Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/gMNE69YZb9MoENSB0KbcuiLfnJ8.roa
File: gMNE69YZb9MoENSB0KbcuiLfnJ8.roa (raw, json)
Hash identifier: fNfKzWdV3TqerfKMm1Mzm815pwvZr6opSwo/gv1p4UE=
Subject key identifier: 80:C3:44:EB:D6:19:6F:D3:28:10:D4:81:D0:A6:DC:BA:22:DF:9C:9F
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 018ED70F9644D901014815536A5C3C54114B
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/gMNE69YZb9MoENSB0KbcuiLfnJ8.roa
Signing time: Sat 13 Apr 2024 10:45:06 +0000
ROA not before: Sat 13 Apr 2024 10:45:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 14 Apr 2024 15:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:0f:96:44:d9:01:01:48:15:53:6a:5c:3c:54:11:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Apr 13 10:45:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c344ebd6196fd32810d481d0a6dcba22df9c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:e4:59:d8:b4:4d:93:35:19:e1:cb:53:f7:
35:55:9f:3f:4f:df:06:f1:bc:9f:4a:8c:3d:61:83:
a5:3a:a1:6a:49:ad:ff:0c:af:9a:bc:3d:b2:e7:c7:
49:0c:d3:28:13:f3:b1:78:ab:6e:76:f5:39:b9:89:
3e:97:58:21:52:25:29:cc:e5:f0:5e:88:1e:b9:52:
20:13:bd:8a:9e:a0:46:8e:97:24:e5:a1:ba:c6:d9:
44:3a:4c:88:95:ac:a3:11:be:6c:3c:96:fc:50:7b:
51:de:31:13:ca:9b:22:fd:3e:6b:4c:ed:20:a9:29:
b0:42:54:ef:ec:83:56:27:66:3c:b3:c2:75:cf:5d:
22:3e:59:52:72:ae:c7:35:fe:26:2f:0e:d2:13:81:
24:04:ac:ce:69:e2:d1:cf:e5:d1:c1:f0:f7:0c:fc:
47:7a:c6:61:c3:8e:00:23:73:fd:2c:30:6b:a0:cb:
53:e0:8c:d4:f4:6f:59:22:6f:b7:b4:5b:24:4a:21:
bb:e9:dd:ce:ea:95:55:f8:3e:a4:8e:11:8f:45:46:
8c:55:8b:c6:e0:d5:ed:82:39:76:56:e9:60:42:dc:
87:a2:c7:18:02:a7:d3:35:0b:05:39:dc:f4:6d:12:
5b:c9:19:ac:ac:2f:57:d9:1c:e8:1d:63:fb:99:3f:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:44:EB:D6:19:6F:D3:28:10:D4:81:D0:A6:DC:BA:22:DF:9C:9F
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/gMNE69YZb9MoENSB0KbcuiLfnJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
14:71:f8:8d:9f:34:82:c7:fd:f7:2c:82:2b:e7:0c:56:af:9b:
39:9b:d5:7c:c9:76:c4:46:37:ce:d5:38:6c:f5:6c:86:2a:26:
ca:98:3e:7b:f5:36:95:8d:cc:c8:58:3c:ec:a7:a2:f3:e5:e5:
ee:2f:67:82:16:a4:c5:51:43:23:e6:29:32:1d:3e:08:f3:47:
e2:8c:6a:8d:49:eb:9e:8c:33:07:c1:72:ff:d9:38:88:2f:be:
1d:51:ec:12:02:1d:27:4f:d1:3a:37:b1:a5:49:c7:94:36:68:
e6:e2:76:61:8f:a5:fb:78:0e:0a:ac:d8:97:ea:ff:64:30:74:
e3:51:0b:38:20:d5:4c:5d:1d:66:fe:f0:74:be:29:19:6d:70:
dd:57:bd:f3:ee:43:d3:0a:98:60:0e:70:44:91:60:31:08:7e:
47:6b:f0:cb:f9:9f:d3:6d:ae:a2:dc:04:c0:dd:e0:a4:46:b2:
f1:3d:40:db:88:c2:01:a6:fb:9b:98:09:1a:8e:a3:42:1d:0c:
6d:b0:15:ea:56:97:bb:d1:f9:07:e3:5a:19:2b:af:81:28:92:
f1:4b:bf:b2:94:7b:a6:7c:f4:7b:e5:f9:46:ca:99:4a:1f:6d:
74:cd:bc:b6:36:6e:06:4d:e1:dc:4e:d0:a9:98:d3:d5:2c:cf:
10:e0:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:42 2024 by rpki-client on console-fra.rpki-client.org