Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/HhxCmFSL7NGo8S9X5OY4nKxSFe4.roa
File: HhxCmFSL7NGo8S9X5OY4nKxSFe4.roa (raw, json)
Hash identifier: 8WSL2ny+Q3Y/vYHtQHorkTCnn4bmDOO0ChByprxmFEo=
Subject key identifier: 1E:1C:42:98:54:8B:EC:D1:A8:F1:2F:57:E4:E6:38:9C:AC:52:15:EE
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 018CCA2ADDACA0F4174941D1BE3291955D42
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/HhxCmFSL7NGo8S9X5OY4nKxSFe4.roa
Signing time: Tue 02 Jan 2024 12:34:16 +0000
ROA not before: Tue 02 Jan 2024 12:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212469
IP address blocks: 2a0e:e704:60::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 20 Mar 2024 12:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:dd:ac:a0:f4:17:49:41:d1:be:32:91:95:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 2 12:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e1c4298548becd1a8f12f57e4e6389cac5215ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e9:77:21:f1:3f:3c:5d:be:00:62:3d:5f:8d:
b6:a4:bf:cb:f7:9e:84:e0:eb:c6:bd:60:1b:c1:5f:
d5:52:9b:20:87:3d:21:47:20:c0:c4:48:bc:cb:29:
8a:27:76:46:ad:30:98:f2:1b:c4:74:cc:5a:3d:3c:
6d:65:15:ea:86:09:73:0f:12:c4:c2:86:b8:10:92:
a7:ce:7b:10:5c:24:eb:68:39:22:aa:45:20:1a:d2:
a0:74:22:68:89:a5:67:4d:9b:18:8c:2f:de:dd:c6:
04:57:06:8b:ae:2e:a5:08:00:94:65:a8:b1:ee:f5:
a7:55:c4:e7:76:a7:c2:c5:3d:35:38:49:8d:93:fa:
6b:a6:b6:6f:cc:12:79:41:d7:60:b5:ff:75:e7:6c:
d3:5b:f5:8a:85:ed:c6:43:1d:47:06:68:4c:36:92:
8f:58:bf:2d:22:2b:11:8f:7d:2a:f9:97:27:92:43:
68:b1:38:7e:9c:74:a1:ba:f1:f8:3a:a8:04:69:17:
01:a6:b0:1c:3a:2c:7a:6c:96:ae:b9:09:3d:e0:e0:
65:d9:ee:24:59:96:1d:68:eb:93:83:7f:48:51:be:
5d:b2:a5:24:e2:8f:cb:14:09:f8:ca:82:4e:48:bb:
4a:d4:9e:0f:25:cd:1d:46:a7:a1:cc:c8:64:d4:86:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:42:98:54:8B:EC:D1:A8:F1:2F:57:E4:E6:38:9C:AC:52:15:EE
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/HhxCmFSL7NGo8S9X5OY4nKxSFe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:60::/44
Signature Algorithm: sha256WithRSAEncryption
01:04:cb:36:44:98:2a:55:d2:47:f4:4d:b6:e6:1f:ae:c5:66:
ba:83:c4:05:db:c8:b9:71:67:95:35:c6:32:83:f4:53:35:71:
3d:4f:00:7a:37:af:de:7e:f0:08:00:bf:cd:e9:88:49:a7:65:
62:1c:7a:54:73:92:02:e3:67:69:3b:8a:6e:0a:12:ce:4c:c3:
07:2a:65:67:08:91:10:ab:b9:7d:4c:d1:a9:ea:42:ca:99:3c:
5e:49:de:b2:bd:97:09:2a:b6:19:a4:23:cd:3c:c7:6e:f2:d8:
db:70:ac:33:08:8f:15:36:c9:a7:88:a7:99:4f:8c:c8:4e:64:
a1:a3:53:e4:c2:49:78:a9:65:b1:35:3f:1a:7f:bb:fd:58:03:
88:bb:9f:15:e5:db:c2:cb:08:cb:60:16:a0:fd:a8:1e:a3:ba:
ad:75:b5:82:1d:48:e8:d6:2a:da:82:00:d7:01:c5:57:a1:07:
e7:25:e1:b6:39:a8:b8:6b:5b:2b:35:6d:f1:d2:e9:a6:81:76:
cd:28:42:ca:d8:0c:d2:fa:42:e7:03:95:58:4e:f1:aa:ad:ea:
da:44:c0:b0:bb:9d:70:05:12:59:fa:e9:b3:ad:66:66:f3:a7:
61:0d:cb:20:ca:a1:e3:67:5e:f1:fe:60:a1:66:60:77:d2:40:
2f:e9:23:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKt2soPQXSUHRvjKRlV1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3
N2E2ZWYwHhcNMjQwMTAyMTIzNDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTFjNDI5ODU0OGJlY2QxYThmMTJmNTdlNGU2Mzg5Y2FjNTIxNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOl3IfE/PF2+AGI9X422pL/L956E
4OvGvWAbwV/VUpsghz0hRyDAxEi8yymKJ3ZGrTCY8hvEdMxaPTxtZRXqhglzDxLE
woa4EJKnznsQXCTraDkiqkUgGtKgdCJoiaVnTZsYjC/e3cYEVwaLri6lCACUZaix
7vWnVcTndqfCxT01OEmNk/prprZvzBJ5Qddgtf9152zTW/WKhe3GQx1HBmhMNpKP
WL8tIisRj30q+ZcnkkNosTh+nHShuvH4OqgEaRcBprAcOix6bJauuQk94OBl2e4k
WZYdaOuTg39IUb5dsqUk4o/LFAn4yoJOSLtK1J4PJc0dRqehzMhk1IaNHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB4cQphUi+zRqPEvV+TmOJysUhXuMB8GA1UdIwQY
MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt
YTk1NGQwNTM5OTRhLzEvSGh4Q21GU0w3TkdvOFM5WDVPWTRuS3hTRmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh
LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7nBABg
MA0GCSqGSIb3DQEBCwUAA4IBAQABBMs2RJgqVdJH9E225h+uxWa6g8QF28i5cWeV
NcYyg/RTNXE9TwB6N6/efvAIAL/N6YhJp2ViHHpUc5IC42dpO4puChLOTMMHKmVn
CJEQq7l9TNGp6kLKmTxeSd6yvZcJKrYZpCPNPMdu8tjbcKwzCI8VNsmniKeZT4zI
TmSho1Pkwkl4qWWxNT8af7v9WAOIu58V5dvCywjLYBag/ageo7qtdbWCHUjo1ira
ggDXAcVXoQfnJeG2Oai4a1srNW3x0ummgXbNKELK2AzS+kLnA5VYTvGqreraRMCw
u51wBRJZ+umzrWZm86dhDcsgyqHjZ17x/mChZmB30kAv6SOZ
-----END CERTIFICATE-----
Generated at Wed Mar 20 17:15:33 2024 by rpki-client on console-ams.rpki-client.org