Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-2Blqu_rKJCQzP6ZUzYoHmsggE.roa
File: M-2Blqu_rKJCQzP6ZUzYoHmsggE.roa (raw, json)
Hash identifier: x/em9YsqNRzVNhrob5rMQ5R5xgTHFQqu2LoFCUOTwCU=
Subject key identifier: 33:ED:81:96:AB:BF:AC:A2:42:43:33:FA:65:4C:D8:A0:79:AC:82:01
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102F97CD77696829E92800AD78B3923
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-2Blqu_rKJCQzP6ZUzYoHmsggE.roa
Signing time: Mon 02 Jan 2023 05:44:58 +0000
ROA not before: Mon 02 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 2a0b:64c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 27 Jan 2023 11:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:f9:7c:d7:76:96:82:9e:92:80:0a:d7:8b:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33ed8196abbfaca2424333fa654cd8a079ac8201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:b9:c5:81:d0:62:3e:a5:33:49:de:bd:b4:
8f:c7:d4:6e:52:02:86:1e:bb:cf:94:04:30:c5:2b:
5a:1d:ef:70:40:9a:98:e5:aa:57:65:d9:ae:eb:59:
f3:0f:36:8d:f5:c0:c2:31:ba:d4:bf:21:ef:da:1e:
0c:77:5d:86:28:f5:fd:38:04:1a:b1:b1:ab:b5:e7:
2c:64:15:bb:34:13:17:77:9e:f0:cb:1e:64:d8:fd:
0e:f4:99:66:ea:f0:b6:fb:49:fa:35:79:27:9e:7a:
5a:e7:9d:55:59:32:43:15:44:13:45:ed:31:95:4d:
4c:4c:75:de:7a:5c:de:47:06:ca:36:61:e4:fc:4b:
53:01:95:b4:9c:be:4a:d9:34:85:a7:bb:97:40:e6:
cd:59:0b:2f:62:de:62:17:27:57:41:fb:08:39:67:
7e:b8:58:84:11:89:32:ae:f2:03:f9:1d:80:fc:a5:
be:f4:36:aa:2f:2e:fc:ef:08:92:f1:85:19:6e:00:
26:01:9a:3f:e8:ee:95:ec:38:97:94:a0:89:ee:c5:
42:3f:74:d4:90:3d:27:90:ad:68:c2:cb:3d:ad:6b:
36:d5:09:c4:09:d1:35:e0:6f:9a:42:3f:51:ab:60:
d7:7d:08:3d:6b:1a:bb:e7:93:7a:2c:d1:39:70:3a:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:81:96:AB:BF:AC:A2:42:43:33:FA:65:4C:D8:A0:79:AC:82:01
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-2Blqu_rKJCQzP6ZUzYoHmsggE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:64c1::/32
Signature Algorithm: sha256WithRSAEncryption
03:a5:22:54:5d:22:f0:31:b5:e4:f4:a3:b8:9c:51:81:55:7f:
d3:0a:95:6a:ba:d6:c4:85:71:7c:7d:59:79:da:f8:7e:8b:b3:
c8:30:7a:66:a6:a4:48:30:10:69:69:1b:de:55:26:ad:ab:f4:
77:79:0b:b6:be:84:75:d8:76:b1:2c:3f:d3:75:6c:aa:7c:2e:
0f:58:dc:35:af:97:d3:c6:2c:e6:aa:ae:73:04:8c:6b:40:1f:
95:80:e2:c1:34:1a:89:17:40:0f:2b:44:69:2c:7e:c7:ee:7b:
6e:53:e3:5b:ee:f9:b4:39:dc:87:96:cd:a8:f3:78:73:0e:50:
27:87:73:55:05:c6:17:dc:71:ff:85:3f:59:2c:f3:fd:fa:c3:
f2:2e:c3:19:65:bd:b3:01:52:ea:b7:0c:ec:b1:7a:21:22:59:
98:11:ae:9b:c7:0c:47:0a:e7:cb:bb:1e:41:57:03:62:3d:15:
67:ab:d3:99:24:3a:02:18:29:62:1c:70:00:d6:6d:a0:f6:12:
21:4b:01:fc:a1:fc:c8:cc:66:5a:f3:c9:27:29:d9:49:1f:7e:
1e:0e:35:08:2b:c7:77:20:e1:5b:35:7c:2a:30:1c:d1:12:b0:
5a:4e:13:c6:1a:a3:72:bd:92:92:6a:8a:21:6e:bc:66:db:2c:
fe:be:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:45 2024 by rpki-client on console-fra.rpki-client.org