Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hvamA-1RDQE_sDvutYVl-1yGZgU.roa
File: hvamA-1RDQE_sDvutYVl-1yGZgU.roa (raw, json)
Hash identifier: n/3jNR6CGHNVo5o9Z19AqxMBDm9+lkKKzlEsm3Er75k=
Subject key identifier: 86:F6:A6:03:ED:51:0D:01:3F:B0:3B:EE:B5:85:65:FB:5C:86:66:05
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018B09F26B23A2E998796CE4AF93539A1F53
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hvamA-1RDQE_sDvutYVl-1yGZgU.roa
Signing time: Sat 07 Oct 2023 11:42:43 +0000
ROA not before: Sat 07 Oct 2023 11:42:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 2a12:ec0::/29 maxlen: 29
2a13:dac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 09 Oct 2023 13:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:f2:6b:23:a2:e9:98:79:6c:e4:af:93:53:9a:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 7 11:42:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86f6a603ed510d013fb03beeb58565fb5c866605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:08:66:7d:55:21:fb:20:c2:53:60:e7:1c:
a1:85:6e:c5:7e:ec:a6:f0:a0:24:33:49:4b:fd:75:
bb:2a:78:53:2d:bb:0a:85:e8:2e:02:9c:8f:68:5b:
08:9b:c6:57:3a:79:4a:aa:e8:55:ae:3f:41:3d:e1:
25:3e:bb:ea:1b:63:a4:8e:02:9d:d5:66:8c:c7:22:
19:24:93:aa:85:c1:b9:37:1c:fd:4e:03:f9:92:0c:
86:28:ec:03:e4:a1:a8:00:66:d3:69:57:6d:94:7f:
30:60:eb:49:52:a3:71:30:3c:45:40:bb:ea:c1:ba:
50:c1:f9:a8:55:08:a4:8f:d1:cf:3c:72:5d:56:49:
63:f3:0e:36:d4:a0:b4:07:79:8d:b3:b0:fb:ab:91:
73:f2:d5:e2:fd:68:cb:da:47:36:5e:3f:c6:27:ed:
68:aa:7a:bd:ad:39:49:48:f3:77:bc:9b:b7:b2:4b:
49:e3:8e:85:67:d4:ae:45:3d:83:36:cc:39:e2:29:
73:26:0c:7b:69:65:90:c1:cf:40:5f:9f:8c:78:50:
0d:57:86:62:4c:ed:73:c6:c3:ee:e7:4e:46:f2:7f:
b4:58:ad:5a:8f:9b:af:fb:82:24:41:02:c7:80:3c:
ff:8f:e8:e4:21:b3:f1:69:fc:f2:75:64:9d:b0:e8:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:A6:03:ED:51:0D:01:3F:B0:3B:EE:B5:85:65:FB:5C:86:66:05
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hvamA-1RDQE_sDvutYVl-1yGZgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:9c:a7:d9:03:7c:08:d7:e8:67:e6:68:e7:25:20:a7:02:75:
dc:b4:85:e8:c1:7b:06:cd:ca:57:ac:24:ad:41:95:2c:85:4d:
39:3d:db:70:08:d3:e9:22:66:48:b1:ae:77:25:c2:d5:59:4c:
30:4f:16:39:8c:d7:92:1c:a0:f3:53:b1:f4:0f:77:89:6c:8b:
aa:54:83:42:e5:00:c3:26:b4:24:96:14:c6:bc:5c:ae:21:02:
a9:85:24:84:7e:61:4f:ea:56:5b:f9:02:cd:ae:d8:ac:e7:2d:
c9:86:61:db:b6:c3:f8:60:ba:12:d7:86:68:29:5b:5b:29:e5:
65:7f:1b:46:ad:8e:82:ec:4d:49:fa:1b:c3:e3:ef:4d:4f:14:
a3:d0:2f:b0:b0:f7:4d:a0:b0:5f:f7:09:b5:da:49:b6:09:a1:
3a:a8:8e:b2:88:db:f3:84:5a:e2:23:63:14:42:d2:d5:e0:77:
02:56:a0:f2:f5:d1:91:63:ca:e6:3f:e9:2d:3e:d5:f0:f3:dc:
9a:e8:71:09:5b:2b:4b:14:7c:ef:5b:b1:6d:2d:d8:59:a7:56:
54:a5:ae:25:05:f5:e2:a0:90:eb:6e:17:c6:4d:a1:c5:b0:52:
0c:36:81:0c:be:50:ae:b1:4a:1d:1f:9d:33:50:ca:86:a7:ef:
14:44:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org