Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/mnfXxjLLM8G1CiwcjqcHtYP5Z8Q.roa
File: mnfXxjLLM8G1CiwcjqcHtYP5Z8Q.roa (raw, json)
Hash identifier: rUOcOSQgiMaTe07TQ/demfJBVjKOYTvgfz0rU3GZL9I=
Subject key identifier: 9A:77:D7:C6:32:CB:33:C1:B5:0A:2C:1C:8E:A7:07:B5:83:F9:67:C4
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 018CC42488C350D6F6BF897795D488088490
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/mnfXxjLLM8G1CiwcjqcHtYP5Z8Q.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210152
IP address blocks: 2001:67c:c14::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Apr 2024 20:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:88:c3:50:d6:f6:bf:89:77:95:d4:88:08:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a77d7c632cb33c1b50a2c1c8ea707b583f967c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:4a:aa:26:be:a6:db:28:4f:8a:18:28:0f:
b3:b3:56:43:23:f2:46:02:2d:34:ef:d3:4c:e3:be:
1c:81:9c:72:69:e9:be:4f:b1:5c:77:c1:2f:d2:dc:
a3:e1:42:b7:f1:ce:4a:99:6a:5a:85:15:dd:4e:a9:
aa:e2:16:0a:9a:48:f4:8d:fa:f4:f7:89:eb:0d:8b:
11:33:e8:ec:4e:0a:84:8a:47:9b:cf:aa:60:e9:97:
07:d3:2c:7d:07:1d:97:7b:e1:65:d9:8f:86:c9:82:
1f:d9:f0:48:90:d7:7f:79:4d:66:ab:44:8a:c2:5a:
02:f9:99:7e:b7:55:da:ea:11:d8:ea:a7:78:1e:ee:
c5:9f:1b:af:a6:5e:48:8a:a9:ea:b8:1f:12:52:7a:
e2:4c:61:f5:3f:d4:b5:d7:0c:fd:3f:d1:3a:61:4e:
e4:80:5c:6f:83:78:60:6d:e1:bd:39:1d:95:f2:8f:
26:83:c8:79:83:8c:f5:1c:b3:15:f3:b2:25:50:72:
44:52:00:24:67:14:a4:d3:6d:70:c6:e1:61:8c:09:
9e:0c:9a:6a:9c:d2:2a:d6:42:38:87:61:26:a6:7d:
e3:78:9c:76:b1:c1:a8:91:48:de:04:21:25:42:37:
97:df:dd:95:bd:9f:c8:b8:e5:ca:ad:c7:46:f3:5c:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:77:D7:C6:32:CB:33:C1:B5:0A:2C:1C:8E:A7:07:B5:83:F9:67:C4
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/mnfXxjLLM8G1CiwcjqcHtYP5Z8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c14::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d6:bb:cf:53:42:cc:f7:6b:8f:d4:61:9f:5d:d0:6b:ea:3d:
ea:44:e9:30:c2:2e:46:bb:3f:86:8c:c6:5b:62:85:39:13:4a:
69:3f:68:d6:1b:1a:b6:82:31:d6:7c:96:27:13:8d:87:9d:34:
92:02:0d:63:c8:81:58:a5:6b:1e:d0:80:78:18:ec:1f:30:32:
bb:24:a3:2f:42:e2:e6:b7:28:8f:25:0a:cf:27:30:50:f2:cc:
53:eb:51:f7:7f:78:1c:8c:8a:78:8c:f3:87:4f:70:eb:3a:1a:
98:fc:f0:71:e5:c2:16:ed:8c:95:64:91:07:bd:cb:6d:68:8c:
5d:81:38:ba:62:de:a9:50:b5:26:9a:5c:26:29:53:03:d8:49:
a6:53:17:2d:db:79:0c:47:c2:ea:c9:eb:eb:87:45:8e:49:5b:
62:a3:9a:8c:40:60:cb:69:b4:66:c0:c6:7c:5e:55:f0:2f:96:
a1:06:d9:d2:68:83:b3:2a:9c:3e:41:73:a0:f9:e7:66:46:74:
d5:c3:96:88:09:af:c4:17:98:6d:3b:f3:93:e7:87:2f:16:42:
07:e0:9c:c2:96:45:73:7f:fa:46:63:77:2c:fd:e1:5f:69:d8:
88:27:a7:34:29:f1:f9:1f:06:aa:8d:f9:b8:1a:ba:bf:8b:72:
d6:09:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:01 2024 by rpki-client on console-fra.rpki-client.org