Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/hXz3N-HcFzx_r8sPcLa79Zi9LBg.roa
File: hXz3N-HcFzx_r8sPcLa79Zi9LBg.roa (raw, json)
Hash identifier: 5kdlWmikZvarEs8JfKeBh7jYbbb/KbDhkhHStto6DcY=
Subject key identifier: 85:7C:F7:37:E1:DC:17:3C:7F:AF:CB:0F:70:B6:BB:F5:98:BD:2C:18
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BA0DD17FCDED684F22076B92454F
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/hXz3N-HcFzx_r8sPcLa79Zi9LBg.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 2a0e:eb00:1::/48 maxlen: 48
2a0b:1784::/30 maxlen: 30
2a0b:1780::/30 maxlen: 30
2a0e:eb00::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ba:0d:d1:7f:cd:ed:68:4f:22:07:6b:92:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=857cf737e1dc173c7fafcb0f70b6bbf598bd2c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:23:7f:24:83:72:7a:86:43:3b:8d:bc:a9:
a0:f4:e1:80:45:62:50:0b:cd:c9:26:cf:3a:a1:28:
eb:86:92:eb:2a:eb:d8:22:5a:ad:31:5e:1b:b9:a3:
d3:1e:e3:24:07:6f:e1:b3:c0:34:c4:04:a2:9a:a0:
88:c9:a2:ad:8c:fe:3b:8c:90:a1:73:33:f2:3d:17:
10:fa:3e:b4:1c:ea:12:5a:3a:fc:80:ca:28:d9:88:
dc:61:e7:9c:6d:f7:a4:40:30:de:12:7f:a6:86:75:
b6:1d:ac:37:cc:e4:f9:43:5c:68:9f:2d:4b:ae:58:
ec:2c:d8:ab:09:0a:7e:cc:15:83:7e:f9:fa:68:f2:
76:b7:ec:5e:df:99:d4:69:f5:2d:f2:c0:c5:09:5c:
de:6d:c1:39:1c:65:08:8f:c8:8d:bb:aa:13:db:89:
7a:4c:4e:4e:00:b1:52:3c:8b:cc:28:7d:fc:6d:f9:
93:4d:40:a6:b4:b2:1f:e8:e9:9b:39:77:3f:92:22:
fe:d4:8a:86:d3:ec:3d:e9:19:ba:2c:bd:15:3a:28:
4c:90:ca:a2:7d:dd:4d:ce:62:69:f3:8f:13:10:44:
c1:ba:2d:9f:8b:42:7f:5d:4e:bf:9e:e6:f7:c8:34:
13:8b:85:45:3a:af:66:08:b7:b9:ab:6f:bc:fe:77:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:F7:37:E1:DC:17:3C:7F:AF:CB:0F:70:B6:BB:F5:98:BD:2C:18
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/hXz3N-HcFzx_r8sPcLa79Zi9LBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1780::/29
2a0e:eb00::/47
Signature Algorithm: sha256WithRSAEncryption
9c:17:51:c2:f1:f9:da:2e:f3:77:70:7b:5d:16:e4:36:cb:82:
d1:4c:81:35:e3:b2:c5:bf:a3:14:7a:b7:c7:a8:82:55:7b:c7:
85:12:69:87:38:e9:d0:a3:c3:31:2a:6b:3d:8c:d4:06:28:08:
a7:ab:00:71:30:ce:9b:59:8d:78:6f:3e:b9:47:c6:97:0e:f3:
26:0f:09:fe:02:11:9a:44:ec:8c:a9:9b:05:1c:58:ae:97:7a:
64:32:e3:40:a3:2f:83:0f:51:32:4b:c5:d1:76:96:03:1d:e7:
23:3f:e6:fd:08:8b:4d:a3:9c:ef:75:b1:83:42:e5:82:86:f3:
0f:6e:8b:04:4d:f1:23:f6:d8:0a:d1:3a:da:4f:64:81:16:39:
5c:2d:74:fe:c8:5e:02:84:56:ce:f6:49:bb:a7:02:f6:49:3e:
4c:b0:5e:65:45:f0:83:88:42:c2:d4:b8:97:81:b0:cb:07:2f:
68:94:e3:a7:90:37:5c:06:39:d5:00:9e:9c:c1:d7:cf:fa:26:
f5:12:3f:58:6d:f1:70:eb:0b:de:6b:a1:9d:27:82:28:a4:11:
99:77:39:cb:ae:e5:69:ed:25:24:40:db:0d:33:8a:0c:34:8a:
3f:ae:b8:c6:f7:9a:7e:0a:8e:5a:e7:30:45:1f:d0:44:42:63:
7e:9d:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org