Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/H_RH_qcgWnjlHjO9cOmAQ2Frrug.roa
File: H_RH_qcgWnjlHjO9cOmAQ2Frrug.roa (raw, json)
Hash identifier: iG7fEhOUBVnKPqHQFbNCZJTXuoDZTvfBoKPMWfoW5X4=
Subject key identifier: 1F:F4:47:FE:A7:20:5A:78:E5:1E:33:BD:70:E9:80:43:61:6B:AE:E8
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0190DE6F5E9E29D411C1527EE69FFB755B13
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/H_RH_qcgWnjlHjO9cOmAQ2Frrug.roa
Signing time: Tue 23 Jul 2024 07:12:38 +0000
ROA not before: Tue 23 Jul 2024 07:12:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216084
IP address blocks: 2a05:6c00::/32 maxlen: 32
2a05:6c01::/32 maxlen: 32
2a05:6c02::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jul 2024 10:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:6f:5e:9e:29:d4:11:c1:52:7e:e6:9f:fb:75:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Jul 23 07:12:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ff447fea7205a78e51e33bd70e98043616baee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:e7:4a:6a:81:28:31:91:28:6e:ff:50:52:
5b:bf:f4:6e:0c:36:2e:a5:f3:47:cd:32:da:d0:05:
09:dc:5a:cf:ac:33:6b:da:ce:53:89:4b:31:95:56:
da:56:2c:8e:4b:2c:7b:6d:be:38:bd:15:26:ef:41:
eb:8c:69:de:ee:17:79:d9:31:66:f5:3a:fe:f7:7d:
9a:c8:60:9b:4a:1a:83:87:02:63:66:63:0f:b3:66:
e4:06:ab:86:b5:70:28:34:64:b8:43:7f:45:6b:4a:
89:c5:2a:51:2d:74:eb:0a:fe:67:ec:16:58:12:5f:
18:67:46:54:28:20:0f:70:eb:85:ca:a1:40:1b:f6:
be:ee:6d:30:83:6b:4f:77:ec:e8:9b:7a:94:c9:68:
a9:b9:f8:f7:65:bf:2b:8e:96:d1:83:87:58:09:5d:
5c:cd:ae:56:f9:c9:55:b7:cb:15:ed:f6:d6:6a:b3:
ca:f7:98:8e:50:f6:f3:4b:44:4c:ad:a1:6e:6e:63:
f6:ea:a9:38:9a:46:79:61:d5:22:cc:4b:4f:45:f3:
55:6e:b3:8f:0a:fd:31:e0:ec:1b:6a:de:3f:5b:05:
4a:97:b4:ee:b3:ce:0d:35:f2:b1:af:3a:8d:94:0e:
e1:04:33:ed:42:07:a1:7e:e5:fe:0d:fb:dc:ba:e5:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:47:FE:A7:20:5A:78:E5:1E:33:BD:70:E9:80:43:61:6B:AE:E8
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/H_RH_qcgWnjlHjO9cOmAQ2Frrug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6c00::-2a05:6c02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:c5:3d:6a:3f:24:9b:1a:05:99:70:c7:98:30:51:e2:c3:63:
f4:05:a3:2b:0e:65:04:27:8d:14:79:2f:b8:d5:48:29:0e:f2:
c1:ba:da:5a:76:25:44:08:42:5b:b1:1d:7f:e4:a5:4c:b9:1a:
c0:62:7c:2f:0b:a2:24:ed:f2:c6:34:f3:87:9b:1e:68:1a:b1:
6b:6b:51:1b:a3:fc:13:db:f1:b2:74:a8:65:62:da:5d:03:71:
fb:40:97:e6:70:a8:56:c6:1b:85:3e:e3:4e:91:cf:2b:be:90:
55:7f:cf:f2:c2:14:25:58:e1:3d:4a:af:cf:02:89:7b:5c:e2:
6a:ac:b1:ec:2b:aa:e6:51:ba:5a:50:ef:c4:08:ce:b8:ce:72:
42:0c:a7:5c:c0:2a:91:53:50:cb:63:fc:86:fb:03:24:9c:04:
3f:db:e4:63:27:34:99:84:bb:ca:b8:e5:69:f9:cd:e8:44:7f:
d0:8d:1a:d9:43:b3:27:e2:63:64:2a:e3:76:5c:ee:99:e5:d4:
c6:1a:ca:fe:07:6f:41:0b:06:38:3a:87:27:0a:9e:ce:3c:bc:
f2:95:bf:33:9f:ef:2a:10:e2:04:59:39:89:48:83:69:a4:7c:
f7:77:7e:1b:1d:c6:ab:24:a1:de:75:ec:87:a9:aa:84:18:ed:
01:17:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:53 2025 by rpki-client