Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/mukvM5RG-24QHiWuGl4oDGDNFCY.roa
File: mukvM5RG-24QHiWuGl4oDGDNFCY.roa (raw, json)
Hash identifier: uDur0u7VHxX3Ap6aUOlZqOeAWd9kKA8XcRABBFBIGIU=
Subject key identifier: 9A:E9:2F:33:94:46:FB:6E:10:1E:25:AE:1A:5E:28:0C:60:CD:14:26
Certificate issuer: /CN=0494b226492a3eebe8a637cf8923e7961f908cc5
Certificate serial: 018AE1550420059F6CBC1E03BDEE3AF2E117
Authority key identifier: 04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/mukvM5RG-24QHiWuGl4oDGDNFCY.roa
Signing time: Fri 29 Sep 2023 14:25:59 +0000
ROA not before: Fri 29 Sep 2023 14:25:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216227
IP address blocks: 2001:67c:2640::/48 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:55:04:20:05:9f:6c:bc:1e:03:bd:ee:3a:f2:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0494b226492a3eebe8a637cf8923e7961f908cc5
Validity
Not Before: Sep 29 14:25:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ae92f339446fb6e101e25ae1a5e280c60cd1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:07:84:4a:50:4b:f1:d7:33:38:b8:8d:ba:
f3:11:eb:13:47:62:d1:fa:53:db:51:cf:e7:70:43:
9d:53:57:00:f9:3b:23:8c:f2:e7:86:f5:83:f8:ea:
5e:84:c1:da:60:a9:cf:9b:89:8e:74:26:c4:af:62:
25:b2:5f:c2:47:6b:c8:8c:21:56:f2:fc:24:e2:4e:
53:c2:76:b8:cd:2d:78:32:6a:44:fe:ea:66:25:65:
21:9c:8d:94:e7:87:a5:0b:90:4a:ac:c8:f9:71:e3:
d9:0f:d9:75:32:40:46:46:da:d0:71:d1:48:bf:f0:
da:9d:2a:60:43:96:fe:ef:17:cb:d2:4b:80:28:8b:
12:70:ba:f2:d2:17:0f:3d:fe:7d:6d:37:b4:de:5a:
45:6e:53:9e:e3:25:0c:eb:6c:fd:ac:e2:96:df:c0:
5c:45:be:4a:95:85:56:f1:29:8e:ed:1d:d3:5a:5c:
71:a2:47:4d:e3:a3:f3:32:8d:9d:76:5a:c8:d8:a6:
96:97:48:fe:55:c5:51:5f:ac:2c:28:ac:9c:2f:e8:
5f:d4:f1:b7:26:fa:11:02:58:0b:4d:76:0c:11:a5:
e6:3f:9c:66:08:43:41:c4:bf:3e:83:45:93:7c:31:
63:ec:f5:28:27:81:73:66:36:bf:18:ed:d3:ef:5f:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:2F:33:94:46:FB:6E:10:1E:25:AE:1A:5E:28:0C:60:CD:14:26
X509v3 Authority Key Identifier:
keyid:04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/mukvM5RG-24QHiWuGl4oDGDNFCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2640::/48
Signature Algorithm: sha256WithRSAEncryption
78:fc:54:e5:85:f2:5d:b2:23:d7:23:95:f3:d0:3b:80:9f:fe:
4a:90:ce:6a:17:1a:3e:42:e4:14:18:27:5c:63:07:dc:fc:25:
77:75:76:b8:eb:ac:4f:49:27:d1:72:f2:c9:ef:31:a0:ae:27:
d1:fa:87:45:91:bc:7e:b6:67:75:33:1f:2a:33:c7:76:e0:e6:
1a:d4:03:d7:f0:2c:e7:85:09:27:ca:2b:ef:8c:3b:49:ca:6f:
d7:b8:83:d1:72:35:40:1c:ce:ae:52:32:b6:ab:d8:07:d9:70:
b8:e8:ad:f3:9d:33:6f:38:98:eb:b6:d2:e7:a9:d8:d3:cf:a3:
c1:a9:92:1b:a3:40:96:2a:47:a0:f3:65:7d:85:7e:10:81:ae:
2a:0a:bb:fd:bc:41:91:16:e6:7b:3f:1f:ad:52:b8:c2:50:d7:
30:f7:15:af:c1:06:40:0d:3b:7a:54:62:cb:4a:af:98:57:a7:
b7:d6:92:4d:9d:23:b3:54:a8:dd:93:80:0c:56:ee:93:35:c0:
99:1e:ce:74:31:ff:8d:43:f8:b7:58:ee:36:31:5b:1e:29:43:
ff:55:e4:38:8c:16:8f:3a:64:d6:e2:11:1a:b6:0a:de:8c:10:
a5:75:fa:e8:59:61:c0:e9:d7:c7:31:35:ca:0b:43:84:53:37:
f0:9f:1d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org