Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MfFAcGRmnKV5lpfSE2WHXLVr5Gg.roa
File: MfFAcGRmnKV5lpfSE2WHXLVr5Gg.roa (raw, json)
Hash identifier: gFejTzveyCYYS48C75OYpjA2sxTK5dToJ5S7CHVuN+M=
Subject key identifier: 31:F1:40:70:64:66:9C:A5:79:96:97:D2:13:65:87:5C:B5:6B:E4:68
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019374225FB9114F9BBEF07F1E6E9C6F80CF
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MfFAcGRmnKV5lpfSE2WHXLVr5Gg.roa
Signing time: Thu 28 Nov 2024 18:57:10 +0000
ROA not before: Thu 28 Nov 2024 18:57:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13852
IP address blocks: 2a0a:79c0:a00::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:22:5f:b9:11:4f:9b:be:f0:7f:1e:6e:9c:6f:80:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 28 18:57:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31f1407064669ca5799697d21365875cb56be468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:78:f1:27:47:c3:f3:1a:b6:05:4e:8a:a1:
5f:cf:61:2f:25:bf:72:c8:ca:34:26:6a:c5:bc:9b:
20:f3:81:0e:9f:00:77:1f:aa:0e:a9:88:39:4a:1e:
73:59:03:53:8a:e2:5d:b5:cf:6a:63:47:c3:41:27:
25:42:04:ee:a7:b1:6e:2b:7b:4a:60:0e:ff:ab:60:
79:c6:fd:da:43:b8:55:0b:c8:2f:4f:4f:87:fb:23:
95:98:9e:36:c1:37:7e:1d:0a:c0:47:d9:b0:92:c6:
7e:7b:d6:05:f2:d1:b9:e6:4a:11:22:af:fb:d8:b7:
bf:8f:03:55:b7:46:73:f4:8a:20:e5:b0:1a:d2:17:
38:21:11:f4:c0:bf:32:05:ad:37:42:89:ec:41:50:
1a:c2:39:6a:cb:59:85:2d:c3:be:da:3e:e7:77:c1:
d2:b7:0e:e5:0b:1b:07:f5:dd:9b:e3:04:ff:b5:bc:
88:64:4a:5b:89:89:ba:9d:5d:0c:20:f4:f0:47:3c:
c5:44:d1:a0:2e:3a:d0:68:2c:9f:07:46:6f:77:7b:
0b:76:cf:74:86:f9:24:42:a9:8a:00:62:41:d4:7c:
69:56:3f:3c:55:3b:fc:aa:0f:ae:2e:6f:22:c1:a3:
41:d4:49:6e:f8:e8:90:8f:9b:98:fe:17:fb:c1:e3:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F1:40:70:64:66:9C:A5:79:96:97:D2:13:65:87:5C:B5:6B:E4:68
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/MfFAcGRmnKV5lpfSE2WHXLVr5Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:a00::/44
Signature Algorithm: sha256WithRSAEncryption
02:b8:61:0d:7d:a0:3c:a8:15:f5:ed:0a:7f:7e:a5:b1:3a:4e:
f1:33:c2:16:c6:dd:85:a5:1b:fd:05:12:a2:99:8f:0b:95:a3:
96:03:cd:eb:5d:b6:c0:7a:94:c0:ee:55:9e:fe:2f:f7:c6:12:
95:7a:2f:70:29:4f:58:38:f2:ec:09:01:43:86:cd:fb:f1:8b:
a1:45:1c:b9:f6:75:ed:48:6c:32:11:e4:49:ed:45:eb:b7:4e:
19:7c:b2:a8:70:52:79:4b:31:ef:0f:74:b6:ca:30:1e:8d:d1:
05:34:57:15:c7:fb:15:45:77:3b:e2:cd:66:d0:89:d2:5b:96:
30:71:41:6a:31:ba:42:a6:d4:56:5a:86:a2:59:41:2e:1b:99:
e9:c5:be:eb:8d:e5:1b:21:da:11:80:5d:17:2c:dc:20:02:b1:
fd:b3:74:3f:76:c8:1c:fc:cd:39:67:22:f1:87:bc:8c:82:28:
db:1b:57:72:bd:bf:a7:56:9e:36:ff:e9:39:6b:26:77:18:eb:
05:17:61:3b:b6:0a:99:b3:59:5f:20:95:7a:df:6e:2c:93:84:
ed:6b:99:30:a4:10:1a:82:7f:19:6b:85:ae:62:f4:7f:11:82:
45:0b:50:b9:2c:70:01:78:5f:7e:4b:37:c8:4f:ab:e0:09:50:
97:46:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:39:59 2025 by rpki-client