Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa
File: hUIRrMctQasiwjP2bB1IdUnnRx0.roa (raw, json)
Hash identifier: 9vvNY6dpGnKk69njFLLRBbmmv5fHAvhSmebElOJJdLw=
Subject key identifier: 85:42:11:AC:C7:2D:41:AB:22:C2:33:F6:6C:1D:48:75:49:E7:47:1D
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018F2AF1866FFBF8FB96E88A84F44C17E053
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa
Signing time: Mon 29 Apr 2024 17:40:22 +0000
ROA not before: Mon 29 Apr 2024 17:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:e8c0::/29 maxlen: 29
2a11:ea80::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:1040::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9300::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 13:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:f1:86:6f:fb:f8:fb:96:e8:8a:84:f4:4c:17:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 29 17:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854211acc72d41ab22c233f66c1d487549e7471d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:1d:51:47:81:b1:b0:08:42:cd:3c:e1:0d:
8e:11:c1:45:c5:f3:f6:99:c8:e0:18:5c:26:eb:33:
46:51:8d:df:b6:37:fb:2f:9d:23:e0:28:dc:79:8c:
42:ac:f7:bd:0f:e7:3c:64:06:45:18:6d:20:61:3c:
ce:f7:36:8e:7e:c6:d3:c7:07:3a:f8:04:bd:da:b5:
ec:19:31:d3:1a:54:95:e8:2e:4c:39:26:78:fb:69:
1c:d9:ab:44:51:90:7e:4b:de:af:af:4e:7b:e1:23:
d8:0c:59:7a:f5:44:fa:ae:9b:98:51:ab:12:20:79:
dd:8a:5d:25:bd:5c:d1:c0:52:4b:6e:84:30:99:b3:
9c:b1:8f:ae:b4:28:d9:f4:23:7c:54:ba:e2:78:83:
1d:26:78:b7:b1:cd:61:be:e7:ed:64:1e:f4:d6:e4:
56:5a:9b:1b:94:7c:56:ca:08:87:e7:3e:f6:05:3d:
23:81:16:77:72:25:3e:8b:35:25:9c:c6:d9:2c:fd:
24:cb:1d:68:bb:15:23:3b:42:6e:f3:59:5c:ae:97:
cf:35:f8:6f:a5:b8:c4:11:d7:09:c0:ae:b5:16:f6:
92:29:6b:61:94:72:b2:dd:17:fe:a4:a9:b2:43:a2:
47:76:dd:56:aa:da:a1:3c:79:c4:5a:fc:23:1c:b9:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:11:AC:C7:2D:41:AB:22:C2:33:F6:6C:1D:48:75:49:E7:47:1D
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hUIRrMctQasiwjP2bB1IdUnnRx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e8c0::/29
2a11:ea80::/29
2a11:ff40::/29
2a12:1040::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8580::/29
2a12:8a00::/29
2a12:9300::/29
2a12:d080::/29
Signature Algorithm: sha256WithRSAEncryption
1b:16:05:5b:0d:27:5d:c8:d5:80:03:57:15:1b:57:09:5e:8e:
c0:e3:f4:5c:2d:22:a9:62:75:2b:e2:4f:c1:c8:d0:83:c1:87:
8a:b6:d6:98:5c:80:cb:2e:bc:df:ea:cb:86:f5:bf:1c:7e:05:
a8:9e:bf:9c:fb:fe:70:34:84:9d:8c:2e:88:93:09:e4:bb:3c:
58:db:f9:c8:93:08:b5:bd:ca:b4:4f:f4:12:0e:59:f1:bf:65:
3c:ab:d2:71:db:30:76:81:be:07:1e:c1:b2:be:14:09:10:17:
39:4b:8c:f0:39:52:31:98:89:2e:0a:bb:47:78:2f:8f:69:92:
d1:68:b0:3f:09:b6:47:c7:72:a2:07:f0:f6:b5:d8:cd:c2:19:
d9:21:21:29:7f:28:63:3b:79:71:85:8d:6c:ac:ed:16:99:c8:
34:bf:7a:fc:29:11:50:5c:16:4b:25:11:be:2a:2b:a3:96:19:
ec:4b:0e:eb:16:0b:06:74:b1:e3:2c:8a:e0:ef:02:d9:20:f1:
2f:fb:37:2e:bd:a6:cd:5a:c5:2a:93:08:7c:b0:aa:6d:7d:21:
40:53:32:4b:23:2c:a5:3b:50:62:5d:e9:a2:bd:a4:a2:37:d6:
9c:c1:68:eb:85:a0:c9:78:83:8c:ec:ea:e6:ca:67:12:fe:ad:
fb:55:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:52 2024 by rpki-client on console-ams.rpki-client.org