Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa
File: HUH1nreA4IgKOpNmJXSpAfA7yRU.roa (raw, json)
Hash identifier: obcmH1WVixjQBSpeoq+dAgVwZmgNMldHTy7aVj0e7cs=
Subject key identifier: 1D:41:F5:9E:B7:80:E0:88:0A:3A:93:66:25:74:A9:01:F0:3B:C9:15
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0185714C1324DF07C912BC46F398651D184F
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 2a12:3e80:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 05 Feb 2023 16:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:13:24:df:07:c9:12:bc:46:f3:98:65:1d:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d41f59eb780e0880a3a93662574a901f03bc915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:28:fa:6d:11:7d:2c:ca:a4:d5:15:f5:07:
1e:81:df:b6:b6:c1:43:bb:20:85:7a:7c:78:3b:a0:
8f:0a:86:28:7b:28:69:75:9a:95:49:e6:88:4a:02:
ea:95:67:1e:d7:ad:97:dc:d2:80:5a:02:72:23:c0:
c6:43:a2:54:d0:3c:cb:41:a9:39:94:94:c4:2a:50:
98:97:66:c9:5d:2c:56:4b:e7:31:7c:5e:d5:08:16:
c2:5d:82:12:8a:e7:b5:66:58:cd:ac:54:45:32:8e:
9a:31:7f:d9:b2:65:12:12:34:f4:f7:34:30:73:94:
07:aa:65:34:2a:c6:03:22:1d:1f:92:29:2c:82:ac:
85:fc:03:89:df:18:bf:c7:fb:da:cd:5a:0b:3a:8e:
15:e1:10:3c:f2:56:1b:a7:bb:a9:d7:5f:10:6c:c1:
68:7b:59:4a:6e:6c:9c:4f:21:94:c6:b6:8d:63:3c:
1a:ee:ae:bb:56:9e:be:60:7a:b3:28:13:6b:ec:72:
e8:97:1b:ff:f6:5c:b8:9c:f2:e7:47:67:37:c4:a1:
68:8d:26:3a:3b:80:4d:06:7e:6e:92:3a:14:97:f3:
40:d6:c4:db:73:98:d0:54:59:45:ab:7a:c1:42:90:
6d:66:22:de:34:9b:e3:bb:e2:4d:1b:81:fc:f9:46:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:F5:9E:B7:80:E0:88:0A:3A:93:66:25:74:A9:01:F0:3B:C9:15
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3e80:300::/40
Signature Algorithm: sha256WithRSAEncryption
a4:76:cd:fc:3f:45:61:19:4a:54:cb:d2:69:63:0a:6f:b2:94:
f7:0a:f6:5f:e4:ec:09:c2:82:30:26:8a:0b:da:36:e3:f8:1f:
f9:ff:cf:3e:ec:15:36:61:37:7f:01:21:52:4e:3f:be:d6:f1:
e8:39:00:f7:d5:90:66:84:eb:50:24:1c:b6:9e:80:52:af:6e:
9c:de:01:4f:56:5c:d2:00:c3:50:05:a0:7a:72:59:88:7a:1a:
f7:49:18:89:31:62:db:2a:50:63:46:30:cc:8d:9a:07:03:5a:
6f:56:c5:97:a6:f6:93:b1:2c:21:11:db:45:dc:a9:ca:c3:3a:
7e:f0:55:90:e8:fb:ad:d7:b7:3b:15:3a:c8:06:f1:76:ec:e4:
56:bc:cf:f9:b7:40:d1:f7:69:58:63:2f:69:51:63:94:17:95:
aa:aa:14:4c:86:28:6b:14:fb:7b:03:64:85:aa:f6:2a:d7:cf:
85:0d:d4:2f:e2:f4:26:4c:1b:ef:04:6c:f7:34:16:f3:1f:ce:
ca:e2:08:51:64:68:a6:2a:97:7b:9a:7d:9f:55:a2:37:6d:41:
c7:03:9b:ba:cc:2e:98:f3:59:98:6f:1c:1e:1a:35:c6:4e:ff:
35:25:ee:b9:ff:84:a3:b8:f3:f9:f6:60:68:75:50:84:af:43:
98:20:8b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org