Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/HizEFqJPg1eoVc1Li7ySuM_4Id4.roa
File: HizEFqJPg1eoVc1Li7ySuM_4Id4.roa (raw, json)
Hash identifier: /2BCTreyuwj3WwlknRfPOdSe90lcsWBh+1emDPQ+Hkc=
Subject key identifier: 1E:2C:C4:16:A2:4F:83:57:A8:55:CD:4B:8B:BC:92:B8:CF:F8:21:DE
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 01856F023029501851118B13D62B45BEA299
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/HizEFqJPg1eoVc1Li7ySuM_4Id4.roa
Signing time: Sun 01 Jan 2023 20:24:52 +0000
ROA not before: Sun 01 Jan 2023 20:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196939
IP address blocks: 2a01:4a60:ffbf::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:30:29:50:18:51:11:8b:13:d6:2b:45:be:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jan 1 20:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e2cc416a24f8357a855cd4b8bbc92b8cff821de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:a8:41:6b:2f:fe:21:8f:58:98:0e:b9:68:
48:fd:72:22:17:22:65:f6:c9:7a:0a:d0:22:f9:9c:
2c:c0:5e:4c:65:21:d6:18:f8:8a:72:05:47:2f:0e:
03:61:c2:a1:6b:fd:78:b3:81:0d:99:d7:b4:d8:41:
91:a7:54:b8:9a:20:e5:9e:c1:92:f2:6d:de:d1:b7:
92:d0:bf:35:7e:d0:6b:c9:13:0d:fd:e4:52:43:b6:
d6:0b:ff:16:84:59:41:a2:bf:39:c9:2f:16:8b:07:
30:60:76:38:5b:b5:12:a9:17:1d:eb:ef:47:d5:a2:
25:db:30:73:a9:5f:f0:45:e6:4a:36:ec:3b:fc:73:
8c:9a:08:58:f1:c6:e9:43:35:f4:e7:61:46:f1:41:
0e:9c:f0:8d:40:a0:3d:80:b6:a9:de:84:db:db:41:
64:e6:70:19:d6:6f:4d:12:54:74:49:84:d4:17:a4:
0f:63:a7:cb:7c:13:e0:71:fe:83:1b:75:bc:88:67:
9e:93:ee:f5:6b:c9:15:ea:f5:8e:3b:b3:f4:97:a7:
22:49:47:6d:ed:76:cc:da:c5:fc:f3:16:04:36:c6:
39:42:53:94:8a:47:1d:9a:b6:a2:dc:5f:b0:28:c7:
ee:54:1e:12:a5:a7:31:cb:fa:02:97:ac:2b:83:cf:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:C4:16:A2:4F:83:57:A8:55:CD:4B:8B:BC:92:B8:CF:F8:21:DE
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/HizEFqJPg1eoVc1Li7ySuM_4Id4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4a60:ffbf::/48
Signature Algorithm: sha256WithRSAEncryption
87:4c:25:11:49:66:ae:07:c3:3d:83:b1:b6:44:a8:28:23:8f:
a9:65:a7:e3:ac:8e:a2:ce:67:44:b7:3c:88:5a:ec:9c:3a:de:
99:96:34:26:28:65:e3:11:40:5e:9e:37:44:5c:09:6f:4e:37:
48:e3:cb:59:bb:21:e8:4b:f3:9d:95:77:9f:e2:4e:cd:c6:19:
d9:1d:d4:bf:1f:47:d0:28:93:b8:c6:59:d3:42:4f:ba:92:1e:
5d:46:8a:3c:3f:54:33:c1:1e:43:6f:9a:18:f7:95:fe:2d:d8:
5a:5f:8b:d1:bb:93:fa:cf:4d:e6:a3:2e:a2:ef:fe:ef:9c:a3:
da:78:54:bc:05:65:46:40:4b:23:c9:a2:e4:8c:8f:fc:e9:d6:
5e:35:a4:cc:b8:28:62:dd:82:31:86:d0:1c:bb:cb:7e:59:9c:
50:b4:18:29:17:05:93:bf:f5:8d:91:f5:de:52:7a:14:18:95:
d3:14:ee:29:6c:ac:07:76:de:29:bf:37:42:ae:b2:45:f4:10:
10:fa:bc:8b:7a:16:1f:92:01:34:9f:a4:37:a7:0f:b4:de:44:
12:f9:aa:3f:29:0b:5b:dc:ba:df:ad:73:4a:72:6e:11:28:ad:
95:6b:84:b4:90:77:72:e2:5c:93:f9:19:ce:91:26:81:ac:11:
61:ba:97:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:34 2024 by rpki-client on console-ams.rpki-client.org