f:42:f3:6a:85:2e:2e:a5:8c:
95:c3:34:3b:0d:97:df:3d:97:83:65:fa:ca:1c:e5:
d5:4b:b2:62:de:56:75:c5:09:09:2e:95:27:c6:c1:
dd:0d:1d:fa:47:d9:b4:73:b3:b0:19:30:84:f5:2f:
bb:8a:fc:8e:18:39:28:2f:ea:55:ce:b3:84:bc:fc:
e6:f5:c9:75:10:90:04:3c:5b:41:2d:b5:01:af:3a:
10:b8:fd:be:b3:90:00:2e:7c:c9:9d:81:ef:6a:b9:
e7:d9:28:98:01:7b:c2:1c:8e:68:91:64:12:41:a8:
3c:4c:04:7e:e4:17:72:56:69:4d:ff:41:0d:08:d7:
0a:76:9b:2c:ce:ae:7e:8f:7f:be:53:04:e3:34:7c:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:2E:FB:90:06:A2:A1:C9:D8:08:08:18:E6:B3:22:BC:89:F2:0A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3MMu-5AGoqHJ2AgIGOazIryJ8go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e023::/48
Signature Algorithm: sha256WithRSAEncryption
c3:e5:a2:44:e4:d4:82:65:ca:2a:53:39:15:40:26:d8:79:ff:
d6:fa:16:f2:27:6a:3d:91:12:91:3a:3f:ea:e8:62:f2:4b:f9:
4a:3f:a3:f3:50:10:ef:31:de:53:b7:3d:a1:b3:fd:7f:d9:9b:
15:df:3c:29:c0:a6:9a:98:9f:00:32:df:a9:ea:8c:86:4e:fa:
a5:3d:5e:50:73:b1:6c:08:55:3f:16:54:df:f3:bf:28:74:ea:
74:1b:7c:fd:3c:4e:24:d6:9b:48:c1:53:ea:5a:de:a8:bd:36:
08:cd:62:aa:93:5e:d2:d7:c6:6f:a1:ee:fa:52:64:be:df:2a:
ee:1b:c8:c8:dc:e4:68:2c:d2:3f:c1:7a:9b:44:45:0f:93:f1:
48:e4:b7:c7:b3:60:cb:10:50:a5:36:f4:54:12:5d:45:a1:15:
c8:7f:41:16:e1:40:58:68:53:80:5e:d2:01:a0:52:e7:22:e5:
af:60:7f:81:1d:53:07:5c:7f:17:61:a1:db:67:e6:d0:7f:44:
a3:b9:8c:0f:cc:8c:cf:af:3b:bc:87:b6:10:43:44:82:0c:cb:
92:97:16:af:25:4e:5f:17:2a:6e:30:94:b6:09:cc:d3:08:2b:
01:2e:e3:3d:94:d5:4e:f7:af:1b:03:8c:1a:1e:b5:a7:e4:a9:
b8:8c:b7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:10 2024 by rpki-client on console-ams.rpki-client.org