Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Hh5Cziu91BUHZHpGGenmnU1Aca4.roa
File: Hh5Cziu91BUHZHpGGenmnU1Aca4.roa (raw, json)
Hash identifier: JanGjYlLmWwTfvcfg1gDYTPozdkCy6Xl03RmS1QSRGc=
Subject key identifier: 1E:1E:42:CE:2B:BD:D4:15:07:64:7A:46:19:E9:E6:9D:4D:40:71:AE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0185707993E01ED9698DB9420D2DE056CA68
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Hh5Cziu91BUHZHpGGenmnU1Aca4.roa
Signing time: Mon 02 Jan 2023 03:14:53 +0000
ROA not before: Mon 02 Jan 2023 03:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205421
IP address blocks: 2a12:bec0:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:93:e0:1e:d9:69:8d:b9:42:0d:2d:e0:56:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 2 03:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1e42ce2bbdd41507647a4619e9e69d4d4071ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:66:13:77:c0:06:9d:3b:9e:0a:6f:19:e2:
b3:2c:e1:28:aa:15:b8:08:dd:49:0b:05:ea:33:29:
10:e8:0a:7c:a3:df:4a:19:1b:44:e8:5f:b5:e8:c4:
33:f2:32:af:c9:17:91:42:e2:cf:e2:2c:90:48:1c:
fc:a1:d9:80:32:81:bf:ea:4f:62:12:7e:14:7a:72:
78:bc:38:b9:2a:5b:90:6c:82:95:00:3a:81:2a:30:
6a:f6:80:32:9d:16:19:80:d8:9d:24:b2:22:2b:92:
84:8a:2c:42:0e:ab:79:f8:00:4f:b3:61:a8:47:af:
84:be:f7:33:fa:2a:38:ff:61:3b:7b:6f:82:de:b6:
50:90:7b:2c:3d:fa:a4:69:36:0d:8d:fd:05:e9:90:
ed:3a:9b:a2:ea:0f:4b:15:b8:c0:7c:4b:cd:0c:41:
48:fc:81:8b:a8:ac:d7:a0:b7:ea:a4:3a:21:7a:aa:
4d:4d:98:ee:13:c9:b2:77:8e:c1:0d:5a:cc:8d:74:
23:ee:a2:b7:14:1b:46:1e:6c:af:af:93:2e:6b:78:
21:6b:f8:8f:a1:35:05:2c:30:81:0b:4e:cc:d9:d4:
1b:97:55:82:19:d0:aa:33:22:a9:92:e8:32:c9:a3:
48:d8:b2:66:03:87:15:cd:f2:cb:79:2a:c8:c5:8d:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:42:CE:2B:BD:D4:15:07:64:7A:46:19:E9:E6:9D:4D:40:71:AE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Hh5Cziu91BUHZHpGGenmnU1Aca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:20::/48
Signature Algorithm: sha256WithRSAEncryption
94:d9:7b:0f:3d:64:db:ad:4f:e5:47:e8:49:d3:ce:cf:c9:7d:
ba:e9:63:0d:75:08:05:90:a9:ed:3c:df:0b:32:bb:45:b5:3f:
3e:22:7d:9e:bc:10:b8:9c:4b:91:28:bf:5a:06:23:63:53:c7:
f2:94:e2:31:ff:d1:6d:f6:47:1c:98:d7:df:39:d8:99:39:6c:
7c:f3:ae:e3:90:db:bd:f8:7d:f1:6f:b3:aa:4e:4a:31:a1:c8:
22:c5:c6:fd:d1:81:65:75:f6:06:75:20:13:51:34:2b:b9:ea:
f8:8b:18:c2:32:b7:dc:dd:8b:6d:31:07:b2:85:39:ef:ad:4a:
af:51:bf:17:fd:a5:46:9e:a5:5b:37:2b:f5:d2:30:ec:ec:38:
c2:66:ed:c4:c2:ab:97:28:9b:8b:bd:db:e6:0b:72:ed:9a:ad:
1f:0c:76:b2:e3:90:bb:88:ef:0e:2a:ad:d4:65:9c:48:9e:72:
71:03:bb:8c:a8:94:74:52:6c:ba:70:e5:a8:8b:45:30:47:ad:
c0:dc:85:55:de:c6:c7:bb:09:02:69:1a:97:d4:b1:06:d3:17:
70:25:6d:b7:5c:48:b3:4a:e5:a0:d3:d6:c4:f8:ba:7e:8a:1a:
30:13:fe:d3:f7:e8:fe:16:0d:5b:22:c4:85:cb:5e:0c:a6:ef:
64:a6:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org