Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hwQqL5VbQm5CdAVJjYmHOIyN8xU.roa
File: hwQqL5VbQm5CdAVJjYmHOIyN8xU.roa (raw, json)
Hash identifier: D+vgR6XJH82qGT1QgrMKMnfqOY7cxwn1OwE5haDv6A8=
Subject key identifier: 87:04:2A:2F:95:5B:42:6E:42:74:05:49:8D:89:87:38:8C:8D:F3:15
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018A4750FD12C2C62C7C2212C65C7CED08A6
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hwQqL5VbQm5CdAVJjYmHOIyN8xU.roa
Signing time: Wed 30 Aug 2023 16:40:04 +0000
ROA not before: Wed 30 Aug 2023 16:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151673
IP address blocks: 2a0f:7803:fd00::/40 maxlen: 48
2a0f:7803:fc00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:50:fd:12:c2:c6:2c:7c:22:12:c6:5c:7c:ed:08:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 30 16:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87042a2f955b426e427405498d8987388c8df315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:2c:cc:b4:43:31:ba:ed:ff:06:60:69:44:
37:19:2c:dc:64:b3:1d:e8:62:d8:f1:a9:0a:4d:d7:
27:79:8b:56:06:cf:dc:57:61:59:df:04:ed:17:d9:
17:fd:10:85:57:b1:f8:88:4b:4c:c0:77:85:13:c0:
bb:45:26:59:b0:4a:71:0e:79:14:41:e8:43:a5:bc:
19:18:63:4c:47:52:9f:76:0d:73:e0:cf:d9:89:3e:
ed:fd:5f:15:2d:65:50:e4:5f:fc:33:e3:37:d9:78:
1c:e7:7a:bc:78:4f:90:5d:f8:22:eb:7d:ea:bd:79:
b7:87:69:c3:4c:a5:f8:9d:a4:b6:05:d0:2a:a2:b8:
d1:82:f6:0f:3d:be:a3:db:70:85:43:97:72:69:17:
ba:74:83:ff:d8:e0:14:31:01:e1:3d:f4:47:54:35:
31:0f:78:17:4e:9d:62:c4:40:a3:76:6c:20:6a:8e:
59:29:d7:97:62:de:64:42:b5:c2:18:33:73:3b:bb:
4b:e3:51:e5:76:82:9a:a9:8c:8d:3e:e6:87:dc:b8:
72:1e:b5:cd:31:78:d0:bc:bc:33:6a:f7:cd:f5:46:
a8:91:0d:6e:f4:94:5b:ae:b4:80:b5:00:41:97:ae:
b8:55:e1:f0:01:9a:c3:20:09:30:4a:ed:36:3a:e7:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:2A:2F:95:5B:42:6E:42:74:05:49:8D:89:87:38:8C:8D:F3:15
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/hwQqL5VbQm5CdAVJjYmHOIyN8xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fc00::/39
Signature Algorithm: sha256WithRSAEncryption
0d:4f:aa:a1:05:f5:46:ce:41:7d:11:ca:b7:76:d0:75:b5:6c:
d8:c8:bd:fd:7c:d1:8b:95:04:22:95:0b:58:90:9b:ac:26:c2:
3c:bc:f4:a3:28:24:ad:91:62:11:45:2d:b7:01:c4:10:2a:eb:
9f:08:ff:53:d6:48:7d:74:1f:7c:48:cf:fa:ba:1b:36:37:7d:
f5:1b:21:6c:51:60:7c:ca:07:33:11:4f:e7:3d:08:69:22:2b:
d2:25:3d:45:37:c0:84:c1:96:a6:d4:29:f1:e8:ff:c8:c4:bb:
38:84:99:43:40:92:a1:e5:21:84:fa:26:cd:68:89:02:2e:84:
de:59:e6:19:b7:a1:c0:f5:27:66:f8:33:1d:92:78:36:8c:ee:
85:07:00:b7:65:8c:ed:81:1c:bc:75:07:49:d2:eb:12:69:bc:
bf:94:b0:8a:91:fc:42:3d:59:ee:72:6f:b4:b0:85:1b:f2:fa:
ef:b2:36:38:19:ac:bb:b7:34:1d:9b:1f:56:51:5f:d2:be:95:
b7:eb:fb:98:df:be:3f:cb:c4:7a:c1:45:0c:d3:47:e6:a6:6e:
13:9f:3c:e8:da:ea:81:14:e6:73:6f:81:69:a9:12:9e:92:3b:
ab:55:90:c7:87:f4:4d:8e:cb:e5:32:cb:48:e7:87:4a:a3:a2:
87:94:32:7b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYpHUP0SwsYsfCISxlx87QimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjMwODMwMTY0MDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzA0MmEyZjk1NWI0MjZlNDI3NDA1NDk4ZDg5ODczODhjOGRmMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQszLRDMbrt/wZgaUQ3GSzcZLMd
6GLY8akKTdcneYtWBs/cV2FZ3wTtF9kX/RCFV7H4iEtMwHeFE8C7RSZZsEpxDnkU
QehDpbwZGGNMR1Kfdg1z4M/ZiT7t/V8VLWVQ5F/8M+M32Xgc53q8eE+QXfgi633q
vXm3h2nDTKX4naS2BdAqorjRgvYPPb6j23CFQ5dyaRe6dIP/2OAUMQHhPfRHVDUx
D3gXTp1ixECjdmwgao5ZKdeXYt5kQrXCGDNzO7tL41HldoKaqYyNPuaH3LhyHrXN
MXjQvLwzavfN9UaokQ1u9JRbrrSAtQBBl664VeHwAZrDIAkwSu02OucU5QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIcEKi+VW0JuQnQFSY2JhziMjfMVMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvaHdRcUw1VmJRbTVDZEFWSmpZbUhPSXlOOHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKg94A/ww
DQYJKoZIhvcNAQELBQADggEBAA1PqqEF9UbOQX0Ryrd20HW1bNjIvf180YuVBCKV
C1iQm6wmwjy89KMoJK2RYhFFLbcBxBAq658I/1PWSH10H3xIz/q6GzY3ffUbIWxR
YHzKBzMRT+c9CGkiK9IlPUU3wITBlqbUKfHo/8jEuziEmUNAkqHlIYT6Js1oiQIu
hN5Z5hm3ocD1J2b4Mx2SeDaM7oUHALdljO2BHLx1B0nS6xJpvL+UsIqR/EI9We5y
b7SwhRvy+u+yNjgZrLu3NB2bH1ZRX9K+lbfr+5jfvj/LxHrBRQzTR+ambhOfPOja
6oEU5nNvgWmpEp6SO6tVkMeH9E2Oy+Uyy0jnh0qjooeUMns=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org