Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/hXpwUnVHs1cAWjyw63W5oJ_yEZ8.roa
File: hXpwUnVHs1cAWjyw63W5oJ_yEZ8.roa (raw, json)
Hash identifier: 5/3kb2MX10Et7opT4wqw4CfnnS/PtFfBFnnnU/0GPyk=
Subject key identifier: 85:7A:70:52:75:47:B3:57:00:5A:3C:B0:EB:75:B9:A0:9F:F2:11:9F
Certificate issuer: /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial: 018607DBA13DF35665D972D5652C62E32A18
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/hXpwUnVHs1cAWjyw63W5oJ_yEZ8.roa
Signing time: Tue 31 Jan 2023 12:44:39 +0000
ROA not before: Tue 31 Jan 2023 12:44:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4202196
IP address blocks: 2a01:5041:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Feb 2023 05:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:db:a1:3d:f3:56:65:d9:72:d5:65:2c:62:e3:2a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Validity
Not Before: Jan 31 12:44:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=857a70527547b357005a3cb0eb75b9a09ff2119f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:f4:e9:28:c3:ea:b4:5b:db:b5:d1:39:8f:
73:ac:8d:60:50:68:51:b9:bb:a0:a7:50:4c:c1:8d:
3a:fc:01:78:05:d7:94:fa:34:bf:f4:09:41:db:62:
76:e4:9a:da:d8:66:24:3d:81:50:dd:7a:8b:af:17:
eb:00:c7:30:1d:03:67:ad:a5:0a:17:15:d1:35:a6:
49:af:58:fd:cf:b1:6b:ae:02:0c:f1:9a:ac:1d:26:
85:aa:b6:86:70:fb:10:20:ed:0f:16:50:cd:3f:8f:
cf:2c:7d:37:57:9b:31:c1:9e:bf:51:ad:79:d2:82:
44:4e:b0:2a:a5:c4:f6:76:90:b1:8b:64:8e:cd:8c:
07:db:ea:ab:67:b5:17:cb:88:6f:c3:19:4d:83:21:
8d:56:b8:cc:2a:09:d5:3c:26:42:46:9c:0b:a4:69:
8f:d5:4c:3d:3e:2a:c1:b2:da:e0:6a:56:a8:73:f5:
36:e3:2b:89:8d:7c:80:a8:76:ac:49:6f:0d:4c:99:
1c:85:1b:01:ed:51:03:86:35:5c:6d:83:f9:5b:88:
61:4b:3b:71:89:3e:96:5e:86:24:27:b5:2a:46:ec:
31:19:15:b0:fe:ae:be:a9:25:df:c1:16:9b:3a:fb:
a1:87:6d:2b:a8:13:28:92:c5:47:5c:c0:c9:b7:07:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:70:52:75:47:B3:57:00:5A:3C:B0:EB:75:B9:A0:9F:F2:11:9F
X509v3 Authority Key Identifier:
keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/hXpwUnVHs1cAWjyw63W5oJ_yEZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5041:2::/48
Signature Algorithm: sha256WithRSAEncryption
95:e5:53:b9:7a:1c:98:6b:2b:a4:02:cc:9e:49:a0:ae:57:b7:
58:86:69:17:13:a3:12:71:20:53:1f:54:65:ef:c2:3c:1c:31:
4d:6a:f8:41:e1:70:f4:71:13:47:ae:9b:b1:30:cf:61:c1:a3:
e6:e2:6f:55:8e:eb:94:34:a3:00:fe:bb:d2:d0:f9:36:6f:b1:
ea:27:42:5d:d8:fc:88:31:fd:c1:63:13:c5:01:15:01:84:ab:
10:6f:86:0d:7e:d0:52:5b:81:a7:32:57:0e:80:52:8e:41:51:
82:75:53:b1:f9:3f:7c:69:8d:05:4d:ed:79:0b:33:1f:cb:b4:
0d:51:0a:92:43:d7:13:b0:24:2a:ed:2c:62:26:48:ba:43:5e:
de:5c:60:f2:f1:64:20:c8:1d:2d:8b:9e:33:b5:c9:2a:08:60:
48:fe:74:eb:58:7f:73:63:34:3a:53:17:d1:ac:fa:32:56:8f:
55:51:ec:7c:e2:b6:e6:a9:3f:10:1f:45:9e:d2:03:bf:fb:bf:
a9:72:5a:b6:2b:de:03:a8:b2:b0:f6:cc:c5:91:53:1f:4f:fd:
a6:91:d2:e3:e9:40:64:14:56:aa:9d:31:be:88:5f:64:20:5c:
cf:c0:f5:51:2e:66:92:68:f5:d0:d2:ae:43:4c:7e:21:f0:f3:
e9:aa:29:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:30 2024 by rpki-client on console-ams.rpki-client.org