Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/hWEC7THGyRG5uVvf8hJ4exML0nQ.roa
File: hWEC7THGyRG5uVvf8hJ4exML0nQ.roa (raw, json)
Hash identifier: cAE2gCxDvsuVI48OCarfj0LYEG4Iw23T1//XKR7gzOI=
Subject key identifier: 85:61:02:ED:31:C6:C9:11:B9:B9:5B:DF:F2:12:78:7B:13:0B:D2:74
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 01857182FC288D2E2422B9B24859B0E17E13
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/hWEC7THGyRG5uVvf8hJ4exML0nQ.roa
Signing time: Mon 02 Jan 2023 08:04:47 +0000
ROA not before: Mon 02 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48047
IP address blocks: 2a02:2978:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:fc:28:8d:2e:24:22:b9:b2:48:59:b0:e1:7e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=856102ed31c6c911b9b95bdff212787b130bd274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:f9:f4:f7:e5:1c:f8:8a:3a:3e:25:b6:42:
a9:b5:61:c8:e9:fb:c7:af:69:6a:c8:df:27:4d:0e:
2f:62:51:03:83:44:59:30:a0:eb:6d:18:4a:04:ae:
28:34:2a:cb:86:18:f3:f6:4c:5f:30:dc:9f:14:4e:
fc:10:ac:39:e6:7b:1f:54:0e:2a:a1:87:6a:d8:2c:
e4:a3:95:77:b7:65:3f:ac:58:55:7b:31:a9:05:63:
2c:18:4c:d2:c0:75:54:25:0b:cd:a7:6a:d5:51:37:
0a:96:6a:b9:0d:d0:3a:d9:96:a7:55:a0:7d:5f:ab:
db:6f:49:7b:4a:eb:dc:46:88:ef:56:fe:2a:95:7e:
e4:77:75:97:c8:3e:1f:1c:5e:10:1d:db:49:3a:20:
13:8d:f2:0a:93:69:32:2c:47:2b:5e:6f:1a:e8:18:
3d:5c:fa:82:35:c4:33:0f:e7:57:22:10:f1:b3:8b:
7e:03:81:ea:1e:18:0c:fe:b4:cf:33:6f:a4:88:44:
99:c9:87:1e:37:ef:cb:dd:e4:4e:51:f7:15:2c:f8:
ef:01:cd:37:3f:69:9a:c3:70:27:80:37:22:df:8a:
17:3e:c7:f5:25:c8:03:80:27:99:79:4a:4c:d4:51:
a7:02:32:95:69:4d:35:b3:ac:ae:95:37:28:ee:19:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:02:ED:31:C6:C9:11:B9:B9:5B:DF:F2:12:78:7B:13:0B:D2:74
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/hWEC7THGyRG5uVvf8hJ4exML0nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2978:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
4d:db:15:d5:7b:88:8a:e0:6d:8d:c4:d9:0c:ac:b7:19:0f:90:
33:20:d5:67:2d:a0:1c:d8:59:af:b7:61:7e:cf:2d:48:97:65:
d6:e3:7f:62:f2:13:c5:9e:a9:9c:d8:99:e2:f1:3b:ca:2b:13:
44:0d:b6:99:25:2f:1d:39:7c:c9:8f:62:59:8c:c4:97:86:86:
d9:a1:7a:c1:50:4e:09:98:e9:f2:93:7a:ca:61:38:ad:2c:f7:
ef:41:a5:b1:6e:69:be:d5:29:82:c1:84:f5:99:7d:d9:39:c3:
38:e3:4e:1b:2e:75:9a:51:ea:ca:b6:29:61:dd:39:77:91:dc:
8c:8f:3b:cd:ec:de:93:4d:dc:b4:f3:cd:5a:35:a9:05:65:65:
ba:10:e2:c8:d5:f2:72:f1:0c:5c:e6:be:f5:1a:63:33:0f:0e:
93:de:d8:63:24:80:35:5d:85:92:c5:25:fc:31:12:49:87:16:
4a:70:81:69:ca:3c:52:8f:ec:49:0b:37:44:d6:90:7c:9f:7f:
1c:a5:40:8c:4b:1e:17:66:4e:d0:bd:9b:dc:62:f0:08:1d:f7:
36:c7:63:e1:33:31:0c:c1:d3:06:2c:9a:5e:91:c9:9d:a5:6d:
ba:24:25:82:5a:fd:75:da:8e:9f:f8:6b:5c:e1:b7:cc:2f:d6:
ea:e1:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org