Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/HAawW_zAJk1gglaskl4gu4ii0b8.roa
File: HAawW_zAJk1gglaskl4gu4ii0b8.roa (raw, json)
Hash identifier: j1UtJa2PN/FDFYB0rTiUoy0YToN0Cy5lYerij8rl97g=
Subject key identifier: 1C:06:B0:5B:FC:C0:26:4D:60:82:56:AC:92:5E:20:BB:88:A2:D1:BF
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 0186EFE6D33183F43CF97F01CAD2D1B5B5BB
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/HAawW_zAJk1gglaskl4gu4ii0b8.roa
Signing time: Fri 17 Mar 2023 14:08:47 +0000
ROA not before: Fri 17 Mar 2023 14:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199392
IP address blocks: 2001:67c:c28::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:e6:d3:31:83:f4:3c:f9:7f:01:ca:d2:d1:b5:b5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Mar 17 14:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c06b05bfcc0264d608256ac925e20bb88a2d1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:c1:36:7f:24:6b:6b:14:e6:86:b0:62:06:
13:20:45:66:30:57:54:e0:74:b6:a3:7d:26:71:43:
ab:1f:c2:2b:1d:10:b3:7c:1b:88:fb:d3:1d:b3:cd:
17:96:4c:6d:66:ed:e5:82:1a:6a:eb:55:58:9c:63:
53:d3:8f:2f:c1:28:34:ea:ff:8c:c1:5e:58:31:ff:
d5:2e:94:5c:9d:01:97:bf:2c:78:c6:5d:9d:5d:22:
90:da:4c:35:56:da:84:29:58:39:c5:50:cf:ec:3d:
0e:68:cc:6a:f8:fb:6f:c4:4b:44:f1:e1:2c:c7:52:
27:d2:40:f3:36:5b:bf:2e:81:32:93:8b:b3:ca:87:
60:aa:86:f4:b7:e3:27:de:75:c8:ac:8d:42:eb:c4:
8b:27:e0:0b:b3:e4:90:6f:b3:a1:40:4a:3e:60:c7:
ac:bf:2e:23:d1:cd:b1:31:0b:8d:74:28:48:5e:6d:
8d:d5:fd:1d:2b:4c:b5:da:a5:ea:28:c1:6c:22:04:
c3:e5:51:7f:df:d4:15:a8:48:71:be:01:e8:ee:33:
9d:d3:9c:53:c0:e9:3e:64:82:82:5f:86:3e:8c:b8:
48:58:4d:df:c6:0a:0f:d8:ff:29:7a:a2:8e:e9:ff:
32:49:4b:40:6a:41:5a:3c:da:a3:c9:6c:54:b5:36:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:06:B0:5B:FC:C0:26:4D:60:82:56:AC:92:5E:20:BB:88:A2:D1:BF
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/HAawW_zAJk1gglaskl4gu4ii0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c28::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a9:83:81:b8:57:3e:28:ec:04:ba:0e:e5:4b:4a:aa:24:1a:
27:5a:a3:29:f4:72:3e:32:e4:89:25:2e:4f:0f:0c:5c:5c:67:
f8:0e:af:4a:26:4b:47:01:b3:b0:0f:44:c8:d9:7d:4a:88:8a:
92:96:c8:1f:4a:31:e5:d4:9c:30:1c:ed:ce:a2:5e:66:99:e7:
ec:6b:a5:87:cd:f2:d0:0f:20:f8:12:17:36:8c:50:04:0f:2a:
b9:99:d5:c9:ba:30:1c:5e:6e:e4:46:0c:d3:c7:31:00:7d:33:
97:f1:9c:ca:67:1c:89:33:44:b4:e3:d4:53:70:f7:29:79:17:
69:5f:6f:62:1a:6e:10:c8:b3:63:05:5d:a9:bf:22:b0:ee:0d:
1c:5e:13:8d:0c:bc:37:30:1f:41:44:22:f8:54:5e:3a:41:48:
e1:f9:6a:d5:2c:17:6a:8c:57:04:3f:f0:9c:c6:33:58:c3:12:
7b:c2:75:c0:bc:57:01:dc:71:9d:96:53:ff:cd:0e:ed:25:d4:
7c:07:f7:3a:a6:0e:bc:c0:dd:8d:95:f0:5a:62:7b:e4:a5:52:
16:ab:f7:8c:26:0c:97:60:fd:0d:d9:db:b2:a4:de:00:fd:cc:
09:18:1f:9d:46:f0:de:c6:45:49:cc:cd:dd:27:5f:60:c2:9e:
4f:38:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org