Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hLZV04Mw-tghJwTi8bJbHPBdfX8.roa
File: hLZV04Mw-tghJwTi8bJbHPBdfX8.roa (raw, json)
Hash identifier: 4i2AAwERAtOBPT1yL5Z+u10R2CmORECZladRiuwMDHo=
Subject key identifier: 84:B6:55:D3:83:30:FA:D8:21:27:04:E2:F1:B2:5B:1C:F0:5D:7D:7F
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0185C10CCBFD7E93EFB8C71EBCFD82B402CC
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hLZV04Mw-tghJwTi8bJbHPBdfX8.roa
Signing time: Tue 17 Jan 2023 18:45:19 +0000
ROA not before: Tue 17 Jan 2023 18:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50868
IP address blocks: 2a0d:2406:4000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c1:0c:cb:fd:7e:93:ef:b8:c7:1e:bc:fd:82:b4:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 17 18:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84b655d38330fad8212704e2f1b25b1cf05d7d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:e7:5f:37:0c:80:38:b1:2d:97:dc:8a:5e:
ea:72:53:0a:9d:fa:fc:b1:c3:41:ff:df:eb:39:73:
93:c5:96:c8:8e:90:e8:23:f5:18:2e:91:47:8f:bc:
34:d3:53:57:66:d6:a9:30:40:a1:48:0d:f8:95:12:
6c:b2:08:ed:ba:8f:4b:d0:69:42:96:7f:22:5b:c0:
9f:f9:da:e7:5e:35:2a:6e:32:e6:e3:e9:7d:40:57:
5f:f8:48:ef:70:fa:97:26:26:09:3a:69:6f:e1:2e:
50:83:79:6f:2f:8d:40:64:44:41:e8:87:cf:c4:89:
37:36:0a:d8:6c:3f:4d:85:04:23:c0:52:3a:fe:3b:
a0:34:d8:10:74:69:49:29:5c:01:9e:f3:41:4c:b6:
a0:9f:59:f8:cc:62:8e:17:18:d8:46:5f:07:67:dc:
cb:8e:f1:5e:8a:02:ce:98:db:49:3b:15:a1:3c:3f:
c4:e7:2b:bf:e9:cf:19:a4:ed:aa:66:38:f7:b5:a5:
aa:11:1c:94:d5:d9:09:88:7c:74:d7:60:9e:30:7c:
6b:0e:a7:da:40:83:7a:86:05:5f:5b:98:55:0f:68:
b8:7b:61:3c:7a:46:1c:85:35:c1:48:cb:a6:a3:de:
05:77:b0:b1:42:1d:48:bc:f8:ee:70:40:a9:73:d8:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:55:D3:83:30:FA:D8:21:27:04:E2:F1:B2:5B:1C:F0:5D:7D:7F
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/hLZV04Mw-tghJwTi8bJbHPBdfX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:4000::/48
Signature Algorithm: sha256WithRSAEncryption
3f:47:02:68:a4:ff:45:39:ff:19:14:bf:76:32:3a:cc:23:99:
2b:41:20:c6:fb:1a:2b:ed:cc:09:0b:86:ba:37:9a:bc:3d:d9:
8d:59:59:e2:91:55:f6:5c:a5:9a:fa:e3:d2:52:ba:ee:4a:b9:
52:fa:d1:93:ad:3c:ea:f5:51:64:00:ca:eb:a9:8c:55:92:de:
c2:3b:66:e9:97:c4:a4:ac:19:1e:a1:f8:f3:18:4f:2e:08:07:
22:1e:e8:86:ed:82:97:b2:1a:6f:a2:9e:6f:3d:e9:24:fc:f8:
13:8d:86:80:76:cb:fc:19:e2:13:69:91:6a:c7:14:09:f5:d7:
1b:21:ad:4e:99:a8:fc:fc:8b:55:ba:e9:fb:14:5d:9c:bb:ae:
9c:73:26:98:98:43:34:14:95:f8:4f:79:20:1d:b6:35:a6:66:
57:a4:c3:12:07:58:1c:50:86:cb:bb:d8:19:93:6e:dd:e9:95:
47:70:12:6e:76:14:dd:8d:09:c5:2a:e2:b3:54:12:d8:db:f8:
9f:ba:f1:97:6d:59:bf:89:c4:87:c7:be:e9:01:bb:d9:35:11:
e8:54:51:97:71:fd:47:d6:54:bc:49:63:fa:f4:1d:1c:67:db:
b5:b7:05:2a:cc:ce:3c:85:a5:62:f9:88:ec:39:3c:0b:9d:c3:
07:a3:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org