Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MA31sriLt0Es9zizNdSv_HOds94.roa
File: MA31sriLt0Es9zizNdSv_HOds94.roa (raw, json)
Hash identifier: QqnThQF7I5I/47OQ033F9pXa0C9tR3TB5i84sa4gKkM=
Subject key identifier: 30:0D:F5:B2:B8:8B:B7:41:2C:F7:38:B3:35:D4:AF:FC:73:9D:B3:DE
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B411FA5B2EFD2D447870276D09F1
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MA31sriLt0Es9zizNdSv_HOds94.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207894
IP address blocks: 2a07:3500:1c30::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Feb 2024 08:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b4:11:fa:5b:2e:fd:2d:44:78:70:27:6d:09:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=300df5b2b88bb7412cf738b335d4affc739db3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:7b:8d:66:71:52:d8:c0:a8:59:bc:3a:97:
45:db:84:40:26:1f:fd:52:b3:d4:3f:39:f7:12:05:
55:16:09:ea:a5:32:33:54:05:69:4f:75:ee:13:26:
77:67:66:e4:d5:d9:fb:94:91:3b:90:6e:06:e2:fb:
79:47:79:2b:5c:92:d9:b1:81:57:7a:d0:1f:26:55:
2b:cc:d7:73:e4:41:73:c3:16:38:cb:f4:a3:86:2b:
12:af:5b:72:74:2b:f1:fb:b6:66:25:c7:ee:78:ed:
95:1a:fd:f8:2b:54:1c:06:04:ab:94:d1:e3:7b:a6:
db:63:1a:ba:b7:47:2a:9f:af:a3:fc:2a:48:95:84:
29:ff:03:c7:c5:43:88:79:fb:2c:38:30:f4:85:3f:
79:45:1c:d2:4b:ea:85:56:f2:85:62:10:81:3f:2a:
04:f6:59:36:7d:37:d3:3f:64:16:57:11:4c:52:e1:
dd:92:86:85:a3:1f:98:b3:6e:25:56:3a:31:16:07:
cb:92:2d:e9:73:0e:f0:91:4c:ad:cf:be:c8:d9:2f:
86:f5:ec:0d:48:6c:0e:01:79:93:3a:97:e4:67:67:
02:56:3d:ad:f5:72:f1:4e:15:77:6c:81:96:ab:84:
aa:eb:c2:ea:bd:2c:29:e0:ba:cf:87:ea:01:f5:60:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0D:F5:B2:B8:8B:B7:41:2C:F7:38:B3:35:D4:AF:FC:73:9D:B3:DE
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/MA31sriLt0Es9zizNdSv_HOds94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1c30::/48
Signature Algorithm: sha256WithRSAEncryption
88:44:59:7f:ed:85:7f:a4:2f:b8:63:08:58:48:37:13:a3:4a:
af:a8:f7:c3:cb:e8:1a:2c:6f:8e:03:eb:ef:47:ef:3b:98:42:
81:81:f3:5b:5d:8a:8b:e4:ad:69:2b:24:87:74:e5:ab:e4:04:
c4:57:29:be:19:d3:e9:b4:d5:3e:eb:87:42:e0:88:07:2f:a5:
a4:01:53:e9:05:3e:d1:4e:80:c8:6a:e2:73:d7:83:5b:b2:67:
23:18:5a:0c:27:1f:30:83:11:d7:81:fa:53:5f:83:4b:13:7c:
6f:59:20:db:08:af:09:c5:83:1d:a6:1e:8a:ac:77:76:71:0b:
c1:e4:08:ed:38:11:b1:dd:0c:b9:50:30:95:b2:e3:a8:4b:51:
00:5f:9c:a9:fb:46:64:93:a7:40:92:02:95:53:16:19:35:da:
ce:e7:ba:19:c3:7b:4d:ee:94:61:06:37:87:48:17:f2:d0:6b:
aa:95:61:9e:59:fa:23:d6:ba:e9:f3:92:97:3e:18:22:21:31:
c5:ac:e7:12:8c:6d:39:ec:68:8d:95:9f:0a:b9:79:c1:9b:7b:
30:8c:c6:89:00:a1:84:65:1a:fb:b0:01:b9:b0:1f:62:aa:fd:
72:be:ec:1d:02:c0:e4:c2:5b:d2:84:32:5d:19:12:aa:06:db:
88:b6:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:33 2025 by rpki-client