Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jMvv3qVKFI7Lb-9K2I1ProLpCIM.roa
File: jMvv3qVKFI7Lb-9K2I1ProLpCIM.roa (raw, json)
Hash identifier: 5lJaMd1ZLxRO6viHvKiaxDqOxNaR7rzXyyvgGF6Hi/A=
Subject key identifier: 8C:CB:EF:DE:A5:4A:14:8E:CB:6F:EF:4A:D8:8D:4F:AE:82:E9:08:83
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 0186EEDED8DA51381CF5B6B74CDACA8EB36F
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jMvv3qVKFI7Lb-9K2I1ProLpCIM.roa
Signing time: Fri 17 Mar 2023 09:20:27 +0000
ROA not before: Fri 17 Mar 2023 09:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 2a11:1680:21::/48 maxlen: 48
2a11:1680:22::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Mar 2023 09:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:de:d8:da:51:38:1c:f5:b6:b7:4c:da:ca:8e:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Mar 17 09:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ccbefdea54a148ecb6fef4ad88d4fae82e90883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:b6:95:bd:9e:88:bf:3a:55:36:b1:49:6a:
ed:31:80:1a:0d:bc:d5:dd:0f:4e:34:59:f0:c5:98:
07:6c:48:5a:d5:33:28:86:8e:79:13:0e:73:52:a8:
e9:88:31:2e:58:72:10:f2:34:02:95:9c:e0:85:71:
7b:6a:50:f0:bb:be:d2:1b:36:97:17:76:57:23:02:
46:13:cb:bc:4f:55:a5:c0:cd:e8:9e:b1:65:96:6d:
52:96:e1:e4:ad:42:1c:d6:b4:7d:ec:f1:cd:e7:c9:
d0:2a:99:a8:7a:9e:42:02:6c:03:18:5d:98:01:c4:
8d:01:a8:06:b2:60:0f:be:ef:fd:0f:e4:78:19:10:
f1:41:d1:93:3f:c6:a7:d8:98:b2:75:33:f4:74:89:
ba:21:99:f5:57:59:fc:44:71:ee:81:f4:ab:f4:97:
c3:03:75:8f:5b:dd:37:26:48:ee:a6:a5:d2:3e:d3:
d9:ef:a6:e1:44:b7:9a:72:38:23:7f:6a:b8:cb:8e:
80:77:a5:de:b6:84:e2:b6:9c:04:65:ec:fc:b9:dd:
eb:70:1e:df:70:b8:62:93:d8:4e:15:54:6b:51:44:
bb:e4:13:dd:62:d5:c0:7e:c0:79:81:76:21:75:07:
b0:96:e5:62:cd:a2:20:8f:2f:c2:15:5f:f9:22:7b:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:EF:DE:A5:4A:14:8E:CB:6F:EF:4A:D8:8D:4F:AE:82:E9:08:83
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/jMvv3qVKFI7Lb-9K2I1ProLpCIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1680:21::-2a11:1680:22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:2b:f0:78:90:19:3c:d3:19:01:bf:5a:b5:e5:e4:4a:73:b2:
8b:45:46:57:42:77:1a:27:7d:bc:fc:95:ba:df:c1:12:e5:0d:
a0:b6:a2:b0:e6:f2:ed:b8:65:5e:71:1d:51:5d:fb:97:98:0f:
58:6a:4d:16:12:82:0b:fe:49:c4:c1:c0:a7:20:f1:f0:f1:66:
31:55:21:b0:9d:45:de:b6:b5:90:e3:0e:a5:7a:86:98:90:ea:
01:9f:52:8f:91:e8:59:7c:c3:cd:f6:9d:79:38:67:99:b9:7e:
d3:26:1d:2c:f5:d0:1b:b6:4e:83:47:17:f1:5e:66:f6:96:5b:
4f:fc:b6:68:3c:f1:6d:ad:03:0f:ee:d2:27:c6:02:f9:88:be:
b5:75:32:71:d5:a0:61:0a:55:3c:64:fa:39:ce:80:49:0c:24:
63:a8:60:76:20:20:aa:d0:31:3a:13:5b:4a:75:72:ab:90:27:
55:0f:d2:dc:44:3f:6c:8d:af:23:16:6c:52:9d:02:21:25:8b:
09:49:83:72:4c:82:89:e1:df:6c:03:8b:a9:47:db:09:fe:22:
d9:dd:40:c5:23:9c:d2:4e:14:9c:23:79:4e:f0:e1:6c:15:5c:
a9:20:eb:6c:66:73:7c:78:82:6d:ed:48:22:7e:b0:f4:4f:ae:
3e:cd:2c:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:07 2024 by rpki-client on console-fra.rpki-client.org