Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hjO5dMFYrq1M1XtIsXq8XiM9IB8.roa
File: hjO5dMFYrq1M1XtIsXq8XiM9IB8.roa (raw, json)
Hash identifier: 7C7eCccL7r+mgPq83As+eiVKSUgWcbpmh7WGd4Z2qjo=
Subject key identifier: 86:33:B9:74:C1:58:AE:AD:4C:D5:7B:48:B1:7A:BC:5E:23:3D:20:1F
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0A9980E81FE70EBA7382E6D95D60B8
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hjO5dMFYrq1M1XtIsXq8XiM9IB8.roa
Signing time: Sun 01 Jan 2023 11:14:49 +0000
ROA not before: Sun 01 Jan 2023 11:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1967
IP address blocks: 2001:a98:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:99:80:e8:1f:e7:0e:ba:73:82:e6:d9:5d:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8633b974c158aead4cd57b48b17abc5e233d201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:37:49:8d:e9:a4:3b:39:59:d7:00:d8:cb:
ed:60:0b:e3:b2:3b:41:ea:87:e2:d2:d7:87:ec:60:
29:8c:6c:ab:b4:45:d7:50:83:0d:60:de:c8:92:fb:
ee:66:45:11:b3:5c:20:b8:dd:e9:9d:7a:e3:b1:4f:
c4:ec:6e:87:40:9e:44:c6:45:cc:9a:68:f6:ac:35:
88:6f:0e:8d:33:31:64:43:35:7e:25:3a:e5:54:83:
32:e5:f9:e4:17:0e:9d:5d:d1:17:ce:61:08:fc:b3:
17:8e:d6:b6:65:ff:2d:ae:6c:08:62:a5:b3:35:51:
93:6d:2f:56:eb:16:45:a9:ab:0b:f0:41:8a:3b:92:
2f:10:44:90:5d:c4:0c:a1:1c:82:87:24:39:d0:12:
49:bf:1c:1c:87:7e:e8:1f:26:d9:47:1a:a7:e6:77:
70:2a:61:80:cf:0a:83:cc:00:e2:6b:59:bb:aa:bf:
be:a4:7e:85:ec:5d:05:3c:31:00:8f:68:26:c3:ed:
4d:8c:3e:52:3e:c5:f7:60:55:be:69:53:8c:50:d1:
60:7b:d9:dc:b9:01:96:ad:06:14:a9:52:97:45:12:
74:f0:34:d4:7d:b3:72:73:26:19:f1:51:77:73:7e:
fb:e7:33:80:1e:dc:7e:dd:c9:39:ab:d9:da:09:ac:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:33:B9:74:C1:58:AE:AD:4C:D5:7B:48:B1:7A:BC:5E:23:3D:20:1F
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hjO5dMFYrq1M1XtIsXq8XiM9IB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a98:30::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d6:8f:7a:bf:ea:5e:28:38:15:56:e5:78:8c:52:a2:2b:c6:
ce:67:ce:97:47:40:26:fa:64:32:d7:78:e3:3a:8f:e3:1e:c8:
48:15:ae:da:b6:78:03:f9:40:b0:3f:3e:f7:84:c6:53:3a:3a:
c2:59:e5:4d:18:0e:c0:de:44:60:57:88:76:2e:0e:7a:a1:b8:
d4:17:19:fc:40:9e:26:93:24:39:64:46:8d:0f:8f:1b:18:ec:
39:53:92:b8:e2:c9:ab:39:21:df:95:70:cf:f5:13:6b:99:b2:
fb:c8:75:43:aa:ed:85:ef:0e:91:68:f0:72:76:0c:f4:85:81:
8c:e2:8e:28:33:f7:26:b4:00:55:cb:e3:9b:51:63:8e:ef:c9:
8e:92:54:7d:42:01:4a:97:c2:cb:ce:ea:ec:c4:6d:70:9b:c0:
78:7b:f1:78:0b:8c:50:30:04:d8:af:40:4e:a0:78:97:0c:93:
de:b1:27:a8:5b:c4:1e:c8:6b:7a:94:51:80:75:b9:69:0b:8b:
18:47:dc:81:e6:e7:9b:00:8d:06:92:ad:47:87:81:fa:a0:48:
2c:50:23:65:a6:36:b9:e3:4e:df:3e:5d:c7:6a:76:85:00:28:
9c:b5:e5:9a:32:97:51:bb:d8:aa:bc:c5:98:d7:c6:84:6f:15:
ec:4b:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org