Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hhVs-Co4oNjKIAAm0IAglKvTNGo.roa
File: hhVs-Co4oNjKIAAm0IAglKvTNGo.roa (raw, json)
Hash identifier: FZbBTX7NChlLkvoxZ0H74mqH8W8czrRvoDkTVAbZACQ=
Subject key identifier: 86:15:6C:F8:2A:38:A0:D8:CA:20:00:26:D0:80:20:94:AB:D3:34:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CE44222F1A9C73AFA1DD7E6B63F32189D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hhVs-Co4oNjKIAAm0IAglKvTNGo.roa
Signing time: Sun 07 Jan 2024 14:09:48 +0000
ROA not before: Sun 07 Jan 2024 14:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63473
IP address blocks: 2a10:ccc3:ccca::/47 maxlen: 48
2a10:ccc3:cccc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 Feb 2024 02:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:42:22:f1:a9:c7:3a:fa:1d:d7:e6:b6:3f:32:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 7 14:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86156cf82a38a0d8ca200026d0802094abd3346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:b2:c0:1b:87:71:58:66:55:1c:61:88:1d:
16:2f:53:40:c8:bb:ce:db:c9:e4:85:5c:0e:5b:10:
c0:8a:6d:53:82:ba:72:08:99:eb:3a:ed:c8:2d:38:
69:c9:37:e5:0b:a3:74:be:3d:68:29:ec:ad:43:d6:
6a:4a:30:e0:ae:06:20:fd:62:fc:a7:39:55:f8:1e:
ed:23:98:66:f3:c0:81:6d:dd:0d:58:39:17:d6:35:
9f:4e:81:55:cf:8a:04:ad:e6:a3:dc:ad:78:b5:79:
d4:a3:ee:bf:be:e6:74:0b:aa:13:4c:ea:49:59:e5:
39:6b:8b:7a:f7:c1:3b:8b:7f:d3:cb:67:74:2b:f3:
00:46:a0:17:66:84:b2:14:b3:62:00:a8:c7:db:ea:
0c:49:ed:5d:a1:da:14:52:16:5c:5e:9d:55:79:ab:
13:da:bc:f9:d6:b3:36:b4:ee:ee:c5:0e:bf:b2:e0:
24:46:8d:75:63:66:95:51:f8:6e:c5:d3:37:2e:c6:
88:4f:85:11:25:e0:69:b7:32:50:aa:7c:69:2b:cc:
8b:c8:7c:e3:20:2d:6e:32:34:48:dd:a5:99:44:43:
e0:ef:ab:2e:22:80:72:54:56:b5:4b:b5:5d:88:a4:
0d:5d:2b:d4:a0:ea:d7:23:6d:0c:13:a0:5c:f0:20:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:6C:F8:2A:38:A0:D8:CA:20:00:26:D0:80:20:94:AB:D3:34:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hhVs-Co4oNjKIAAm0IAglKvTNGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccca::-2a10:ccc3:cccc:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
00:25:1d:3f:e1:8a:5b:72:8c:41:e2:a3:7d:1f:53:92:48:c7:
9d:eb:ab:66:68:41:dc:45:54:35:a5:6a:50:0e:c7:b2:86:c8:
d1:81:7a:dc:46:d9:85:7d:84:40:c7:b3:b2:9c:11:4b:53:ee:
35:6e:01:af:1e:02:f8:8c:b8:e3:ff:b5:f1:5a:cb:87:ff:01:
cd:9c:b5:d3:e5:97:64:69:ff:a0:c4:e1:14:83:e9:c9:e4:33:
83:94:55:c6:e1:08:af:e2:8c:d1:7f:22:bd:8d:c9:d6:d1:2b:
c2:0b:85:30:ff:f9:9b:82:12:df:f7:08:ad:7b:7f:e7:24:df:
1f:83:70:a6:85:c9:2b:47:be:24:f8:50:10:28:be:21:dc:49:
92:aa:90:cf:33:56:33:eb:d2:fb:d9:58:8e:8e:15:d4:a7:5d:
19:4a:3b:55:e9:47:ca:4b:1d:b3:09:8d:18:a5:0a:d1:e1:dc:
1b:fc:e5:b5:ef:dc:5a:37:48:81:85:fc:47:23:5d:d6:74:47:
0f:d9:2c:46:96:21:c7:ad:3a:35:99:dd:fd:b0:d1:ca:dd:35:
18:1f:07:d5:7b:75:c9:56:3c:db:bb:7f:f3:50:48:0f:ca:c0:
78:b8:5e:09:30:de:9c:ba:89:4f:e9:7a:e5:d0:14:54:58:e8:
80:c6:5e:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 3 06:16:26 2024 by rpki-client on console-ams.rpki-client.org