Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/MzNB5ypXg5OdcVwANoRSN2sKGOg.roa
File: MzNB5ypXg5OdcVwANoRSN2sKGOg.roa (raw, json)
Hash identifier: pmHYArPRl7k+8NA6xeGKVPXnidVajrwHCpdzlItQX6A=
Subject key identifier: 33:33:41:E7:2A:57:83:93:9D:71:5C:00:36:84:52:37:6B:0A:18:E8
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0191738B1D3E32AFA778DEF01E8CDA07D724
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/MzNB5ypXg5OdcVwANoRSN2sKGOg.roa
Signing time: Wed 21 Aug 2024 06:06:22 +0000
ROA not before: Wed 21 Aug 2024 06:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47708
IP address blocks: 2001:67c:d8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Aug 2024 13:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:8b:1d:3e:32:af:a7:78:de:f0:1e:8c:da:07:d7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Aug 21 06:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=333341e72a5783939d715c00368452376b0a18e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:3e:4f:b4:02:cf:a8:98:d6:40:85:25:fa:
d0:69:7b:57:35:96:20:ec:3f:cb:87:1e:3a:72:9f:
04:34:40:f6:56:de:fd:a8:75:1d:d8:52:6e:2c:9b:
f7:71:97:57:a1:be:4b:b2:51:a5:a3:30:fd:56:3e:
d3:49:94:5d:6c:9a:b7:6d:39:1a:de:e4:ed:84:f5:
ff:3b:7e:06:28:6f:a1:ef:58:bf:3c:34:89:d5:e4:
12:4a:2b:53:3d:3b:93:c1:a4:0a:70:04:3a:bd:30:
bf:66:6d:1c:3d:40:4d:90:dd:94:97:ac:42:c9:35:
4c:16:f7:bd:6b:12:e8:5f:ff:aa:c5:9b:f7:4d:19:
9c:47:ff:02:fe:a1:dd:77:12:49:1e:58:d0:5a:69:
21:07:b4:7f:be:f4:74:f2:82:90:b5:9b:b1:b1:29:
dc:c2:97:e0:2c:cb:c9:a7:29:8c:2b:49:fc:98:a6:
a9:2a:65:8e:73:64:5f:30:4c:7c:46:65:b3:46:2d:
b0:2a:f9:b9:57:bf:ba:4a:01:e8:90:4f:6c:34:9b:
b2:03:70:22:46:ad:7c:cf:38:88:92:a4:df:3e:ff:
20:a2:1c:f3:c5:7a:1f:24:f2:1d:14:91:57:ac:c2:
78:72:69:b8:93:54:b9:ba:05:1f:6f:52:9f:ee:45:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:41:E7:2A:57:83:93:9D:71:5C:00:36:84:52:37:6B:0A:18:E8
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/MzNB5ypXg5OdcVwANoRSN2sKGOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d8::/48
Signature Algorithm: sha256WithRSAEncryption
7d:24:dd:06:cd:22:68:e1:60:fa:82:77:ae:f3:63:40:1f:f2:
3a:da:57:15:64:d3:9f:59:42:1d:e9:a3:f6:85:3c:67:fc:ee:
61:49:d4:aa:a8:b5:2e:26:e6:2c:d1:02:5e:71:41:a7:fc:3b:
eb:ee:25:a1:c0:6a:84:6b:f9:b2:b4:46:8d:1a:9d:0e:a5:e1:
58:1b:b2:29:0e:84:d0:9e:6b:38:5e:c4:4c:db:b3:f0:3d:7a:
02:85:24:5b:92:c8:b3:8d:43:61:bf:93:6c:3b:47:78:43:fc:
08:13:43:12:fd:4d:32:15:fd:a0:92:4b:35:7e:68:bd:c8:20:
f2:03:a8:3d:55:90:18:07:e5:68:2a:6f:09:3c:7b:81:10:ea:
b5:80:c2:86:18:92:1a:a2:a3:83:6a:95:4a:e1:7f:66:7f:dd:
2c:49:c5:c2:c2:d3:c7:56:1f:2b:92:5a:28:e9:15:4a:90:a3:
37:32:c5:3e:e8:99:9f:3e:9f:05:47:d1:ee:ad:2b:ee:30:75:
9c:04:4a:26:9e:3b:28:4b:6f:5a:1a:ff:c6:9b:b0:5d:cc:7f:
69:1b:20:8d:bc:b0:b3:d9:aa:51:fa:c1:8b:8b:0b:43:53:61:
56:9d:cf:df:1e:85:82:dc:00:65:4b:38:12:3c:5d:4d:a1:2d:
06:ab:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:47 2025 by rpki-client