Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UsHGLCarDXVlAcsWLBN1kjfQHVY.roa
File: UsHGLCarDXVlAcsWLBN1kjfQHVY.roa (raw, json)
Hash identifier: Ffngl1SEbzQ/K9o7S/mbWtkXcoqG1ah8bVouoW02CBA=
Subject key identifier: 52:C1:C6:2C:26:AB:0D:75:65:01:CB:16:2C:13:75:92:37:D0:1D:56
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01928ADA4A3887E064259DED2376110EE869
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UsHGLCarDXVlAcsWLBN1kjfQHVY.roa
Signing time: Mon 14 Oct 2024 11:46:54 +0000
ROA not before: Mon 14 Oct 2024 11:46:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214168
IP address blocks: 2a0d:9440::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 16 Nov 2024 08:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:da:4a:38:87:e0:64:25:9d:ed:23:76:11:0e:e8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 14 11:46:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52c1c62c26ab0d756501cb162c13759237d01d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:d2:ce:e2:b2:13:17:98:30:32:13:7e:0a:
4b:9a:c3:a2:f0:15:c3:cf:68:14:ae:8f:9d:23:86:
1b:36:49:70:66:f7:ac:72:3c:12:8a:ef:80:f4:3d:
42:60:54:b4:68:06:b6:2e:e1:38:ee:31:1a:44:9c:
d9:01:17:53:b2:61:85:ff:32:a8:0d:1a:f5:89:c1:
3c:79:8e:fd:8e:d6:53:37:6b:61:f3:5d:a2:1d:f0:
ee:ea:67:d7:75:24:ac:43:82:61:15:21:23:a2:3a:
cd:cc:17:1e:fd:6f:eb:d8:a6:2f:5f:bd:2a:4c:5e:
69:05:a6:6d:8e:2a:e4:f8:7b:57:f8:00:bb:0b:7f:
03:65:44:a9:35:ee:7e:9c:8c:ac:08:76:79:24:26:
ab:b5:b3:fc:75:76:30:5a:b1:76:51:2b:aa:1f:e2:
5f:ff:cc:04:13:b0:29:7b:36:05:19:7e:b2:ca:b1:
b2:82:84:49:19:ef:a2:aa:74:44:fd:cd:7e:3b:1a:
57:28:22:72:25:2b:47:6c:bc:b8:2f:f2:52:c7:fa:
50:7c:1c:cc:d5:d8:5d:39:da:19:c2:9f:0e:94:6e:
82:c5:28:e4:c7:56:e2:7f:72:93:f5:82:3d:73:12:
c2:bc:b1:bf:5e:66:7d:c9:35:89:da:8a:0a:8b:4f:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:C6:2C:26:AB:0D:75:65:01:CB:16:2C:13:75:92:37:D0:1D:56
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UsHGLCarDXVlAcsWLBN1kjfQHVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9440::/29
Signature Algorithm: sha256WithRSAEncryption
7c:85:19:78:bd:a1:7f:95:a9:e4:19:05:a1:44:36:77:ba:c7:
1b:27:f9:38:fe:8c:b6:1b:86:fc:b3:f6:28:d5:55:ac:e5:27:
c8:55:d4:87:5c:86:6a:3c:d3:7b:a8:09:c2:b5:aa:80:3b:b1:
32:c6:58:9e:66:dd:f5:a9:6c:b0:97:42:94:00:cf:6f:0e:fa:
0f:97:e9:f6:e0:5c:af:e2:a2:2b:97:10:a4:05:33:b1:09:46:
a3:3c:b3:0b:d7:36:52:7f:82:4e:81:0c:34:33:a1:b5:f3:a7:
e5:8b:54:01:a4:70:9e:92:9d:b3:b0:15:75:99:6f:44:04:85:
5c:4a:19:93:86:c8:78:2e:70:b6:f8:3d:80:2b:90:cf:0e:25:
fe:0e:40:bd:13:7e:77:a4:16:10:6d:2f:57:74:94:e6:4f:18:
51:8b:90:bf:01:77:25:f7:d3:d7:a7:1b:13:b1:e6:2d:97:9b:
0d:d7:a1:b6:b9:c6:7d:96:9a:af:cd:a0:e8:d7:67:e8:84:de:
db:95:01:0e:fc:8c:3c:fb:d3:1b:2e:9f:d6:8b:37:1b:63:75:
8e:f2:b9:bf:0d:85:ef:ba:16:8d:ea:9c:84:ba:d5:1d:63:e3:
12:43:71:ca:eb:c6:74:7e:1a:0f:a3:52:d1:76:b8:3a:dc:a9:
bc:9c:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:22 2025 by rpki-client