Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/mVuQOwEdJT-ijGAlSeO-M2wfMfY.roa
File: mVuQOwEdJT-ijGAlSeO-M2wfMfY.roa (raw, json)
Hash identifier: tlvZOSoiWyFsY6xbJ1dag4vON8qAgbey+yxJ52tBERk=
Subject key identifier: 99:5B:90:3B:01:1D:25:3F:A2:8C:60:25:49:E3:BE:33:6C:1F:31:F6
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0191C8AF13C7C3B3539380A4F736E905AEE1
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/mVuQOwEdJT-ijGAlSeO-M2wfMfY.roa
Signing time: Fri 06 Sep 2024 18:53:22 +0000
ROA not before: Fri 06 Sep 2024 18:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214294
IP address blocks: 2a01:ee80:1::/48 maxlen: 48
2a01:ee80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:af:13:c7:c3:b3:53:93:80:a4:f7:36:e9:05:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Sep 6 18:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995b903b011d253fa28c602549e3be336c1f31f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:34:87:17:da:e8:4f:78:91:23:e8:77:e8:
a4:ae:d7:61:3f:66:db:a6:e4:80:04:c1:a2:de:e6:
2c:b2:03:23:97:c2:16:cd:0e:20:8f:5e:ea:94:81:
06:e3:f2:e7:69:03:7e:1f:fa:f9:42:e6:b0:07:58:
eb:a6:6d:1a:01:8c:f0:0d:66:fa:ba:bb:59:65:70:
ae:28:06:36:50:54:dc:b2:2f:98:3b:c1:19:56:e8:
bd:54:0c:85:d1:df:8c:01:b7:3a:af:ad:62:77:72:
cc:c1:a4:d1:52:7b:95:c0:03:79:72:28:b2:cc:0a:
e0:1e:48:03:c4:38:3d:6b:39:cd:3c:da:12:b3:bc:
a4:50:31:ec:f2:0c:ae:23:e0:00:5d:18:bd:dc:b4:
c8:9d:89:1a:1b:c8:20:47:16:e1:11:de:b6:6a:09:
3f:c2:c9:9d:8c:54:f3:5d:e4:3f:fb:97:75:36:2f:
42:eb:9c:58:98:a2:76:71:d9:87:40:56:3f:34:6a:
24:57:4c:88:68:da:57:19:84:51:36:8c:0d:b0:24:
42:39:6e:c7:c8:ac:d9:3b:1a:7c:5f:38:03:af:37:
69:3d:63:c5:5c:cd:06:79:de:a5:6d:4a:44:f0:6e:
1a:fa:34:34:08:b4:a6:4b:f4:bb:44:9f:e3:7c:5c:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:90:3B:01:1D:25:3F:A2:8C:60:25:49:E3:BE:33:6C:1F:31:F6
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/mVuQOwEdJT-ijGAlSeO-M2wfMfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ee80:1::-2a01:ee80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
49:43:50:3a:2f:ae:a7:ed:89:3f:88:c4:7b:b9:6e:07:31:0b:
7d:2b:64:fd:2f:c5:e9:ad:3c:a5:dd:4e:c7:77:75:e7:49:98:
a3:5c:18:d6:c0:d9:5c:9a:b3:be:ff:71:14:61:37:56:3b:7a:
85:b3:74:40:16:a2:50:27:42:a9:97:d2:a5:ef:02:b6:1d:dc:
76:2b:48:42:6b:98:2c:0d:05:63:18:41:55:3e:ea:00:c3:68:
65:05:8a:af:94:14:6d:da:59:c2:cd:a8:2e:d1:eb:2e:42:e2:
a1:b5:95:98:f5:a1:38:60:c5:42:8a:ad:72:9d:73:0a:f5:7a:
d0:cb:43:83:3c:42:6c:03:9a:f5:50:d0:63:ad:d4:56:8e:0a:
af:45:e7:f5:5d:0f:68:3b:40:ec:00:43:97:9b:45:06:5a:e5:
3a:73:81:4a:c9:16:5a:5f:c5:e7:98:66:fb:3a:92:80:c6:d7:
83:6a:79:40:e8:58:b2:e3:04:0f:79:75:d9:7a:39:5c:e0:6d:
03:2a:cb:41:2c:a4:d6:25:36:de:f6:4e:81:e1:42:3e:16:95:
6b:b0:ad:59:ac:15:eb:2f:37:2d:aa:54:7a:a0:1a:2b:ba:10:
00:9a:f9:7b:2f:a5:fc:20:7f:36:21:2d:40:1f:f8:cc:7b:f1:
58:42:70:cd
-----BEGIN CERTIFICATE-----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=
Generated at Mon Sep 9 19:38:05 2024 by rpki-client on console-fra.rpki-client.org