Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/MrcYHbB2NpMmZfBKNjra6WZattc.roa
File: MrcYHbB2NpMmZfBKNjra6WZattc.roa (raw, json)
Hash identifier: CKOKPduDXzIAIUqGdHb0A4YiLFVxLI3zDrF4rVwO7MY=
Subject key identifier: 32:B7:18:1D:B0:76:36:93:26:65:F0:4A:36:3A:DA:E9:66:5A:B6:D7
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 018573B16ADD53ED832062AB0AD3845A07BF
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/MrcYHbB2NpMmZfBKNjra6WZattc.roa
Signing time: Mon 02 Jan 2023 18:14:45 +0000
ROA not before: Mon 02 Jan 2023 18:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58247
IP address blocks: 2a0e:4540:cafe::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:b1:6a:dd:53:ed:83:20:62:ab:0a:d3:84:5a:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jan 2 18:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32b7181db07636932665f04a363adae9665ab6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:fb:62:78:97:80:0d:59:06:bd:62:84:0d:
09:aa:b4:61:4f:88:c8:97:51:65:4c:48:68:00:cf:
9d:ea:de:52:1f:c0:ab:69:86:52:c9:c7:16:19:dc:
bc:73:fe:09:eb:f6:b0:0a:59:7b:1a:80:df:48:67:
48:70:60:c3:5f:95:bc:32:26:19:4a:7f:50:2d:92:
d3:e9:e8:60:c3:4c:85:e4:17:60:78:10:05:9c:4c:
70:79:a7:d8:c2:8a:c1:c7:d7:ee:2c:47:0a:f4:95:
38:06:f2:be:77:4f:14:88:fa:98:e5:c0:28:cf:98:
90:0e:a2:33:33:4b:b3:e7:9d:02:c7:0d:06:0c:5a:
e0:b4:2e:f2:cc:0e:d4:65:d8:d5:16:6c:a3:8e:89:
23:87:b8:88:e9:45:11:8b:0b:e2:67:79:9e:8e:ec:
20:fb:d8:f3:e8:90:ac:8d:f9:3f:31:f5:f9:95:93:
6e:56:41:75:b8:78:ed:5a:7a:c2:4e:bc:02:01:1b:
19:09:74:4f:2a:ad:55:77:b2:29:90:aa:f8:9f:45:
ae:f9:21:c8:7f:d1:ba:23:f6:a5:5f:fb:87:81:1e:
28:21:7d:e7:19:cb:ff:7b:65:8f:17:44:f7:2b:c7:
c3:d4:be:4e:1f:9c:ed:09:91:fb:88:d5:15:c0:0a:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:18:1D:B0:76:36:93:26:65:F0:4A:36:3A:DA:E9:66:5A:B6:D7
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/MrcYHbB2NpMmZfBKNjra6WZattc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4540:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
47:3c:9f:87:5e:d7:d1:e3:76:e7:ba:0f:41:ef:73:97:40:68:
21:15:37:18:cb:46:4a:5d:c3:42:14:59:d9:00:f3:e9:91:e9:
b8:fc:98:fc:93:62:a3:eb:6c:94:b1:73:f4:b9:a3:40:c2:de:
61:be:85:63:75:1d:4a:26:e8:a9:40:68:ff:bb:81:58:da:54:
76:e3:ea:be:02:6d:3a:68:5c:a8:72:ce:0e:9a:8d:7d:22:3d:
3c:85:94:38:91:75:d7:b8:66:1e:11:c2:93:ec:84:d0:90:54:
34:66:d5:f5:01:4d:77:fe:c7:f6:2f:4b:2b:9c:6c:c1:e6:8a:
ce:d0:fe:f0:a4:14:0a:90:7f:07:ed:12:a4:7f:be:3a:47:46:
72:0a:76:a9:13:cc:92:6c:98:f2:5d:1e:e1:51:71:cd:61:50:
d4:1f:ce:f5:c1:e8:ea:81:01:26:04:37:5e:dd:9d:2c:0b:45:
79:fa:fc:3f:ac:0a:14:8d:39:30:f5:c0:27:31:f0:b2:b0:7e:
f9:32:e8:fb:98:71:90:2e:e2:69:c5:f7:b2:4a:85:1c:b8:26:
b0:6e:ed:34:cb:57:30:1e:08:6c:ef:50:78:f9:ae:eb:1e:48:
fa:8e:8f:f8:87:9f:29:81:e4:4b:f8:7c:ac:f7:d6:bd:33:2d:
e5:8e:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org