Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/muSDkmxDLuNPD3E5cYgQcfEjZHI.roa
File: muSDkmxDLuNPD3E5cYgQcfEjZHI.roa (raw, json)
Hash identifier: Fj/WIwThzQWM+mFA20pT5+P8k3CernfR5JL8YgPUawA=
Subject key identifier: 9A:E4:83:92:6C:43:2E:E3:4F:0F:71:39:71:88:10:71:F1:23:64:72
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 018CC6B81FA541EA23E28E22673B86396F18
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/muSDkmxDLuNPD3E5cYgQcfEjZHI.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:f8c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1f:a5:41:ea:23:e2:8e:22:67:3b:86:39:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae483926c432ee34f0f713971881071f1236472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:4b:52:14:92:ea:6e:d3:04:1b:16:e7:c4:
9d:3c:ed:9d:e1:4e:c6:dc:b1:9a:17:58:5b:90:00:
bb:34:21:b0:39:5c:bd:b1:e8:21:33:16:32:38:1d:
67:5d:6b:d0:ba:37:c9:b4:ca:4a:0d:ed:3f:20:7f:
03:7e:94:e0:cc:c0:55:2c:fe:d0:a7:a5:f8:98:fb:
71:24:d5:73:60:0d:7b:25:f5:e7:29:20:b6:ac:d4:
6d:55:ff:35:ce:c6:e3:d8:50:3d:75:16:95:2b:41:
e4:04:c8:7e:21:b8:d4:4f:e6:80:5f:06:8f:43:e4:
4c:53:fd:c6:34:31:06:5b:9c:c7:a4:84:aa:61:3f:
39:90:b1:d6:c1:da:f9:71:19:ae:8b:df:91:9c:ff:
14:75:3f:09:bd:48:87:67:8f:6c:ff:fb:d0:98:47:
a3:e4:cc:dc:a9:d7:e5:fb:48:c1:01:3f:fb:d5:23:
e8:74:8f:75:21:5f:f7:2d:43:aa:69:ad:ec:38:29:
c8:71:f5:23:ce:9c:81:6f:92:46:7c:db:64:d0:07:
3f:88:0f:23:e4:17:50:86:74:ad:65:ad:63:39:e0:
23:34:07:ad:1c:3d:25:4e:de:74:b9:75:f4:83:59:
5e:00:44:85:a5:df:f0:c2:52:c3:30:29:0d:c0:61:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:83:92:6C:43:2E:E3:4F:0F:71:39:71:88:10:71:F1:23:64:72
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/muSDkmxDLuNPD3E5cYgQcfEjZHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
93:52:fa:43:40:49:13:7a:93:2f:f0:db:1e:14:5b:dd:03:40:
68:4b:d8:13:7a:ec:da:e9:7b:2d:0a:7b:bc:ab:75:34:01:c9:
fa:c6:cc:2c:45:f5:c4:fa:1f:b4:0d:33:e4:cf:37:2c:db:6e:
92:28:aa:41:0b:92:03:e7:63:ee:97:7a:88:0a:c5:59:a5:ab:
29:32:60:0e:9c:7f:b9:ba:c2:26:23:80:98:97:86:73:8a:3c:
39:c3:f4:88:2b:ec:88:3b:b8:44:c3:2f:63:83:c3:3a:31:54:
62:93:70:03:84:7f:79:b3:ba:a8:a1:73:0c:37:8c:f1:c6:44:
72:5c:33:3c:86:9c:02:9f:bb:72:2d:b3:1e:e0:0b:54:ad:9c:
a3:df:25:13:72:a3:db:83:cb:af:d9:7c:b1:72:7b:73:07:3c:
a9:c4:19:8b:43:f5:69:0f:7c:13:af:f2:1b:77:b2:07:f4:41:
5d:1c:34:ea:1e:49:8f:77:6b:aa:ab:78:c3:d0:e3:cf:46:70:
37:ea:b7:39:ce:e5:38:d0:ef:f9:72:64:1b:e7:ca:80:49:be:
9e:12:09:02:10:e5:fa:fe:41:b6:0c:73:ba:4d:39:d7:5f:59:
05:2e:a8:77:7a:b0:1d:fb:6b:4b:c6:c3:19:34:f0:60:86:8d:
c0:e8:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:19:28 2025 by rpki-client