Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/HQEYETl37oCHUN3DYs2t9qvMy3E.roa
File: HQEYETl37oCHUN3DYs2t9qvMy3E.roa (raw, json)
Hash identifier: U0zGQG6QAlB9Xbc3/HiiD6x0hZVwRIzBy0E9A692qLs=
Subject key identifier: 1D:01:18:11:39:77:EE:80:87:50:DD:C3:62:CD:AD:F6:AB:CC:CB:71
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0185ACAA6C29295DF9ABACA5B08A801FA8E5
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/HQEYETl37oCHUN3DYs2t9qvMy3E.roa
Signing time: Fri 13 Jan 2023 19:45:28 +0000
ROA not before: Fri 13 Jan 2023 19:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 2a13:6fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:aa:6c:29:29:5d:f9:ab:ac:a5:b0:8a:80:1f:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jan 13 19:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d0118113977ee808750ddc362cdadf6abcccb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:34:89:d2:27:d9:26:b5:54:50:85:15:7f:
ea:4a:cd:41:7f:24:63:4b:3a:68:aa:4f:de:c5:f9:
81:f5:6a:70:91:d7:99:71:ad:33:d6:53:1a:94:62:
a8:df:b0:ca:77:94:db:8a:8c:80:78:f1:a7:67:0e:
5a:24:4d:ac:05:9d:70:2e:01:79:2e:f6:e4:b8:0b:
95:d0:64:5a:1d:78:42:42:77:80:c0:9e:c6:e6:8b:
5b:79:6b:79:b4:d2:23:1f:ae:dd:d0:1e:a3:6d:b8:
bf:fe:6b:82:c4:cc:9b:08:26:d2:ac:31:33:21:ed:
99:46:93:fc:3b:d6:33:06:ef:ab:15:d1:c3:e9:6e:
35:d6:ff:a2:3a:fb:47:3e:4e:37:56:fe:09:9a:5d:
fc:25:ed:41:64:73:b6:1f:0b:fc:90:f1:ca:64:37:
13:e9:eb:5a:f0:54:87:2b:66:37:0f:d0:e7:10:3f:
c4:d0:e8:ba:ed:42:33:4a:68:10:9e:05:5b:f2:6e:
46:72:bf:ba:e6:4c:a7:55:e4:a3:79:c7:ef:12:ea:
54:08:44:ce:00:62:c7:25:30:14:10:b0:af:5c:31:
ca:f7:60:36:0a:52:df:07:a1:4d:2f:6d:ac:7b:b7:
06:7b:2e:6f:be:92:99:5e:93:a2:9e:c9:99:13:b9:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:18:11:39:77:EE:80:87:50:DD:C3:62:CD:AD:F6:AB:CC:CB:71
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/HQEYETl37oCHUN3DYs2t9qvMy3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6fc0::/29
Signature Algorithm: sha256WithRSAEncryption
64:6a:34:e2:a5:67:ac:01:b4:fb:f9:8a:6e:b8:37:d3:8e:56:
b1:77:19:49:a4:7c:4f:d4:e3:9c:4e:f9:a2:e0:09:25:06:a5:
03:72:b3:9c:e8:df:cc:f8:a4:7f:74:8f:d1:fe:62:9d:57:2b:
c7:78:9a:ef:e3:72:85:c0:87:09:9a:f4:d5:7b:30:c8:5d:20:
36:65:9f:af:af:a2:c8:ba:de:ff:43:8e:23:de:35:50:96:a3:
54:25:11:7d:bd:f7:01:e1:fa:3b:f1:f6:d8:21:a4:22:d9:2f:
5e:3b:aa:d7:6f:aa:21:8f:c7:44:10:a2:8a:01:e8:c2:21:3e:
14:69:a5:0e:97:e1:ed:b2:a3:3e:a2:24:83:3d:24:21:4e:7f:
ae:1d:73:eb:2f:4b:0e:9e:f6:6a:5c:56:8e:8d:aa:ed:86:5b:
6b:67:f9:46:bc:29:27:47:f4:82:9f:3d:e8:9c:76:c5:d2:93:
29:ae:6e:b4:a1:16:2c:04:e2:37:55:21:eb:60:29:2b:0c:27:
ab:02:69:3b:22:30:5b:61:b0:a9:ee:5a:cc:72:9e:d2:c2:a8:
7e:3b:f5:f2:b5:a0:21:75:c7:17:8c:e8:dd:8a:69:04:2e:71:
fb:db:e3:6a:25:e3:8e:17:25:7a:84:92:00:05:fd:b1:88:98:
0d:ff:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org