Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/H0IdIi9ZGVJHzxtNlYaLWchOhi4.roa
File: H0IdIi9ZGVJHzxtNlYaLWchOhi4.roa (raw, json)
Hash identifier: JBYhTF6iQ0MfvHZp/jObmylGyvC9+lrEYVX/Xqjbx+k=
Subject key identifier: 1F:42:1D:22:2F:59:19:52:47:CF:1B:4D:95:86:8B:59:C8:4E:86:2E
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42C7D227A564AED5E494137D4ED943
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/H0IdIi9ZGVJHzxtNlYaLWchOhi4.roa
Signing time: Sun 01 Jan 2023 21:35:25 +0000
ROA not before: Sun 01 Jan 2023 21:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a10:6080::/29 maxlen: 29
2a10:6680::/29 maxlen: 29
2a10:5e80::/29 maxlen: 29
2a10:6480::/29 maxlen: 29
2a10:6780::/29 maxlen: 29
2a10:5f80::/29 maxlen: 29
2a10:6580::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c7:d2:27:a5:64:ae:d5:e4:94:13:7d:4e:d9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f421d222f59195247cf1b4d95868b59c84e862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:e4:a7:db:28:c9:22:7b:33:01:32:ca:91:
46:3e:1c:a8:db:bd:6b:83:08:7f:a6:3e:d6:6d:74:
4a:93:e0:fd:87:95:53:7c:1f:3e:01:16:d4:28:ac:
6c:5d:e5:16:76:f7:0e:ca:3e:0c:b0:04:f9:48:97:
c8:af:b4:07:64:49:66:d8:21:11:f9:5d:22:9c:5b:
2f:3c:d4:66:ed:4b:d1:44:f2:08:6f:c5:90:4e:d0:
a9:a5:e6:73:62:f8:43:97:b9:bb:d4:81:b3:dc:83:
5f:99:e0:c7:7d:ff:f2:3e:dd:78:ca:93:20:11:29:
f5:78:99:9b:c4:7e:60:82:a8:3b:35:4b:5a:66:06:
e5:6d:59:be:73:34:3b:cd:b2:ee:9f:8e:eb:54:7b:
6f:f7:f1:6e:9d:13:c0:f4:8d:8d:ac:86:0d:02:21:
5c:f6:07:8a:1c:9b:1b:3e:1e:26:82:80:5d:ae:b5:
36:4f:82:20:63:61:ce:25:6a:9b:e6:bd:0a:0b:86:
d4:f9:2d:c4:5c:2f:ee:1c:0b:19:4f:40:94:c9:8a:
9b:57:3d:90:72:96:0c:10:8f:aa:7d:69:87:7f:af:
41:79:10:bb:74:57:a5:e8:e9:51:85:68:98:33:b7:
a3:cc:04:cd:20:bd:22:f3:fe:74:00:30:93:1c:33:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:1D:22:2F:59:19:52:47:CF:1B:4D:95:86:8B:59:C8:4E:86:2E
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/H0IdIi9ZGVJHzxtNlYaLWchOhi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:5e80::/29
2a10:5f80::/29
2a10:6080::/29
2a10:6480::/29
2a10:6580::/29
2a10:6680::/29
2a10:6780::/29
Signature Algorithm: sha256WithRSAEncryption
61:58:14:c6:d1:85:c3:4e:6d:13:58:ec:8a:e4:2d:98:dc:bf:
ef:4e:9f:f3:3f:49:cc:aa:f9:46:23:84:56:c3:99:32:29:25:
21:ca:a5:2b:85:66:29:fc:13:e4:c1:ed:59:16:f0:b0:60:0e:
5d:f7:21:3f:fe:f5:64:ee:00:6e:0e:5f:e6:10:4d:89:28:e4:
fa:c2:f4:81:07:a9:4f:ac:ec:ef:bb:b0:f4:f1:21:d1:55:6b:
02:05:39:eb:c5:07:02:d2:90:47:2e:01:af:1d:35:85:86:6c:
e1:8b:37:e4:5c:98:97:a7:fb:09:47:7d:9b:f1:3e:a8:65:d7:
2a:ec:bf:bb:df:8e:dd:54:20:83:74:28:d0:07:b0:ca:4b:3c:
cb:4f:7c:76:2c:94:c0:34:52:d2:af:30:2e:b6:e7:81:74:ca:
5f:e8:b3:04:27:79:32:e0:2b:39:2e:82:16:4e:fa:54:da:9f:
e8:cf:fb:32:fd:54:c0:5f:f0:74:2a:5b:4d:84:ad:82:5b:1f:
64:8d:4c:1d:a8:d7:64:92:94:fc:e4:6c:4d:c9:30:b6:d2:b4:
b8:fa:2f:95:f9:f9:01:81:e0:c3:64:7a:d4:cf:2f:c6:8a:92:
4d:45:21:51:1f:15:77:5f:eb:2d:8d:6e:27:10:36:1d:0c:1a:
ea:e0:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org