Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MSgfAtLLHh8U9WrksYNtdLYbcNg.roa
File: MSgfAtLLHh8U9WrksYNtdLYbcNg.roa (raw, json)
Hash identifier: +DQvquE5J8hUDkGXYG9Ko9AFsT7v3jf6Wyd2AwR/XWk=
Subject key identifier: 31:28:1F:02:D2:CB:1E:1F:14:F5:6A:E4:B1:83:6D:74:B6:1B:70:D8
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018872D6AE37639F39E657E61D56C1B26A80
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MSgfAtLLHh8U9WrksYNtdLYbcNg.roa
Signing time: Wed 31 May 2023 17:24:11 +0000
ROA not before: Wed 31 May 2023 17:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61298
IP address blocks: 2a12:bec0:180::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:d6:ae:37:63:9f:39:e6:57:e6:1d:56:c1:b2:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 31 17:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31281f02d2cb1e1f14f56ae4b1836d74b61b70d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:35:34:a0:30:03:87:63:df:2f:75:ad:ac:
6b:f2:cc:d1:34:a4:41:23:86:26:d5:64:05:df:7c:
51:f9:9d:24:2e:81:b3:a4:2f:2e:90:27:0d:d3:a7:
14:f4:ae:66:da:b4:9e:df:ed:98:b9:31:dd:0e:07:
e6:18:4d:5e:d4:28:b1:20:03:00:e1:bd:51:97:26:
c7:0b:df:02:ac:1f:dd:0f:2d:7a:1f:03:97:f0:8d:
25:49:f6:d6:d1:39:c0:11:12:cf:42:d0:be:70:fd:
94:93:19:18:63:90:8a:41:76:2d:3f:cb:a3:f2:fd:
87:f5:9e:ce:2f:53:4d:18:7f:77:4d:b0:45:f9:4c:
af:73:42:eb:74:4f:8e:9e:4e:76:7e:1e:bf:08:01:
1d:01:48:a3:7b:10:e5:68:52:1f:cd:13:ce:d8:1a:
4b:58:d7:8c:b8:4b:07:bc:f5:65:2c:8e:fc:a4:5d:
4f:03:03:83:c8:4d:ee:d9:8c:7b:8b:ce:eb:52:a0:
f6:a1:4d:86:19:10:09:7d:48:77:c4:b3:3b:6d:3b:
0f:c3:5e:b9:46:3a:a9:0e:78:a8:de:92:97:0a:ac:
62:3a:77:9a:61:2f:8e:6d:33:ae:a7:15:88:e5:61:
27:ba:35:0c:7f:12:58:9e:fb:71:f7:74:bb:3c:f9:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:1F:02:D2:CB:1E:1F:14:F5:6A:E4:B1:83:6D:74:B6:1B:70:D8
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/MSgfAtLLHh8U9WrksYNtdLYbcNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:180::/44
Signature Algorithm: sha256WithRSAEncryption
a3:d0:3b:a6:d6:b7:0e:09:65:f7:97:21:91:32:49:4d:60:a2:
34:86:ce:a0:85:eb:a1:4b:5a:fe:12:fa:c6:e8:60:1c:a2:16:
da:0d:9a:56:38:38:04:b5:b7:ee:16:4e:a3:b6:3f:bd:82:a9:
f9:5e:a4:b5:50:8e:0d:da:1d:36:31:da:2e:6e:26:75:58:57:
c7:99:9b:cb:54:23:5b:4a:64:4c:37:5a:a8:5a:67:39:b9:0d:
0d:3e:9f:83:92:2b:bd:50:41:c2:1c:57:ae:e2:0b:d5:75:a9:
49:08:8a:2e:3e:69:59:ce:e9:d5:cd:30:a5:1b:10:dc:42:44:
43:0b:57:c7:fc:66:d4:79:11:ff:b3:13:7e:b1:a8:56:7c:39:
5d:2d:05:ca:3c:95:ea:06:8b:a7:da:3a:89:c1:17:7d:19:49:
b2:63:bc:f5:6b:f1:0c:93:f8:aa:4e:c2:4c:e5:fc:ae:6a:00:
a9:19:f5:b4:0d:06:cb:2e:d2:3a:bb:40:b5:b5:1d:98:43:3f:
f3:da:be:70:3a:36:41:b2:fa:6f:0f:4c:96:76:f7:6e:ad:7c:
81:8e:30:59:19:23:f0:aa:d1:2f:aa:2a:dd:19:0d:0e:ce:6a:
c1:d5:f2:ed:69:7b:ab:c8:b0:ee:d5:66:f5:c4:a5:85:ef:15:
6d:46:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org