Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jhsOxIoRBRNGlJ3bBBDEEgVLKqw.roa
File: jhsOxIoRBRNGlJ3bBBDEEgVLKqw.roa (raw, json)
Hash identifier: OdYJy0is/KxcUTQHjgnbzcp/dcE1NyDCNHxX8ZMdSmM=
Subject key identifier: 8E:1B:0E:C4:8A:11:05:13:46:94:9D:DB:04:10:C4:12:05:4B:2A:AC
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0192892A6EE8CB04DB85DD31D7AA44665085
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jhsOxIoRBRNGlJ3bBBDEEgVLKqw.roa
Signing time: Mon 14 Oct 2024 03:55:12 +0000
ROA not before: Mon 14 Oct 2024 03:55:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57271
IP address blocks: 2a0e:5382::/32 maxlen: 32
2a0e:5385::/32 maxlen: 32
2a0e:8082::/32 maxlen: 32
2a0e:ccc2::/32 maxlen: 32
2a0f:c081::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:2a:6e:e8:cb:04:db:85:dd:31:d7:aa:44:66:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 14 03:55:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e1b0ec48a11051346949ddb0410c412054b2aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:66:7e:a3:5a:ac:c0:c4:38:c2:27:7d:e2:
79:cf:80:6f:7f:27:23:e7:53:20:e4:e2:e1:ff:ee:
aa:03:26:45:ce:3e:67:cb:1a:0c:88:2e:e1:59:3d:
ff:e4:05:ab:ac:f7:7a:1a:38:fc:e9:37:00:e3:d7:
d2:86:dd:b6:a8:a0:0a:c7:26:43:4f:78:6c:e9:ca:
a6:d5:99:07:e3:f9:fd:f2:80:19:41:7e:71:22:89:
0b:53:06:07:28:c0:02:e6:d5:a2:b0:65:7e:07:68:
88:85:fc:17:a0:07:91:36:6e:04:3b:72:89:bb:13:
dc:5b:5d:29:6c:34:bd:22:cc:ef:a3:05:1d:55:3f:
0f:b8:a2:57:66:aa:b1:21:a3:a8:78:11:0a:52:2e:
d0:f6:fc:df:a5:b1:69:33:c5:5c:48:0a:c0:fa:79:
45:d3:61:46:4c:91:d5:97:ce:dd:ec:c7:7a:6b:8a:
66:52:7b:7e:6a:b6:af:51:1e:f1:20:9e:93:77:b6:
57:c5:9e:55:58:e3:4b:51:3a:c6:49:6f:9b:6f:5e:
7e:19:d2:59:12:d1:99:17:83:6e:96:2f:33:3a:34:
73:4b:bd:ba:94:74:97:de:4b:11:a1:50:39:2f:12:
de:58:c4:51:92:aa:67:04:50:71:ec:be:3e:81:58:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:0E:C4:8A:11:05:13:46:94:9D:DB:04:10:C4:12:05:4B:2A:AC
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/jhsOxIoRBRNGlJ3bBBDEEgVLKqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5382::/32
2a0e:5385::/32
2a0e:8082::/32
2a0e:ccc2::/32
2a0f:c081::/32
Signature Algorithm: sha256WithRSAEncryption
1a:61:e5:c8:a7:a7:69:da:1d:30:89:ae:b6:55:e7:55:ea:d3:
d6:51:3e:e6:5e:f8:9c:ff:c3:ca:9f:8f:a0:91:de:f5:3c:1c:
ea:b1:93:ed:a2:53:3f:50:2c:0e:e8:10:ab:1e:5d:05:b5:51:
4a:5c:d7:2f:d7:33:63:d5:58:c8:a4:96:5a:77:8e:ae:86:2b:
c9:00:15:cb:3c:32:b2:d3:c8:7e:c7:70:1d:58:74:31:28:45:
3c:bf:4b:26:76:d0:9c:28:47:30:63:52:37:98:f2:4d:19:1f:
d3:a5:69:f3:27:bd:6d:08:8b:24:e5:a3:b6:da:5f:c4:19:c7:
10:2e:54:22:40:8e:7d:a4:d1:37:92:19:8d:a9:48:9b:0b:46:
85:e3:35:2a:fb:7c:53:76:75:76:ee:06:d1:55:09:46:0e:ab:
83:eb:68:d7:b2:b3:fe:2b:3c:bf:f6:ed:5e:58:0f:74:af:f6:
2f:0d:fa:a6:51:e0:fd:2d:4e:27:cc:1f:28:6d:ed:47:6e:c6:
26:c5:ed:17:92:50:d9:3a:e6:db:68:1d:7b:ff:02:6b:87:62:
20:64:d1:6d:92:bd:06:18:b3:76:b5:98:26:d1:39:c0:40:31:
2a:47:23:fc:87:f0:2f:3d:a0:e2:60:b4:a9:cf:c6:24:bf:83:
32:2d:93:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 23:19:43 2024 by rpki-client on console-fra.rpki-client.org