Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HjG3aqR2ZlhnAr4XOANsIipfZnI.roa
File: HjG3aqR2ZlhnAr4XOANsIipfZnI.roa (raw, json)
Hash identifier: ZQsIqsh8KE1FaJOSDYH0bWXJp2jLe5bO6VNuAhkxKls=
Subject key identifier: 1E:31:B7:6A:A4:76:66:58:67:02:BE:17:38:03:6C:22:2A:5F:66:72
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86F9CBFDAA7E39EFBF521424AD7E220
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HjG3aqR2ZlhnAr4XOANsIipfZnI.roa
Signing time: Tue 02 Jan 2024 04:30:06 +0000
ROA not before: Tue 02 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 18:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:9c:bf:da:a7:e3:9e:fb:f5:21:42:4a:d7:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e31b76aa47666586702be1738036c222a5f6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:9d:ab:9c:7e:2a:f1:ca:6b:1d:b8:99:e8:
1a:aa:1a:3e:0a:27:9b:0f:66:b6:52:8b:de:a7:53:
46:4f:80:fb:74:04:8e:ac:00:42:e2:79:75:c1:3e:
89:0d:db:a3:0c:d5:a0:93:81:a9:b4:6a:0d:20:11:
8f:aa:6a:72:dc:1f:68:03:81:f2:d4:39:ca:cb:76:
fa:80:f4:34:8f:bd:ea:7e:9a:8a:29:41:ea:32:7c:
a2:a3:9a:23:56:85:8f:9e:7e:0e:be:78:18:26:c7:
51:ad:0c:48:63:f1:cf:01:55:83:59:43:2c:60:51:
6a:d1:65:5a:e2:68:4c:76:d9:5e:c0:1f:b8:98:80:
9b:a8:d8:9a:91:01:36:2d:1d:69:c0:bf:d9:bc:35:
4b:c4:10:e4:ba:4b:e9:3f:be:a2:d7:3a:3c:0f:0b:
e6:2d:3b:db:6e:e8:73:8f:40:b8:98:b8:4b:62:e7:
43:6c:c0:ff:c8:f1:62:d3:09:48:df:27:ce:bd:8e:
b3:18:17:97:81:75:49:77:ee:8b:64:b2:e4:a4:7a:
ce:d5:84:4b:73:26:d3:f4:a8:18:e1:b7:69:b1:a1:
05:40:72:f7:1d:87:f3:1e:c7:00:5b:1e:cd:5d:97:
14:bf:6f:a1:97:48:cf:39:fe:bf:d7:80:31:23:f1:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:B7:6A:A4:76:66:58:67:02:BE:17:38:03:6C:22:2A:5F:66:72
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HjG3aqR2ZlhnAr4XOANsIipfZnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
61:02:6a:ba:50:e9:75:21:f7:f8:b3:38:e2:88:13:c0:46:e3:
28:99:17:52:e6:a8:78:98:47:1d:a7:fe:70:c5:0d:37:43:c4:
04:a4:1b:d6:eb:22:02:b5:b5:3c:15:40:fd:54:6f:d1:b3:29:
83:78:00:a6:33:ee:23:71:b3:9e:54:b0:8e:d1:e4:58:10:e4:
65:9d:3e:5e:45:74:fd:1b:50:3a:ff:85:d8:17:ca:7d:a5:78:
0e:0b:2f:cd:96:db:13:06:bd:4f:04:64:46:e3:d8:59:fc:d3:
bd:2c:45:f2:3f:d3:ef:17:d9:96:78:2b:9c:68:6e:16:53:0a:
b0:eb:19:99:5e:87:65:23:91:8c:d0:4f:99:df:31:dd:b7:5a:
04:95:e4:19:c6:ef:08:79:32:c7:87:aa:e9:03:ac:08:a2:69:
ae:fd:94:05:4c:af:14:48:bf:14:24:c2:2d:86:96:c2:5e:ce:
da:0c:ab:0e:54:4e:c4:d4:ab:f3:4f:97:7b:fa:8d:34:0f:92:
b9:07:12:b3:36:5d:b0:5f:70:c1:ce:bb:bc:3d:6a:af:0b:93:
96:7b:2a:4e:5d:a2:39:b9:38:82:8e:78:db:8e:74:f3:82:b1:
fc:d8:8f:f2:63:01:8f:63:0a:6d:b1:79:00:60:99:95:82:a3:
57:93:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 22:33:07 2024 by rpki-client on console-ams.rpki-client.org