Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/MzxMOJJn-UhoyrUtPmJ7viqEjfg.roa
File: MzxMOJJn-UhoyrUtPmJ7viqEjfg.roa (raw, json)
Hash identifier: 4569LfmUiunKHzvJjSKkzRlz6eInWIywdSpftcxJ9fw=
Subject key identifier: 33:3C:4C:38:92:67:F9:48:68:CA:B5:2D:3E:62:7B:BE:2A:84:8D:F8
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018BD0E73D7AA899B19BBA7E8C577DD1685D
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/MzxMOJJn-UhoyrUtPmJ7viqEjfg.roa
Signing time: Wed 15 Nov 2023 02:54:57 +0000
ROA not before: Wed 15 Nov 2023 02:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215995
IP address blocks: 2a0f:5707:cf80::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d0:e7:3d:7a:a8:99:b1:9b:ba:7e:8c:57:7d:d1:68:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Nov 15 02:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=333c4c389267f94868cab52d3e627bbe2a848df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:b9:63:18:51:52:e8:1e:ae:8f:74:7e:ff:
76:d6:27:da:f6:d5:11:4d:38:63:94:98:fb:3b:8f:
89:67:84:89:0c:ed:e0:23:1d:16:0a:6a:c1:e9:04:
f4:7b:2b:ed:7c:1f:3b:88:08:8c:f2:44:0b:24:07:
cd:41:44:7b:19:43:e5:ed:8a:8e:c7:6c:d0:88:5c:
3c:57:82:31:27:1c:e0:98:e5:6c:a0:6b:95:ff:71:
5e:22:e0:f5:a1:00:81:8d:1b:f2:07:8e:b8:10:b2:
15:ab:03:35:d8:5b:b0:8e:fb:a8:5a:b4:c3:38:28:
95:34:69:1a:38:db:3c:44:b6:7f:f6:68:e6:06:b6:
e9:cb:b0:5a:a6:a7:91:3a:2d:ac:67:0b:84:86:d5:
31:9e:53:50:e1:24:77:fe:35:bb:c0:a7:d5:85:71:
f6:d2:6a:61:49:a9:90:db:09:68:9a:e1:00:9e:a9:
43:73:ad:16:f3:39:3c:9a:08:be:be:27:36:d5:fc:
22:1b:a2:a1:ec:e3:28:c2:6f:aa:e7:f3:97:75:96:
b3:28:7e:9a:72:ab:80:89:d8:be:92:31:06:16:ea:
74:4f:a7:3d:b5:7c:2c:dd:7f:76:71:5f:59:81:6f:
2d:33:51:c6:df:c0:96:66:0d:38:8a:fe:1a:17:46:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:4C:38:92:67:F9:48:68:CA:B5:2D:3E:62:7B:BE:2A:84:8D:F8
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/MzxMOJJn-UhoyrUtPmJ7viqEjfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:cf80::/48
Signature Algorithm: sha256WithRSAEncryption
53:e6:06:aa:01:71:bb:0f:35:28:49:14:4c:ec:0e:f0:20:49:
c4:ac:68:9d:b2:4f:94:2b:66:ae:de:60:6a:57:e9:0d:b4:73:
55:e9:c2:5f:d1:53:d7:01:a7:2e:7b:78:cf:55:6b:a7:d6:06:
26:03:be:e8:8d:c3:41:bf:2a:9c:24:21:e0:33:1a:3e:91:a5:
4b:54:f4:96:28:a4:68:e7:d4:50:92:ef:8c:6e:b1:a0:71:2c:
4b:26:96:e8:fe:94:3c:03:67:e8:39:b4:1d:67:11:d8:db:01:
40:34:03:ed:1c:1e:3e:5e:a6:52:73:dc:b5:75:00:a9:7a:85:
2c:6e:ce:b4:0b:d8:f3:d4:05:88:d3:4e:22:b5:39:81:8e:0c:
e5:cb:bd:da:f3:0d:93:20:31:aa:b3:09:49:80:34:3f:f7:1c:
ce:0c:fb:b5:4b:d7:9f:ed:1b:d2:19:df:c6:20:b0:15:2b:05:
ac:b5:8d:47:b5:08:03:9b:c4:3d:ba:10:15:fa:0a:aa:db:6f:
97:d7:6b:c7:b0:6c:12:dd:86:e1:c0:fc:42:24:d1:1a:6b:da:
bf:8e:07:ee:27:e4:33:63:e1:3c:9f:8b:db:75:cb:5e:1e:97:
26:25:d7:f9:ee:e4:24:2f:7a:52:e6:65:eb:33:a5:23:f0:72:
6c:40:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org