Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/HtbD_FTlRpcfJLpAvQc537KLBQs.roa
File: HtbD_FTlRpcfJLpAvQc537KLBQs.roa (raw, json)
Hash identifier: qsIVBfchavwb6TSk3taYVP2nvdGAh3XXSIyedY6yBgQ=
Subject key identifier: 1E:D6:C3:FC:54:E5:46:97:1F:24:BA:40:BD:07:39:DF:B2:8B:05:0B
Certificate issuer: /CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Certificate serial: 01934E58EA9ED409C68067BC5D495C2CD38E
Authority key identifier: 9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/HtbD_FTlRpcfJLpAvQc537KLBQs.roa
Signing time: Thu 21 Nov 2024 10:51:10 +0000
ROA not before: Thu 21 Nov 2024 10:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 2a14:8000:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:58:ea:9e:d4:09:c6:80:67:bc:5d:49:5c:2c:d3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Validity
Not Before: Nov 21 10:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ed6c3fc54e546971f24ba40bd0739dfb28b050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:82:b6:0e:98:11:c7:88:f9:7a:4d:cc:43:
07:06:73:0e:b7:fc:17:9f:ea:ea:62:51:33:fa:18:
df:9c:9b:6a:cf:30:a7:92:ee:fb:5a:d1:1a:9a:7a:
1f:15:e6:ba:ba:00:06:e4:c3:b7:eb:e2:b7:d0:d3:
55:97:50:3a:37:03:85:c0:dc:23:b1:c0:4b:a1:01:
93:e5:5b:4c:1e:1a:f2:d7:b2:24:4a:f3:6e:51:ab:
6e:11:a2:8e:d5:ad:7a:b5:a8:16:35:95:84:eb:2a:
12:e7:08:68:47:34:24:1d:92:3d:2c:6f:14:e2:1a:
26:ab:c9:d3:4d:5b:e4:6c:4b:9f:f5:86:98:dc:2a:
b8:d4:2a:1c:85:b4:ab:ec:21:8c:ec:31:cf:5c:d5:
81:82:89:bc:89:9f:96:8e:8c:2b:b8:e5:ec:8a:f0:
f2:ce:3e:9c:5c:b5:76:94:5e:a3:36:c1:ee:64:d8:
91:8a:22:b3:6b:8b:7a:8d:5e:2b:81:04:e8:86:1f:
9e:06:0c:e3:d9:1e:28:87:9c:9b:39:ab:30:3a:c0:
9c:06:15:5d:1d:08:ad:92:7a:ae:51:2b:e0:7c:91:
6a:ab:8c:3b:5f:8f:d3:51:18:89:da:41:15:ef:47:
0d:20:26:85:21:eb:2a:82:a4:37:58:f4:27:a5:ca:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:C3:FC:54:E5:46:97:1F:24:BA:40:BD:07:39:DF:B2:8B:05:0B
X509v3 Authority Key Identifier:
keyid:9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/HtbD_FTlRpcfJLpAvQc537KLBQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8000:1::/48
Signature Algorithm: sha256WithRSAEncryption
9b:fd:8c:33:a2:7f:2a:52:f3:eb:64:9b:f8:90:48:11:20:7d:
ac:dd:01:a0:53:6f:e9:c2:6b:94:cb:78:58:29:91:36:e3:00:
7c:fe:92:86:a8:9a:6d:af:95:f7:3e:a2:ff:23:7e:46:c3:90:
97:d3:84:9d:5c:9a:25:d2:3f:0c:f6:f7:ea:c4:1d:61:ac:e6:
89:9b:0f:80:da:e9:4e:80:2c:cb:5b:97:70:0b:14:9f:92:08:
e8:7d:79:62:16:00:fb:41:5c:b1:1b:f7:2b:e8:d3:1c:f4:b1:
6f:c6:28:dc:30:47:b0:31:c5:b2:ac:b8:1b:11:76:d8:95:2e:
20:15:32:e4:1f:4a:4e:04:a7:57:a4:06:7a:48:b6:c1:69:5b:
90:9e:8e:48:15:fb:cc:11:c4:05:c1:82:1a:3f:19:ca:cd:29:
5f:0e:37:e3:3f:2d:b4:a1:01:22:89:b1:27:30:f0:fb:d5:d4:
f7:bd:03:97:d1:96:8c:12:30:e0:da:7e:95:6c:b1:54:12:32:
08:df:6d:b0:6a:c3:27:04:ee:02:f6:2c:51:31:26:cb:80:89:
89:0e:27:45:3b:6b:84:d4:9a:15:11:64:d1:c9:d4:43:c9:28:
e0:83:eb:8d:41:5e:26:c6:07:6e:04:36:3f:a9:91:e1:4c:1a:
6e:31:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:21 2024 by rpki-client on console-fra.rpki-client.org