Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RHLK_W7u9HJN8ADB3Hk-l46MCdM.roa
File: RHLK_W7u9HJN8ADB3Hk-l46MCdM.roa (raw, json)
Hash identifier: vxVcYl+aDaegEeQvv0nNwi3DmlFR5CDaba2on6cDIk0=
Subject key identifier: 44:72:CA:FD:6E:EE:F4:72:4D:F0:00:C1:DC:79:3E:97:8E:8C:09:D3
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FA8FEF7DA887F2198BEC59D10EFC1DE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RHLK_W7u9HJN8ADB3Hk-l46MCdM.roa
Signing time: Tue 06 Feb 2024 18:23:18 +0000
ROA not before: Tue 06 Feb 2024 18:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200335
IP address blocks: 2a0f:b241:bb::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:a8:fe:f7:da:88:7f:21:98:be:c5:9d:10:ef:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4472cafd6eeef4724df000c1dc793e978e8c09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:37:61:36:a5:3f:a6:66:19:1b:65:ee:83:
1f:a6:22:11:e7:62:d1:e1:64:bf:18:1d:c2:e2:5c:
26:50:6c:f7:a1:1a:b3:00:54:bd:e6:36:24:f2:c0:
69:6d:94:3d:42:2a:52:c0:50:48:7f:3e:32:8e:96:
13:cf:5c:e5:96:d8:72:99:9a:83:6e:ad:e1:b5:22:
6d:5f:db:e9:33:45:50:b8:78:57:82:90:3a:86:4f:
d2:13:0f:13:94:ff:45:60:e3:b9:ab:02:20:e2:56:
94:9b:6a:7b:d9:d5:ad:8c:4b:e8:48:8b:a9:c3:d9:
9c:f8:cb:c1:52:58:b7:60:43:bd:70:81:4f:bd:b9:
5c:09:ec:ad:16:69:ff:40:ca:0f:f2:d7:52:ff:66:
c0:97:73:9b:0e:22:13:ae:37:c7:a6:63:2b:0d:57:
75:50:e6:23:16:fc:e9:9d:b8:c9:b9:c0:17:5b:47:
6f:ba:cc:f9:89:cc:d6:9b:b9:f6:c3:f0:ee:44:4b:
2d:82:25:5c:ff:3e:4f:47:dd:90:b6:10:e4:84:4a:
1b:76:43:07:33:7b:72:b1:10:ef:be:a3:ec:6c:ce:
90:c7:aa:b0:f0:0e:9b:95:20:ab:a8:a5:6a:50:4e:
97:04:4c:04:e2:c0:a4:76:84:44:cf:3b:f3:27:b8:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:CA:FD:6E:EE:F4:72:4D:F0:00:C1:DC:79:3E:97:8E:8C:09:D3
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/RHLK_W7u9HJN8ADB3Hk-l46MCdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:bb::/48
Signature Algorithm: sha256WithRSAEncryption
2d:6b:56:e1:53:24:ea:b3:b3:b4:cd:df:02:39:d4:9a:0e:92:
3c:03:d3:44:b2:8f:2b:19:6c:ee:8d:02:ea:eb:33:3e:fd:17:
b1:92:77:04:80:90:e8:81:bf:2a:1c:22:c1:61:97:d3:b2:9f:
94:5d:78:51:39:7c:66:f2:99:6e:39:af:86:5b:f6:5e:74:a3:
ff:53:e1:26:65:42:65:3f:d6:6c:bc:5b:c5:ed:a8:65:ab:83:
aa:43:12:05:37:f0:3f:33:75:87:4e:e9:5a:6a:e7:b5:bd:f3:
62:8d:a9:95:33:93:cb:0a:cf:2e:5d:4a:25:96:f2:2d:3e:46:
a7:38:98:f8:91:b0:5b:a2:e5:e0:16:45:09:70:e9:d5:05:0f:
7b:6c:8d:4e:f2:37:9a:9c:95:1e:d2:77:ff:bc:83:68:2d:99:
f6:d4:28:c7:75:6a:8a:0b:54:23:89:9b:43:9e:90:b6:2f:85:
6c:a0:8b:f0:24:bf:6e:48:9f:9e:14:c6:ee:ca:ed:34:61:6d:
61:9d:b1:e0:ce:7d:9f:5c:69:61:86:2d:43:9c:0f:c7:62:b3:
a3:be:de:56:d5:b0:c5:26:7b:e1:cf:69:19:7c:df:8c:a3:9b:
3d:8e:2d:c9:47:b0:60:80:d1:66:e4:45:1f:66:64:8b:d5:5a:
bc:ec:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org