Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hJvTrKh3fwRzHcm7pqsf8bAxyWc.roa
File: hJvTrKh3fwRzHcm7pqsf8bAxyWc.roa (raw, json)
Hash identifier: L/57SkqSao9a/y2KHPZOY9itot1i46MO+m9vT6wl5DM=
Subject key identifier: 84:9B:D3:AC:A8:77:7F:04:73:1D:C9:BB:A6:AB:1F:F1:B0:31:C9:67
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01857042973D3347C8B587C1E4EF70C4CA0F
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hJvTrKh3fwRzHcm7pqsf8bAxyWc.roa
Signing time: Mon 02 Jan 2023 02:14:50 +0000
ROA not before: Mon 02 Jan 2023 02:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 193.200.12.0/23 maxlen: 23
2a0e:9846::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 May 2023 14:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:97:3d:33:47:c8:b5:87:c1:e4:ef:70:c4:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 2 02:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849bd3aca8777f04731dc9bba6ab1ff1b031c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:47:e2:be:ab:ce:0c:f2:5d:48:2b:0a:14:
a3:bd:ce:04:1b:05:1f:f4:f8:6d:1a:bf:98:ae:29:
12:95:a8:1d:cd:5f:5d:f1:d7:ef:49:46:3f:1b:6b:
1f:6f:6f:c4:9e:2f:16:23:0f:c7:e6:1c:3b:42:16:
2f:c5:b2:33:d3:b0:04:e5:0b:0f:c6:98:aa:2e:3a:
23:89:a5:84:f7:1e:96:6e:4c:e4:a7:76:14:82:89:
aa:e3:dd:d8:b5:84:5d:6a:7b:c3:c1:9e:01:01:9f:
cd:b6:4d:93:42:c2:6e:40:f7:fe:83:c0:38:b5:74:
6a:88:75:bf:16:7e:97:7b:44:25:85:da:fc:52:7b:
57:07:9b:7f:6b:40:b4:60:8c:66:de:0a:b7:b8:46:
0d:39:ce:15:d3:41:6f:f2:b9:c4:b6:42:cc:31:c7:
af:c8:a3:af:86:05:1d:67:8a:88:a7:96:3f:18:23:
be:6c:29:4e:e7:c1:7b:91:22:05:10:60:05:50:db:
65:22:35:50:26:c3:11:c5:cf:44:3f:c8:8f:9c:9d:
2c:dd:0f:c8:bf:8a:c2:71:96:6e:48:bb:1a:5b:2b:
fb:74:ef:ac:38:86:b0:b4:7c:99:45:59:84:6c:03:
d4:8d:be:6f:ce:26:e5:02:c2:65:5e:e1:04:b8:73:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9B:D3:AC:A8:77:7F:04:73:1D:C9:BB:A6:AB:1F:F1:B0:31:C9:67
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/hJvTrKh3fwRzHcm7pqsf8bAxyWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.12.0/23
IPv6:
2a0e:9846::/32
Signature Algorithm: sha256WithRSAEncryption
6e:06:79:e4:98:02:92:d7:84:b5:7f:31:60:ba:0e:ff:c3:87:
2a:b5:41:6c:21:3d:6e:3d:58:9d:a0:cc:8f:de:80:21:79:db:
ca:c6:b4:6c:7d:11:00:44:6c:5d:35:af:55:28:d0:0d:1c:89:
cd:d2:e6:7b:20:da:60:d7:f6:f3:d1:90:6d:2d:37:d7:c0:be:
cc:49:4c:99:b5:01:7b:89:7a:a1:2d:1c:55:c2:13:73:93:f0:
9f:a3:61:81:0a:bc:51:b6:1f:41:4c:15:29:9f:39:f8:9b:cb:
e8:49:97:50:19:3e:1e:fe:a1:ae:ce:ff:cb:12:bb:4d:61:c3:
66:6c:16:6e:16:29:5b:18:94:5d:a2:d5:0e:53:e8:89:7c:17:
30:0b:e4:7c:e0:1d:c9:95:94:54:c2:6a:da:87:f0:a8:e0:8c:
23:36:b5:5a:17:b8:46:e0:25:fa:72:6e:9f:d5:ee:e3:1f:4a:
a3:6b:73:04:68:63:15:34:24:96:1a:c1:f4:39:8b:f7:a2:a4:
73:48:3e:ba:50:cd:57:56:d7:51:f0:b3:36:c7:80:95:9b:0c:
10:78:c3:0d:98:9d:7c:4b:e4:ef:f8:75:d6:4b:8b:5a:45:ad:
ac:1b:ff:7e:aa:15:a0:f5:5c:fc:6f:00:49:7f:86:fb:01:20:
31:5c:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org