Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/Hbb1r-_e_K_pK8I8GTtsvdFBVsk.roa
File: Hbb1r-_e_K_pK8I8GTtsvdFBVsk.roa (raw, json)
Hash identifier: bNVS1tEdxF7FHIjBd2WiiuZkn7LIYsH6KFll5kXITJs=
Subject key identifier: 1D:B6:F5:AF:EF:DE:FC:AF:E9:2B:C2:3C:19:3B:6C:BD:D1:41:56:C9
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 018CC8DED0DE0E330A4F4E31EBE24CCF7C50
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/Hbb1r-_e_K_pK8I8GTtsvdFBVsk.roa
Signing time: Tue 02 Jan 2024 06:31:34 +0000
ROA not before: Tue 02 Jan 2024 06:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:273c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d0:de:0e:33:0a:4f:4e:31:eb:e2:4c:cf:7c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jan 2 06:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1db6f5afefdefcafe92bc23c193b6cbdd14156c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:1a:38:be:a6:b4:09:5e:16:d1:db:5c:44:
02:a2:5a:cf:38:22:d0:88:01:6d:e6:a5:09:25:da:
b8:9c:ba:a7:d6:84:1a:26:f1:95:b9:c8:dc:f3:e5:
0e:de:7b:35:f5:06:13:86:72:3c:ee:9f:ec:dd:53:
81:d0:b3:c6:85:6b:54:09:c6:25:f7:f3:57:71:5f:
a0:fd:57:ec:9e:57:68:a4:48:6a:2d:db:05:8d:dd:
19:a3:6c:91:05:19:9a:a3:e4:2b:b8:a1:ba:15:ab:
e2:8e:c0:07:66:53:3a:4f:00:97:d9:ca:0e:fa:75:
59:dc:55:51:5d:c2:55:09:53:65:88:75:b6:f1:32:
2a:46:8c:56:0a:10:4c:90:c7:c0:e1:0b:df:ee:54:
5a:14:e7:b7:0a:95:f3:3b:a7:2d:6e:fe:f9:f0:ca:
a1:23:8e:7c:17:ed:22:6f:ea:b4:5b:fa:fb:ab:84:
6e:c7:53:70:82:de:55:0f:88:68:c8:ff:0f:b0:88:
43:a6:f8:06:bc:11:e9:c2:62:f6:85:4a:b2:d3:7a:
18:c4:c5:01:dd:40:19:e4:67:9c:87:a4:ec:71:c3:
25:2f:04:d5:30:e0:09:f0:b7:7d:a0:d6:bf:f8:6e:
9c:1c:dd:43:0f:3f:aa:fb:b6:6c:b7:fb:a1:46:63:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:F5:AF:EF:DE:FC:AF:E9:2B:C2:3C:19:3B:6C:BD:D1:41:56:C9
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/Hbb1r-_e_K_pK8I8GTtsvdFBVsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:273c::/48
Signature Algorithm: sha256WithRSAEncryption
bf:b2:98:47:be:70:71:9f:08:74:de:b5:b8:b5:5b:36:a6:cb:
cd:cd:40:b5:0e:a0:8c:99:e5:ad:34:f6:31:ec:5c:61:71:f1:
27:f6:94:81:ba:80:2a:4e:2e:5e:ca:26:f6:aa:53:4f:af:b0:
30:6a:f5:ce:bc:66:d1:2c:c0:3e:96:cb:0e:5e:c0:7d:c4:a5:
3a:16:dd:44:9d:09:0c:27:74:47:50:d7:05:39:63:b2:dc:aa:
c9:17:96:08:39:52:54:da:12:49:72:79:49:a2:e6:8e:38:ad:
c8:81:67:0c:c5:58:93:07:74:07:07:0c:2e:71:52:83:26:74:
4c:ca:0b:b0:b8:04:bf:12:1a:79:4d:55:48:a9:2e:ed:b0:5a:
f7:86:84:78:89:fb:72:c4:5f:4d:21:41:63:08:25:a1:2a:5a:
7d:75:d2:38:5e:fb:57:fe:aa:38:4d:a6:05:e9:ae:b0:17:dd:
4f:dd:d8:af:f5:ef:de:87:b2:44:c9:4a:3b:0b:30:64:11:05:
0c:20:98:b5:76:e2:56:ac:9b:8a:af:a8:ec:e5:6b:08:fe:57:
17:32:0e:04:32:44:97:03:da:5f:e2:93:da:3e:83:95:60:02:
61:df:45:ba:1a:d7:6e:0a:29:cc:a4:a7:0d:ce:79:a7:13:9d:
a4:d6:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:20 2025 by rpki-client