Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MxFcuKplycScZNWgMqrSlIR10xs.roa
File: MxFcuKplycScZNWgMqrSlIR10xs.roa (raw, json)
Hash identifier: X0oQhQo2x5CW956OpJv1BP9cjEGrT3gE6cSwI2BoiO4=
Subject key identifier: 33:11:5C:B8:AA:65:C9:C4:9C:64:D5:A0:32:AA:D2:94:84:75:D3:1B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0193F404F63D3CE8E47C52A7F49DC59A6AC7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MxFcuKplycScZNWgMqrSlIR10xs.roa
Signing time: Mon 23 Dec 2024 14:56:25 +0000
ROA not before: Mon 23 Dec 2024 14:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136897
IP address blocks: 213.217.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:04:f6:3d:3c:e8:e4:7c:52:a7:f4:9d:c5:9a:6a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 23 14:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33115cb8aa65c9c49c64d5a032aad2948475d31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:6f:47:c6:4a:6c:b7:5c:17:76:9e:dc:2d:
1d:77:2e:7a:84:7c:48:ae:03:53:58:d3:d9:c7:ff:
13:ae:1a:8f:48:ff:77:f8:7a:1b:85:26:1d:12:17:
05:21:4e:fb:58:42:71:96:1f:14:ba:3b:b3:16:ca:
89:48:ec:f6:f9:46:60:57:96:cd:be:76:b3:3e:18:
4e:22:3b:eb:39:5b:52:fe:96:1f:af:cb:c1:83:48:
10:43:62:29:73:2c:24:82:2e:d9:ae:3d:d3:1f:db:
4b:b9:ea:46:fc:59:65:3b:f6:85:41:34:25:ba:5d:
52:a8:78:07:5d:89:26:ce:07:f7:8d:6d:87:4d:fc:
38:2a:61:d3:54:c4:01:c7:f5:1c:56:4a:0e:90:97:
ac:a1:1a:47:05:34:75:79:d3:4b:70:e7:b2:08:33:
ac:b1:da:99:2e:14:d3:8c:a1:d5:6d:41:45:bc:09:
35:72:de:ac:65:c0:fc:a3:26:dd:02:ce:12:f7:a5:
06:ed:75:71:12:1e:66:a2:be:6d:0f:9f:d9:90:ea:
7b:a6:d4:54:55:47:2f:d6:aa:d6:17:a3:5e:51:5a:
e0:87:c4:8e:01:05:18:0c:bb:86:34:1d:32:63:c4:
e8:89:d5:b9:00:98:7a:65:92:80:2c:a2:7b:a8:04:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:5C:B8:AA:65:C9:C4:9C:64:D5:A0:32:AA:D2:94:84:75:D3:1B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/MxFcuKplycScZNWgMqrSlIR10xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.9.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e9:9e:96:67:ce:6f:29:17:4d:d7:72:3a:97:13:67:d9:1f:
a5:c8:ac:cf:3c:21:c9:76:6e:31:44:17:9c:f6:3b:7f:e1:59:
8e:e8:55:33:8e:ad:b7:b3:4d:03:42:7f:4f:72:9f:9f:3a:3d:
21:6d:d3:67:b3:45:08:44:5b:02:09:3d:ed:1c:b1:12:69:ad:
f4:82:74:24:a4:f7:ab:21:3f:e1:f8:39:81:b3:5d:8c:f7:c7:
db:7b:d3:34:89:45:15:13:3e:be:14:4e:26:04:60:a4:ca:59:
6a:ca:0c:31:eb:2b:d5:13:2c:40:05:98:a9:0e:9b:a5:fa:dd:
d7:45:d9:f3:9d:fc:2b:23:9b:ca:70:ec:cd:ee:54:ad:10:37:
f0:de:a2:fc:dd:69:58:52:98:56:a0:da:0b:3a:c9:d9:ad:d9:
bb:f6:04:32:21:bf:52:27:92:8d:76:f0:26:3e:8f:6c:03:9f:
ad:17:e5:99:bc:c6:1e:6d:9e:78:09:bd:00:84:8d:cf:b1:02:
a4:24:ca:3c:82:48:10:fa:36:fd:29:73:3b:4c:3d:46:ab:0c:
d2:dc:f7:b7:dd:f3:3f:7e:29:18:15:09:c8:73:5d:d9:02:5f:
54:ae:c5:2b:66:07:b8:cf:14:d8:1a:63:4c:30:90:36:ef:4c:
09:77:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:29 2025 by rpki-client