Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hfnhUoN5hOBBRB0vj5P27IK6qTY.roa
File: hfnhUoN5hOBBRB0vj5P27IK6qTY.roa (raw, json)
Hash identifier: z887OcnI9dx+ly4qbMg2IYrtFXVp56k3d58CNWlGchA=
Subject key identifier: 85:F9:E1:52:83:79:84:E0:41:44:1D:2F:8F:93:F6:EC:82:BA:A9:36
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC0D61120FA7FDBC9C8675B567A25
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hfnhUoN5hOBBRB0vj5P27IK6qTY.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 2a0e:4bc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 23:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c0:d6:11:20:fa:7f:db:c9:c8:67:5b:56:7a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85f9e152837984e041441d2f8f93f6ec82baa936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:23:21:9f:92:d2:0e:62:72:ad:06:72:de:8f:
fc:e6:dd:39:10:eb:38:16:08:19:df:8f:7e:bf:7a:
42:20:c5:06:c0:91:dc:b8:f3:1a:74:cb:85:60:de:
fa:56:34:ee:46:f6:60:55:b4:5b:01:20:71:b6:e8:
a9:4f:97:7a:c4:4b:88:26:55:45:fe:a1:5b:e3:4a:
27:90:dd:30:0c:6b:36:dc:10:19:56:85:44:89:1e:
56:28:09:54:02:6f:5c:63:b2:28:6f:d1:ac:e7:d6:
cd:e6:cf:6d:39:dd:cc:18:aa:66:b4:a6:79:21:b1:
ff:35:d3:45:e5:be:dc:2b:64:6e:ae:b1:d2:ca:64:
05:57:c6:b7:00:9c:6e:a0:16:6b:a3:8a:55:81:58:
75:fe:83:76:9f:7b:d1:ec:41:0a:a0:c8:44:ff:8e:
c9:61:3c:c2:21:bb:33:86:b5:2a:85:b9:23:3d:79:
e2:f0:b0:b7:a3:53:2e:dd:2a:42:08:fe:27:f3:c8:
cd:14:0c:53:dd:a1:9a:a3:eb:ae:e9:31:19:0d:50:
b3:54:3d:5a:4e:60:4e:1b:bb:65:e5:44:26:a7:bf:
a9:49:80:6f:1b:f2:77:67:84:bc:61:22:ac:c9:16:
7a:e0:13:d8:44:d0:02:24:c0:4a:43:53:b6:84:34:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:E1:52:83:79:84:E0:41:44:1D:2F:8F:93:F6:EC:82:BA:A9:36
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/hfnhUoN5hOBBRB0vj5P27IK6qTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc1::/32
Signature Algorithm: sha256WithRSAEncryption
46:73:59:24:ee:03:37:0b:01:10:69:c7:3b:2a:59:88:b2:4a:
59:d7:2c:90:9d:7c:0e:e9:38:f4:fc:d7:7c:ea:9f:32:33:9e:
99:18:bb:99:2b:65:f0:50:ab:46:04:41:84:89:10:b1:a9:dd:
26:0f:84:06:96:b9:aa:2c:5e:5c:bf:54:25:96:11:7c:0d:69:
41:0a:b1:0b:23:20:f4:e6:d7:4f:88:ab:a3:f0:83:e6:0f:29:
71:ce:93:49:b8:02:30:26:50:63:4a:a0:1a:9b:dc:e7:f4:5f:
b9:26:4b:4b:7e:5c:83:f8:e1:98:fb:98:76:1f:2f:e5:58:07:
04:56:2b:bc:c4:5a:ac:be:92:58:44:4f:e5:38:d4:8e:44:8b:
ac:90:c3:7e:1f:5c:ec:a8:af:06:86:ed:c6:87:d9:e7:ca:3a:
16:ed:01:8f:45:d8:c1:e8:86:0b:1f:18:d9:dd:97:7a:54:6e:
de:54:5b:6b:e2:4d:77:53:f8:10:c7:ea:e4:e3:7a:76:05:be:
eb:e6:e1:c9:bb:65:ae:08:91:74:9e:32:ca:d6:39:f7:df:93:
6e:5a:d5:04:e6:65:a5:85:ff:a3:31:ff:19:1c:16:c3:f4:fa:
dd:0f:48:63:60:2e:b0:7f:b3:91:87:b0:e8:3c:50:b8:03:fb:
b0:40:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org