Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/HkMQcIdY0tcYK5_N2HTl6cJl4wE.roa
File: HkMQcIdY0tcYK5_N2HTl6cJl4wE.roa (raw, json)
Hash identifier: RU93jYhHIf48xmn8xB0iw1gTWYNGjBUs8S/P2qeRbs4=
Subject key identifier: 1E:43:10:70:87:58:D2:D7:18:2B:9F:CD:D8:74:E5:E9:C2:65:E3:01
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018FC004AC78C76B322A35E082F02B21622F
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/HkMQcIdY0tcYK5_N2HTl6cJl4wE.roa
Signing time: Tue 28 May 2024 16:24:42 +0000
ROA not before: Tue 28 May 2024 16:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:3c43::/32 maxlen: 32
2a11:3c46::/32 maxlen: 32
2a11:6bc3::/32 maxlen: 32
2a11:6bc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 19:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:04:ac:78:c7:6b:32:2a:35:e0:82:f0:2b:21:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: May 28 16:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e4310708758d2d7182b9fcdd874e5e9c265e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:73:13:98:19:70:e4:f2:8d:96:00:c5:b1:
c9:90:3f:8e:c6:b7:ff:39:eb:de:16:d3:ae:dd:28:
0a:75:0f:df:fe:df:c2:7b:7b:84:62:e5:af:a2:3a:
18:b8:a8:d2:b6:9c:17:98:be:a9:0c:e2:2f:6f:c5:
41:e4:60:44:a9:f3:66:15:00:73:bc:21:5b:7d:16:
21:25:64:9e:b0:0b:e2:c5:64:a5:cb:c4:68:9a:fb:
d1:31:fa:fe:54:0c:3c:6d:7a:ed:79:39:52:d7:4f:
1f:21:10:5b:2e:79:99:31:c9:b3:d6:a9:24:59:01:
6a:71:05:93:4d:34:eb:14:d7:04:1f:2a:04:e6:da:
f0:df:2f:86:3a:4a:ed:b3:06:ff:17:7f:d0:16:da:
2b:61:08:30:35:c4:20:37:d7:bf:f5:ae:36:9a:d5:
10:78:78:4f:12:e6:5a:06:a9:66:68:47:36:08:30:
aa:64:0e:c5:70:8e:0d:ab:18:1a:50:48:65:8a:d4:
29:04:82:1d:7a:39:2b:ef:cd:f3:26:85:bc:da:22:
3a:9a:b2:0d:c0:51:0c:25:65:b4:5b:d8:5e:30:c8:
fc:68:c2:f4:46:bc:b3:71:c9:08:37:30:1b:f1:fe:
b7:4e:04:c0:3a:59:71:83:ab:11:a8:c9:e0:7f:f1:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:43:10:70:87:58:D2:D7:18:2B:9F:CD:D8:74:E5:E9:C2:65:E3:01
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/HkMQcIdY0tcYK5_N2HTl6cJl4wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c43::/32
2a11:3c46::/32
2a11:6bc3::/32
2a11:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
4c:d5:04:51:95:72:4c:f4:3a:32:6b:50:16:e5:3b:e2:99:15:
b8:8a:36:4f:44:d0:14:39:82:59:2a:1a:c2:17:b1:b1:aa:10:
06:f4:d1:fa:d7:d4:f9:a6:0c:07:a4:6b:9e:da:0c:83:61:95:
6a:bf:42:da:78:32:70:4c:05:e9:2a:a2:df:54:e7:34:99:1a:
78:f8:06:d3:ac:a0:1c:f0:64:b1:ae:53:2a:24:11:94:6d:e7:
4d:31:b1:3e:49:7b:b4:d6:b2:89:dc:83:d0:3d:74:a5:2e:09:
ad:19:d0:b0:55:b0:d4:5d:cf:6a:68:65:a6:39:fc:34:92:33:
b4:2e:3b:3f:a7:d8:5f:e3:1b:15:21:df:00:13:24:89:54:d4:
53:ad:7f:d6:b7:8b:b2:7b:39:04:1f:dc:04:62:1a:14:93:54:
c1:a4:ef:aa:20:83:0b:65:cf:9a:0e:34:5e:f4:aa:7a:b0:6c:
4c:34:e4:4b:cb:d3:28:99:76:02:d8:25:3f:e6:8f:fc:c7:1f:
9e:bf:d7:74:aa:2e:52:b4:05:2f:64:b0:a5:96:19:f4:16:a7:
46:c4:0d:86:6a:1c:b1:16:2c:a9:80:1f:95:50:e9:9d:c3:1c:
1f:41:2e:e6:82:00:6c:c3:fd:cc:46:cc:87:9a:23:e4:54:55:
44:a6:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org