Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/htU4IceAz9EzCqYtn7WXeTQ7Blk.roa
File: htU4IceAz9EzCqYtn7WXeTQ7Blk.roa (raw, json)
Hash identifier: M9RVP+iXXawTY4O3+jsdZwTNGaKS2a1k2DLYkdMYDhc=
Subject key identifier: 86:D5:38:21:C7:80:CF:D1:33:0A:A6:2D:9F:B5:97:79:34:3B:06:59
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018570B07C02EAA9ACA1756659006C0752FC
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/htU4IceAz9EzCqYtn7WXeTQ7Blk.roa
Signing time: Mon 02 Jan 2023 04:14:52 +0000
ROA not before: Mon 02 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 2a0e:da40:da40::/48 maxlen: 128
2a0e:da40:1::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:7c:02:ea:a9:ac:a1:75:66:59:00:6c:07:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86d53821c780cfd1330aa62d9fb59779343b0659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:9b:92:ab:f3:bc:f2:25:c1:37:32:0c:dd:
fe:08:d9:86:73:81:39:e6:d5:31:14:48:7e:1f:48:
b7:77:59:d2:89:ae:63:0a:f2:4a:2d:46:43:02:cc:
14:27:1a:af:3a:c2:db:de:37:0f:95:3f:41:e2:c5:
d9:02:2d:a7:1f:26:7f:f6:f6:b9:05:16:fa:a9:1d:
fa:0f:5d:5e:e1:ed:e0:97:bf:32:72:88:14:38:83:
d6:05:e2:4f:73:92:4f:d7:39:23:ed:bc:6e:25:bf:
5f:e3:2e:43:9d:16:80:59:4e:da:c1:4b:bb:98:ca:
45:19:fb:7b:06:b4:9d:56:2a:c8:e0:41:83:be:ac:
9e:4e:59:b4:69:5b:ed:22:9c:41:7e:95:2f:8b:76:
b1:9a:4a:d8:6b:45:5b:21:65:17:7f:41:0e:96:a0:
5c:ef:3e:c7:86:45:07:be:1a:5e:61:21:2f:fc:8c:
25:98:0b:e7:1e:1f:55:d0:d1:cc:a2:1b:e0:c1:7e:
0c:2a:41:ea:8e:f8:e4:34:3e:7d:00:d0:5d:0c:fa:
db:0c:91:fa:db:ce:08:69:14:e2:74:a8:8b:91:4a:
27:6a:98:ee:15:af:93:43:a8:f3:e9:73:fe:19:41:
b4:d6:17:29:16:f9:f6:66:eb:2f:06:fc:a3:4b:8f:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:38:21:C7:80:CF:D1:33:0A:A6:2D:9F:B5:97:79:34:3B:06:59
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/htU4IceAz9EzCqYtn7WXeTQ7Blk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:1::/48
2a0e:da40:da40::/48
Signature Algorithm: sha256WithRSAEncryption
9b:eb:0a:12:6d:a4:85:30:96:31:80:51:2e:e1:1b:c2:77:11:
5f:fe:49:8f:b0:39:a1:fe:cb:88:46:bb:bb:8a:fb:c2:0c:1c:
31:23:93:e7:48:4b:7b:4e:e4:63:12:0e:18:8b:ee:98:71:a0:
3b:75:50:92:c4:88:0d:0d:14:2d:4c:be:74:c7:f4:cc:f7:99:
30:81:8b:79:50:7e:aa:98:90:08:9f:d0:71:5e:bd:53:08:de:
1c:72:69:3d:bf:0a:5a:23:d6:e2:0b:b5:73:c0:a8:f2:92:ae:
c1:98:88:43:f9:65:a8:b3:a7:4a:3b:af:db:f8:bd:44:1f:3e:
c8:0b:f2:29:ea:ad:71:68:6b:84:7d:7c:7c:f2:ba:a2:b0:ef:
5b:27:c1:3c:d5:37:f5:2b:7b:7f:fd:2e:0e:a0:62:da:df:6c:
d6:1b:6b:cd:59:a7:67:cc:8b:ba:23:81:f6:bc:1e:d9:32:8d:
92:82:e4:ac:b1:bf:e1:c9:0a:95:e1:58:f3:5a:91:30:82:7f:
b3:9d:92:6a:13:a8:68:38:dd:5c:6b:c5:96:66:19:eb:e1:84:
04:65:38:99:cd:3d:88:04:b8:2d:c0:7c:36:ad:4e:41:2a:89:
dc:76:bd:d8:a7:61:37:93:77:05:b6:61:9f:3a:78:1f:ce:2e:
d3:26:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org