Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa
File: HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa (raw, json)
Hash identifier: N4+j05+zV+spwboQpickrGKZzShvOyTJUHjVBUZECVQ=
Subject key identifier: 1C:8F:9D:AC:72:7E:F2:8B:EE:14:FE:B7:5E:8C:A1:DA:8A:03:04:1B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D1E61A4F963DF0C72FDE620B950BAEA0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa
Signing time: Thu 18 Jan 2024 21:02:12 +0000
ROA not before: Thu 18 Jan 2024 21:02:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a10:cc40:cc40::/48 maxlen: 48
2a10:cc40:cc41::/48 maxlen: 48
2a10:cc40:cc42::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 21 Jan 2024 05:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1e:61:a4:f9:63:df:0c:72:fd:e6:20:b9:50:ba:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 18 21:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c8f9dac727ef28bee14feb75e8ca1da8a03041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:78:42:bd:6c:00:96:23:45:11:d4:c9:a3:
bd:28:c8:57:e9:f5:a1:82:10:df:85:ad:ef:b4:73:
21:80:a7:6d:0b:fe:95:d7:fd:03:f5:87:ef:23:3a:
be:62:53:aa:f5:f6:98:11:dc:97:fc:9a:74:59:a5:
c9:34:c0:aa:a6:62:d3:b4:52:c1:19:ee:a1:8d:85:
bf:17:88:8f:ba:6f:86:88:8e:3b:9a:98:c0:2f:68:
a1:db:60:0e:b3:1a:f2:76:ff:79:c9:c1:0d:a5:2d:
61:d7:67:54:35:17:2d:29:af:bc:2b:c8:1d:a2:1c:
07:18:d1:fb:df:8f:5d:b0:ea:20:6c:00:65:54:c3:
2b:b5:26:1c:3e:93:21:71:8f:ab:9c:2e:e0:65:83:
5e:d6:51:a9:64:dd:cf:a1:ed:0f:ee:fb:d5:05:d1:
30:91:e8:dc:98:aa:e6:70:a0:b3:4d:3b:b6:b1:59:
cf:70:d7:7d:f7:5c:84:09:31:ed:da:94:4f:90:9a:
2c:ba:80:b1:b4:78:db:7a:62:e7:53:f7:a4:ad:30:
69:52:a1:6d:02:00:cc:0a:6d:4c:c8:a0:77:68:62:
9f:eb:5e:15:52:3c:65:ba:f0:b4:a3:16:3e:45:d5:
e5:ea:0f:b5:35:16:ee:1d:ee:b2:db:d7:24:68:aa:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:9D:AC:72:7E:F2:8B:EE:14:FE:B7:5E:8C:A1:DA:8A:03:04:1B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:cc40::-2a10:cc40:cc42:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:a8:44:7c:2d:43:85:01:85:55:ca:1d:08:1f:ea:ab:2c:d5:
24:54:6c:e5:69:af:36:2b:56:f5:14:0d:c4:bc:ef:ff:15:24:
22:57:bf:09:65:53:6a:30:80:b9:74:c7:b3:93:c4:9a:4c:33:
25:e3:9b:ea:b9:35:fd:ad:c3:07:3e:6f:3a:42:fe:fb:e9:ae:
fa:d9:a7:0a:be:fe:78:b9:fe:9c:b4:99:fe:fc:1b:9d:12:af:
c4:ad:75:5c:da:66:d1:84:64:ad:02:dc:a6:4c:f4:b7:fc:53:
f2:5c:8e:e4:f7:4f:72:c6:49:27:db:71:b3:ed:43:03:24:cc:
ea:0e:34:3a:96:20:aa:9d:0e:a4:b1:5e:63:a0:c7:59:1d:b4:
86:ef:26:8e:07:16:fc:26:d3:f6:e5:9b:6f:12:11:96:75:cf:
2e:3d:ed:f5:27:e1:f2:fc:ac:b1:f4:0f:e5:49:e0:5d:b7:96:
b7:0c:d6:49:5e:b3:3d:29:04:84:e3:54:19:51:27:50:2f:f7:
37:c6:b1:af:31:b8:10:89:63:f9:3c:33:b9:89:38:f1:2c:d3:
cc:5d:98:b4:3e:fb:e5:76:a4:2a:d2:eb:cd:28:32:f4:9f:08:
1e:7d:91:5f:e1:d0:2c:97:fa:7b:e8:57:48:73:c6:db:a7:33:
05:2e:8c:db
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY0eYaT5Y98Mcv3mILlQuuoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTE4MjEwMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzhmOWRhYzcyN2VmMjhiZWUxNGZlYjc1ZThjYTFkYThhMDMwNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEt4Qr1sAJYjRRHUyaO9KMhX6fWh
ghDfha3vtHMhgKdtC/6V1/0D9YfvIzq+YlOq9faYEdyX/Jp0WaXJNMCqpmLTtFLB
Ge6hjYW/F4iPum+GiI47mpjAL2ih22AOsxrydv95ycENpS1h12dUNRctKa+8K8gd
ohwHGNH7349dsOogbABlVMMrtSYcPpMhcY+rnC7gZYNe1lGpZN3Poe0P7vvVBdEw
kejcmKrmcKCzTTu2sVnPcNd991yECTHt2pRPkJosuoCxtHjbemLnU/ekrTBpUqFt
AgDMCm1MyKB3aGKf614VUjxluvC0oxY+RdXl6g+1NRbuHe6y29ckaKonpwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFByPnaxyfvKL7hT+t16ModqKAwQbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSEktZHJISi04b3Z1RlA2M1hveWgyb29EQkJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqEMxA
zEADBwAqEMxAzEIwDQYJKoZIhvcNAQELBQADggEBAJaoRHwtQ4UBhVXKHQgf6qss
1SRUbOVprzYrVvUUDcS87/8VJCJXvwllU2owgLl0x7OTxJpMMyXjm+q5Nf2twwc+
bzpC/vvprvrZpwq+/ni5/py0mf78G50Sr8StdVzaZtGEZK0C3KZM9Lf8U/JcjuT3
T3LGSSfbcbPtQwMkzOoONDqWIKqdDqSxXmOgx1kdtIbvJo4HFvwm0/blm28SEZZ1
zy497fUn4fL8rLH0D+VJ4F23lrcM1klesz0pBITjVBlRJ1Av9zfGsa8xuBCJY/k8
M7mJOPEs08xdmLQ+++V2pCrS680oMvSfCB59kV/h0CyX+nvoV0hzxtunMwUujNs=
-----END CERTIFICATE-----
Generated at Sun Jan 21 06:52:03 2024 by rpki-client on console-fra.rpki-client.org