Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/hhWvGM34VV7YFQdZgNDMmVFD13s.roa
File: hhWvGM34VV7YFQdZgNDMmVFD13s.roa (raw, json)
Hash identifier: YyrdCRsWDWXQq+FovgVcdMwY/ueUQ2gaoXuJMNfOnY8=
Subject key identifier: 86:15:AF:18:CD:F8:55:5E:D8:15:07:59:80:D0:CC:99:51:43:D7:7B
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 018A4FE8FFF15FB8F254A1FBDCCC412FADF4
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/hhWvGM34VV7YFQdZgNDMmVFD13s.roa
Signing time: Fri 01 Sep 2023 08:43:04 +0000
ROA not before: Fri 01 Sep 2023 08:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:20c7:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:e8:ff:f1:5f:b8:f2:54:a1:fb:dc:cc:41:2f:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Sep 1 08:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8615af18cdf8555ed815075980d0cc995143d77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:3e:98:3f:31:ef:9c:94:b9:72:45:09:3b:
ee:98:d5:e8:68:b1:f2:3c:26:ad:00:a8:11:8c:44:
dc:51:b0:a2:5f:da:71:8c:a0:6f:03:43:8c:8d:44:
58:8c:3a:66:ec:ca:da:df:b5:d8:be:a7:54:f2:3f:
6b:bc:1b:71:a4:9f:2b:71:4a:b0:82:7b:36:5a:16:
73:ef:72:47:b1:d6:f0:9d:a5:ea:b6:73:13:e9:a2:
81:1c:56:c3:82:a9:f5:87:b3:8c:4d:96:c1:2c:6f:
0d:1b:6a:a9:f3:40:41:f5:25:f0:64:af:64:4c:db:
56:a2:78:7f:00:9b:d2:ae:48:b9:f4:e6:21:c8:22:
72:cb:91:89:2a:e6:e8:02:05:a0:db:57:56:30:ec:
43:83:ae:66:6c:b8:22:83:20:6c:25:9b:da:ba:40:
1e:3b:73:56:a3:3b:08:81:40:14:cf:5a:db:d2:25:
ab:2d:c1:63:8f:5b:37:84:4a:81:7f:ae:21:27:f9:
e3:f2:5a:5c:a2:a7:f7:db:91:77:99:f7:31:45:07:
f2:fc:bb:05:3a:3c:ce:ab:37:dc:bd:81:87:5e:78:
68:10:70:97:87:c8:5c:32:35:09:7f:e2:ce:9f:33:
1b:b8:3e:ec:6c:de:aa:9b:da:77:93:4c:7b:3d:99:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:AF:18:CD:F8:55:5E:D8:15:07:59:80:D0:CC:99:51:43:D7:7B
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/hhWvGM34VV7YFQdZgNDMmVFD13s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:20c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:16:5a:4d:a2:da:99:0a:ec:02:19:08:94:fa:b6:a4:17:6a:
44:cc:c7:a7:13:1e:42:17:92:38:be:7a:cd:e7:07:8e:13:a5:
76:6e:4d:fa:44:d7:05:68:1e:26:3f:3b:1b:67:07:45:82:6c:
78:af:ce:48:4a:eb:4b:26:3f:d8:b0:1c:92:45:41:34:9b:75:
1c:05:6f:9e:4c:74:06:31:e3:ec:29:d0:6b:f6:2f:09:a5:b9:
a6:39:48:9a:7c:71:c2:ec:b8:08:b5:9d:66:8a:9f:42:f4:52:
1f:40:a2:b7:cc:32:5f:94:17:a9:b0:2e:c3:b0:45:c0:8b:4e:
84:b3:bf:02:aa:3c:3d:12:38:79:59:d0:ff:1e:38:11:47:4d:
7b:6f:4d:fe:2f:cd:60:c3:30:bc:28:0e:12:d4:2e:fd:42:b6:
4c:2d:79:7d:47:57:74:24:6e:05:94:d1:7f:46:8a:48:2e:8a:
4f:6f:4c:d1:72:28:2d:19:63:ca:e6:3d:bf:be:62:8d:82:50:
9c:e2:35:7d:c3:9b:f7:82:9c:7f:63:7d:a0:c2:2b:90:8f:09:
e2:ff:7e:e5:1a:cf:57:14:ac:ae:89:df:f1:36:03:bf:57:02:
37:a5:17:5f:98:33:ff:4e:21:44:25:c3:62:73:f1:73:76:d0:
7f:b1:3e:55
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYpP6P/xX7jyVKH73MxBL630MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjMwOTAxMDg0MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjE1YWYxOGNkZjg1NTVlZDgxNTA3NTk4MGQwY2M5OTUxNDNkNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qk+mD8x75yUuXJFCTvumNXoaLHy
PCatAKgRjETcUbCiX9pxjKBvA0OMjURYjDpm7Mra37XYvqdU8j9rvBtxpJ8rcUqw
gns2WhZz73JHsdbwnaXqtnMT6aKBHFbDgqn1h7OMTZbBLG8NG2qp80BB9SXwZK9k
TNtWonh/AJvSrki59OYhyCJyy5GJKuboAgWg21dWMOxDg65mbLgigyBsJZvaukAe
O3NWozsIgUAUz1rb0iWrLcFjj1s3hEqBf64hJ/nj8lpcoqf325F3mfcxRQfy/LsF
OjzOqzfcvYGHXnhoEHCXh8hcMjUJf+LOnzMbuD7sbN6qm9p3k0x7PZk5qQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIYVrxjN+FVe2BUHWYDQzJlRQ9d7MB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvaGhXdkdNMzRWVjdZRlFkWmdORE1tVkZEMTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAgx/8w
DQYJKoZIhvcNAQELBQADggEBABwWWk2i2pkK7AIZCJT6tqQXakTMx6cTHkIXkji+
es3nB44TpXZuTfpE1wVoHiY/OxtnB0WCbHivzkhK60smP9iwHJJFQTSbdRwFb55M
dAYx4+wp0Gv2LwmluaY5SJp8ccLsuAi1nWaKn0L0Uh9AorfMMl+UF6mwLsOwRcCL
ToSzvwKqPD0SOHlZ0P8eOBFHTXtvTf4vzWDDMLwoDhLULv1CtkwteX1HV3QkbgWU
0X9Gikguik9vTNFyKC0ZY8rmPb++Yo2CUJziNX3Dm/eCnH9jfaDCK5CPCeL/fuUa
z1cUrK6J3/E2A79XAjelF1+YM/9OIUQlw2Jz8XN20H+xPlU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org