Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HAqRunduo82mDfiLZZuY6jk4Vw0.roa
File: HAqRunduo82mDfiLZZuY6jk4Vw0.roa (raw, json)
Hash identifier: LF1Szh3HHMw46q3td+qrA3tZ+0SmrmOwKOfbnYA+IjQ=
Subject key identifier: 1C:0A:91:BA:77:6E:A3:CD:A6:0D:F8:8B:65:9B:98:EA:39:38:57:0D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185A4C9CB8035101877067ED6326E8F1191
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HAqRunduo82mDfiLZZuY6jk4Vw0.roa
Signing time: Thu 12 Jan 2023 07:02:46 +0000
ROA not before: Thu 12 Jan 2023 07:02:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:c9:cb:80:35:10:18:77:06:7e:d6:32:6e:8f:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 12 07:02:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c0a91ba776ea3cda60df88b659b98ea3938570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7c:8c:a7:30:04:1d:c5:97:39:91:ce:9b:a1:
1f:2e:93:b7:13:33:5e:af:39:c4:66:14:f7:dc:c4:
be:f8:11:f0:c0:90:cf:0b:f8:8c:4c:6d:0c:5f:b8:
64:4e:2c:60:37:0c:99:79:5a:db:ee:ca:78:c3:eb:
c0:8e:c1:91:2b:df:e5:a6:6f:a8:bc:99:d2:64:19:
51:46:09:3e:06:d7:ee:fb:b3:3e:9d:1d:d1:4a:ab:
ab:0e:63:95:ac:40:67:b0:e5:f4:69:7b:ad:e5:3c:
0d:19:55:f0:3e:a9:5b:a3:66:3b:32:b6:9b:db:34:
16:1d:6b:c6:c7:4c:4d:f3:98:66:c8:34:36:5f:32:
c4:5a:6c:ff:64:66:0e:a9:ee:ab:2a:3f:3e:a2:55:
66:07:06:41:b7:4b:dd:2a:5f:32:44:e4:b4:5f:8a:
1b:65:80:26:5e:b5:9d:09:3c:c2:c7:25:de:a3:1e:
79:3b:d5:f6:f6:4e:a5:c9:1d:db:97:9f:7b:00:e7:
b5:c6:08:92:e6:56:5c:0a:76:cf:92:6d:91:24:e5:
80:aa:06:7d:f6:a3:d4:dc:fb:f9:4b:7e:d5:b5:81:
15:02:aa:3f:2a:1f:82:59:58:bd:75:e0:1a:61:a1:
b7:06:56:a0:4b:be:f3:da:eb:4b:1d:2d:17:92:11:
f6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:91:BA:77:6E:A3:CD:A6:0D:F8:8B:65:9B:98:EA:39:38:57:0D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HAqRunduo82mDfiLZZuY6jk4Vw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
73:c4:b2:79:f4:ba:82:67:6e:a3:3d:a5:02:81:ef:b7:64:cc:
f7:ce:fb:44:ef:7f:e6:01:27:0b:cd:dd:10:20:81:c1:a6:4c:
dc:42:f9:d5:ba:10:4d:be:11:43:28:c3:c3:6b:79:07:72:af:
c7:f6:e1:65:ad:b2:35:fb:9d:bd:b7:98:0f:61:9d:e0:f6:04:
97:e0:47:16:7f:bc:86:09:6e:48:c9:6b:1b:58:7d:fa:f6:e7:
4f:53:19:b4:f2:f7:5e:53:61:54:ee:07:a3:be:82:c0:ae:aa:
3c:9c:8f:89:9d:8b:57:71:0e:8f:9d:ee:db:fb:f7:97:e0:ce:
1d:dc:6e:b2:0f:00:9c:1e:f3:57:e9:8a:22:2b:88:3a:75:0d:
6b:a8:96:95:fb:26:6a:aa:be:d4:4e:21:03:d4:f6:e6:62:6b:
4a:83:97:64:c6:f4:af:48:a3:62:74:bd:c2:8c:a9:38:c1:c7:
fa:19:0c:31:72:54:06:48:30:65:d6:9f:60:ba:68:7e:b7:c5:
26:79:57:0b:9d:bf:74:1c:f8:59:a5:b8:be:40:76:ca:42:22:
2d:a0:dc:ae:43:ef:31:cd:d9:fa:31:27:e8:6f:20:28:f4:ae:
b3:5c:09:a9:5c:ef:6e:73:23:bc:d1:c2:ed:78:f3:f1:3d:dc:
cb:29:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org