Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HlMXRfgjoIeEVtChO6aRwtYXWEk.roa
File: HlMXRfgjoIeEVtChO6aRwtYXWEk.roa (raw, json)
Hash identifier: q7jQeMtFdTmT8UcnmjKGDqHrKDqq7L4gbQL6ghNJOfQ=
Subject key identifier: 1E:53:17:45:F8:23:A0:87:84:56:D0:A1:3B:A6:91:C2:D6:17:58:49
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018B429A8D69A0BCBBC5951FE229F066EFAD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HlMXRfgjoIeEVtChO6aRwtYXWEk.roa
Signing time: Wed 18 Oct 2023 11:45:06 +0000
ROA not before: Wed 18 Oct 2023 11:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201671
IP address blocks: 2a0d:afc1::/32 maxlen: 32
2a0d:c101::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Oct 2023 13:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:9a:8d:69:a0:bc:bb:c5:95:1f:e2:29:f0:66:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 18 11:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e531745f823a0878456d0a13ba691c2d6175849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:88:a1:4a:6c:bf:8e:23:0b:ae:75:09:24:
b0:d8:32:4c:08:94:af:d3:99:a1:df:78:c3:74:cf:
35:6c:a1:89:2f:76:bd:b5:76:f6:5e:70:75:21:0b:
70:35:4f:92:f5:cb:0d:b9:c9:de:6b:4f:64:35:1e:
c4:d3:70:7a:d1:b2:de:c7:e3:01:95:dc:94:6d:37:
44:82:8e:a5:68:f6:ca:a6:9f:71:ec:9e:26:6f:68:
2d:8a:4b:b2:f6:5c:70:6a:7c:97:40:7f:4a:d5:fc:
6a:b4:09:a3:66:29:8a:ba:65:01:17:6b:c3:3e:f5:
85:b7:5b:d1:ed:bf:62:17:a5:34:f2:26:62:09:65:
e1:6c:cd:6b:af:c7:3c:03:16:bb:0a:5b:60:82:fd:
8c:59:c2:18:00:d5:fe:01:cb:3c:e1:1b:5a:0e:c4:
56:56:16:29:e7:f7:bf:ef:28:54:ee:4a:82:ee:93:
aa:31:db:9a:55:86:69:d2:59:54:e3:84:57:92:61:
96:50:ba:24:f7:5e:cc:58:13:fe:5f:75:27:82:4d:
ba:f3:80:f7:d4:83:41:e6:89:26:1e:49:87:27:d1:
66:93:59:94:bc:01:3c:83:51:00:a8:70:54:01:dc:
61:e9:51:79:ef:a9:82:91:d9:9e:fd:8c:03:ef:81:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:17:45:F8:23:A0:87:84:56:D0:A1:3B:A6:91:C2:D6:17:58:49
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HlMXRfgjoIeEVtChO6aRwtYXWEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:afc1::/32
2a0d:c101::/32
Signature Algorithm: sha256WithRSAEncryption
23:2e:6e:2c:92:24:65:62:dd:f1:77:89:30:02:a3:62:5c:96:
ba:09:ef:80:95:93:01:54:9d:9c:18:ca:22:40:d3:80:a1:df:
7d:3f:52:e0:59:56:05:d7:7a:31:2b:9d:2e:2b:1a:e8:87:d9:
f3:87:68:03:ed:62:82:87:e4:fa:14:24:63:b0:2d:e8:53:07:
3e:50:5b:83:8f:1d:d8:d0:8a:88:6e:0c:f9:8e:a7:dd:c3:2c:
21:62:e0:4a:0c:56:52:d5:d4:74:8f:c7:84:1c:f7:6e:c2:22:
48:0f:3e:c0:02:61:df:e0:99:b7:3f:2b:8c:fd:43:70:95:3f:
cb:30:24:43:a0:d9:dc:ab:25:22:85:dd:6c:05:44:4c:8b:fc:
98:05:03:1e:fd:20:d2:f8:08:46:e3:02:45:a3:4b:42:6d:06:
e0:cd:ff:f5:9d:75:5b:9b:b4:76:e0:9d:de:c5:5b:d1:fc:05:
74:4f:5d:24:cd:7a:96:b8:49:74:72:fb:68:b4:f3:d5:52:df:
c4:2e:a3:35:26:5e:e3:44:0e:e8:08:f0:62:19:45:e5:87:70:
c1:a5:f8:38:f4:85:de:8d:ad:2f:ee:2c:ff:21:33:46:72:79:
09:a0:08:9f:0e:a0:50:9a:ae:a0:53:c8:ff:03:20:d6:de:eb:
cd:8c:26:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org