Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HMN547gm0YjH4pI1k-GGQpb9cHw.roa
File: HMN547gm0YjH4pI1k-GGQpb9cHw.roa (raw, json)
Hash identifier: xbW+rUEm9rD+wRpbXUatJwomwOMIykxi7/0fk62HSJM=
Subject key identifier: 1C:C3:79:E3:B8:26:D1:88:C7:E2:92:35:93:E1:86:42:96:FD:70:7C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018804CAF4928A3EADB4F7BDEC1833B44369
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HMN547gm0YjH4pI1k-GGQpb9cHw.roa
Signing time: Wed 10 May 2023 08:33:09 +0000
ROA not before: Wed 10 May 2023 08:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199414
IP address blocks: 2a12:bec0:2f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:ca:f4:92:8a:3e:ad:b4:f7:bd:ec:18:33:b4:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 10 08:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc379e3b826d188c7e2923593e1864296fd707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:09:5c:43:ce:e6:0b:91:3b:db:82:44:a0:
ca:72:2e:21:d0:52:eb:58:0b:39:e2:39:27:00:41:
11:bf:28:10:c1:7e:e3:6d:de:04:af:a7:c9:42:93:
1a:9a:01:4d:f4:70:19:2a:4f:1c:b2:86:e0:f3:59:
cb:2a:c6:a2:f0:3e:08:03:3e:06:51:f3:ce:a8:1c:
c8:36:a6:ae:28:b6:a3:20:0b:fa:d7:b8:9b:4e:8a:
75:36:3d:55:f1:e1:6b:33:ae:69:d2:3e:30:0f:52:
82:e1:37:07:c2:81:fd:79:59:01:97:84:b2:55:52:
76:e4:20:24:49:70:f8:94:89:1e:23:46:e0:97:be:
f4:a5:7d:8e:a1:57:98:84:a4:c0:b6:43:06:a9:8d:
88:69:e7:07:ab:cc:40:04:6b:f5:2f:4b:3f:32:b7:
72:be:44:3b:c0:d5:e7:87:91:98:7b:54:0c:32:16:
c4:82:12:28:c3:07:7f:85:24:43:f2:e4:f8:08:02:
8f:ae:f8:d3:1a:9e:ec:c1:f4:ae:7e:6e:b6:a8:19:
5c:94:58:c1:3c:c9:5e:cc:3f:87:87:ea:67:28:6c:
89:20:35:e3:7c:97:87:24:e9:70:6f:b2:f1:f1:ef:
36:bb:48:87:a8:ed:f9:6d:93:ca:68:38:44:05:78:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C3:79:E3:B8:26:D1:88:C7:E2:92:35:93:E1:86:42:96:FD:70:7C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/HMN547gm0YjH4pI1k-GGQpb9cHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
5f:72:5c:4f:ed:58:bd:e3:0f:fe:33:e8:c3:d2:68:87:ed:a1:
25:7b:50:43:4c:64:c3:ec:82:1a:e5:c0:cd:a0:ee:bf:6f:5b:
42:38:08:1f:af:ad:cb:5a:5d:3c:fa:54:66:33:86:a0:28:f2:
16:42:8b:51:94:ae:7b:40:51:41:72:d1:88:6a:1f:23:3d:77:
19:a3:dc:44:7d:2d:cb:ca:71:5f:42:66:7e:48:a7:2c:ae:e2:
31:be:95:dd:6a:86:42:90:8d:93:be:dc:d1:a5:cf:4b:c4:c2:
83:90:6b:d8:f5:c8:ca:98:0e:12:c8:90:46:51:e9:f3:19:e8:
ed:6a:0d:45:30:df:23:88:16:d1:26:bc:21:f9:7b:a3:44:d0:
80:2b:32:8a:01:99:67:e9:30:11:7e:e1:7f:4d:5c:1a:7e:4d:
72:be:2e:5a:e9:74:9a:86:d4:d1:80:02:25:5b:d0:ce:53:9a:
e5:db:2c:44:89:50:42:07:e5:f8:13:f3:23:98:ab:b2:01:9a:
c4:19:5e:7a:5b:87:fb:e4:fe:1d:73:56:6b:70:2e:c9:fb:a4:
13:04:9c:77:55:8b:1b:dd:af:3c:50:4f:5c:66:99:00:e0:1a:
44:cd:be:85:24:4d:71:9b:c6:c2:a9:ce:02:9e:44:73:b1:12:
a8:da:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org