Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hbWUFMMttN0EsT3E_fFIsxjOTyE.roa
File: hbWUFMMttN0EsT3E_fFIsxjOTyE.roa (raw, json)
Hash identifier: 4gO3gRvFQ+gpa3r+Z7kwQuP1F4r36FE6g6qf1xfKyDI=
Subject key identifier: 85:B5:94:14:C3:2D:B4:DD:04:B1:3D:C4:FD:F1:48:B3:18:CE:4F:21
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019104D5C71DA8D209C4B68137354777FE71
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hbWUFMMttN0EsT3E_fFIsxjOTyE.roa
Signing time: Tue 30 Jul 2024 18:10:04 +0000
ROA not before: Tue 30 Jul 2024 18:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 30 Jul 2024 19:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:04:d5:c7:1d:a8:d2:09:c4:b6:81:37:35:47:77:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 18:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85b59414c32db4dd04b13dc4fdf148b318ce4f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:1a:1d:35:b4:81:0b:dc:69:3f:85:5d:67:
c7:51:96:ad:2d:ec:ff:26:c1:3d:b7:2e:b7:15:c5:
48:f2:12:9e:cf:2e:5f:33:25:6d:5a:b4:fb:bd:7c:
85:6b:05:82:7d:52:fc:ab:fc:db:e8:cb:83:5a:f1:
3f:34:c1:84:a7:7b:c0:85:1d:8b:b2:5e:01:f1:a7:
bc:6b:71:60:38:b5:09:1a:02:4e:51:53:4a:eb:01:
3a:81:41:ca:a1:8d:42:11:2d:05:3d:f4:67:e6:aa:
85:4b:34:31:68:15:97:ac:12:5f:5a:3e:3b:61:a0:
4f:59:a3:e1:6f:f4:2a:1d:26:3c:a6:2b:97:6c:75:
30:b8:c3:bf:05:24:8a:fc:a0:3c:7a:40:7d:04:96:
c5:13:df:4b:40:b5:6d:ce:54:7f:39:37:4a:a5:81:
4a:0b:4c:ac:b8:d0:57:48:7b:0c:59:42:80:5f:d0:
35:f8:bb:9b:cc:8a:53:a7:f4:95:f5:b4:ad:ff:7c:
d1:14:43:24:78:6d:16:ec:86:69:70:58:95:c4:e9:
86:8e:5c:e6:bb:e7:6b:ae:8e:6e:92:55:e6:b2:f8:
b7:2b:a9:6a:c5:e4:3a:70:4c:b7:69:19:15:46:de:
0a:74:ad:33:bc:38:44:ab:78:4c:0a:df:06:79:bc:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:94:14:C3:2D:B4:DD:04:B1:3D:C4:FD:F1:48:B3:18:CE:4F:21
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/hbWUFMMttN0EsT3E_fFIsxjOTyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3e:6e:c8:9a:bb:5e:05:f6:3d:61:8c:b9:c6:e0:fd:d2:53:a4:
a0:dc:6d:a5:03:39:2e:62:d0:28:b0:47:d1:fc:8d:eb:bc:15:
63:30:28:e9:e7:87:35:ef:89:6c:33:12:d9:1d:12:6a:85:a6:
84:ba:26:82:8f:ab:ce:cd:b4:af:54:dd:17:37:90:83:90:18:
a7:65:c3:76:89:27:61:38:60:15:da:74:db:2a:55:25:07:90:
61:8a:41:a2:7f:ee:f4:3c:17:9b:8e:dd:2a:1f:e2:92:d3:c9:
55:d6:84:db:0d:a3:4c:f5:39:61:c5:32:3a:37:5b:f8:04:e3:
6d:5e:c9:2d:78:f0:99:09:83:b1:f6:09:3d:8b:da:a2:d3:92:
ab:65:3c:9a:d2:60:1d:13:13:1b:dc:a3:10:de:3a:a1:a2:5f:
c1:04:1e:a2:ad:20:e1:bd:0c:03:f9:58:7d:09:dd:9a:44:a0:
9b:a9:55:5f:b7:c2:a0:4a:bf:c0:1f:dc:f9:53:85:db:30:f8:
ac:76:08:28:45:ba:9b:da:ff:5e:64:4e:7a:80:8e:60:4e:70:
07:e3:53:9f:a5:0b:2e:06:58:23:a2:0b:96:41:fc:bb:b1:f8:
1e:9a:90:7b:73:66:f7:d1:47:cf:89:c9:cb:45:c1:2b:8b:d4:
d9:b4:4f:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 30 21:42:45 2024 by rpki-client on console-ams.rpki-client.org