Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MjdJgxxG5oYo_ptLkgSsbDAEXp8.roa
File: MjdJgxxG5oYo_ptLkgSsbDAEXp8.roa (raw, json)
Hash identifier: Kjpo6JtL4SBzxDBIV5v1Tq7KMlXiVGTKWTz8u35uvEo=
Subject key identifier: 32:37:49:83:1C:46:E6:86:28:FE:9B:4B:92:04:AC:6C:30:04:5E:9F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0192D1BA8D62698F9C268518EA4467C33B55
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MjdJgxxG5oYo_ptLkgSsbDAEXp8.roa
Signing time: Mon 28 Oct 2024 06:05:16 +0000
ROA not before: Mon 28 Oct 2024 06:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:192:d1b9:ee0f/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 28 Oct 2024 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:ba:8d:62:69:8f:9c:26:85:18:ea:44:67:c3:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Oct 28 06:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=323749831c46e68628fe9b4b9204ac6c30045e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:7d:47:dd:f0:d4:8d:36:7e:74:5b:76:fb:
3d:72:df:76:59:1e:46:94:f3:e5:af:dc:bc:55:a6:
dd:ae:5b:05:3b:0f:39:37:41:8d:3e:a0:54:01:e8:
57:a2:e8:95:1e:46:03:2a:3b:36:d2:a3:7b:5c:b5:
2d:4b:00:bc:54:75:ba:36:8a:38:6a:58:dd:2d:e6:
2e:a1:f9:c9:33:3e:21:eb:fb:9a:d7:58:24:dd:85:
34:7f:99:7a:c9:12:f4:74:60:7a:76:25:94:fe:c3:
d7:a6:23:53:07:c3:1c:b5:79:34:9f:e8:af:b9:a6:
bf:c9:f3:97:4b:d3:d0:71:6c:a9:15:61:0b:0e:54:
60:0e:de:5a:44:29:e1:59:98:fd:ca:99:a0:f1:d3:
04:92:60:59:ed:cf:12:31:dd:b0:b1:46:ab:05:5c:
48:3d:89:bd:a6:b3:8e:68:83:46:ef:71:62:e8:0c:
6a:66:24:9d:1c:1d:58:8e:bc:79:09:81:2b:88:86:
62:0f:3b:0b:23:d2:94:79:67:6a:1e:50:75:72:d1:
8b:54:40:3d:27:22:08:4f:5c:8b:db:c6:de:21:9e:
63:37:7f:14:94:9e:ba:8b:0f:56:61:86:9b:77:7c:
f6:90:df:da:a9:90:f7:77:30:50:5e:78:b3:d1:e4:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:49:83:1C:46:E6:86:28:FE:9B:4B:92:04:AC:6C:30:04:5E:9F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/MjdJgxxG5oYo_ptLkgSsbDAEXp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:192:d1b9:ee0f/128
Signature Algorithm: sha256WithRSAEncryption
4a:47:83:d2:82:5f:8d:09:97:0b:5c:ad:9f:08:b4:4b:7e:fc:
59:ff:d3:df:ed:4f:44:8a:32:56:61:77:10:31:74:3b:d1:63:
6f:6d:54:80:f2:6c:2d:19:cc:cc:68:08:df:86:3e:84:32:f3:
05:06:24:59:3f:bc:b5:d0:03:a3:1a:a2:2c:36:fb:54:52:d2:
b5:88:d7:d8:e8:3d:da:0f:b5:c8:3c:9d:7b:aa:27:e4:33:d5:
f8:ca:93:e4:68:7f:f2:68:ec:a7:14:bf:60:b5:f4:72:83:2f:
f3:0d:62:36:f9:06:9d:5a:49:0a:4b:03:03:1c:12:cb:7f:1e:
f3:81:7e:0d:47:a1:19:bb:65:c7:93:74:e4:ab:aa:cc:65:bd:
da:e6:82:e4:cf:5e:7c:61:9a:42:3e:c2:40:68:8c:60:3f:1e:
0e:41:52:6f:28:4d:fe:b9:85:67:bb:e7:5b:0a:b7:d8:d1:75:
b2:4f:42:11:0f:1e:58:78:cc:20:07:cf:38:aa:ac:7d:49:e5:
24:a5:0e:fd:66:62:d4:0e:f6:a6:14:d7:03:8f:a6:2a:a0:17:
9c:98:45:fa:f9:36:23:02:01:1a:ef:41:9f:17:b2:b7:ff:ee:
a2:f6:be:e7:8d:af:ae:40:9c:90:8c:44:b0:4b:7c:1f:bd:82:
d5:83:9b:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 28 08:56:18 2024 by rpki-client on console-fra.rpki-client.org