Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/HablMbdYQo8Vp1V5Vwv8_SjvLsM.roa
File: HablMbdYQo8Vp1V5Vwv8_SjvLsM.roa (raw, json)
Hash identifier: PoYcCBmNpEYXeliFqyBcnkXV7AUmN7dsy12eAbq3EZw=
Subject key identifier: 1D:A6:E5:31:B7:58:42:8F:15:A7:55:79:57:0B:FC:FD:28:EF:2E:C3
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 018A7657FCEA50EB65A0BED0262FB530F433
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/HablMbdYQo8Vp1V5Vwv8_SjvLsM.roa
Signing time: Fri 08 Sep 2023 19:49:52 +0000
ROA not before: Fri 08 Sep 2023 19:49:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199297
IP address blocks: 2a13:79c7:1520::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:76:57:fc:ea:50:eb:65:a0:be:d0:26:2f:b5:30:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Sep 8 19:49:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1da6e531b758428f15a75579570bfcfd28ef2ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:d5:49:ca:67:d3:57:25:51:53:21:aa:95:
1c:23:3d:56:59:2d:2f:b0:44:fe:c1:fc:cb:e7:44:
e9:b7:ba:f5:4b:cb:c2:7e:11:75:94:1a:e2:fa:4b:
69:f7:63:9e:f5:56:39:6d:2f:25:d9:c1:23:c0:8e:
4b:84:b9:ce:87:0c:f7:a1:c6:9b:3b:fc:46:e5:a9:
81:51:05:4c:73:75:98:67:f3:c8:f3:3f:b5:f1:4b:
2b:0c:ec:8a:7d:9b:15:b7:86:83:85:e2:31:49:80:
df:96:ed:91:ab:3d:07:a9:79:91:b2:68:3b:9a:2d:
08:d5:ed:ac:d8:45:59:fd:db:85:b9:0a:be:dd:cb:
21:88:a3:1c:3e:26:d6:04:bb:60:0a:ee:b1:c9:f6:
b3:67:70:b1:72:f4:c3:b8:d2:2f:88:b9:2c:93:72:
09:ac:83:ef:00:b5:05:5c:ef:9e:58:1c:ac:7b:b7:
b8:fb:3d:aa:d4:97:fb:51:9e:66:3a:9f:22:5e:fe:
5d:99:fc:ed:85:53:f5:4d:7b:eb:14:2c:01:0a:9b:
6d:d3:bb:f0:32:69:cc:8b:3a:ca:dd:c8:2c:e3:1e:
01:c5:fc:82:4f:f2:23:6c:e9:38:e0:5f:da:11:be:
4c:2e:04:b9:c3:a2:d5:73:11:2d:d0:3e:35:3e:5a:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:E5:31:B7:58:42:8F:15:A7:55:79:57:0B:FC:FD:28:EF:2E:C3
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/HablMbdYQo8Vp1V5Vwv8_SjvLsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:79c7:1520::/48
Signature Algorithm: sha256WithRSAEncryption
80:e2:9e:8d:48:93:0b:d0:94:ec:21:6b:f0:10:06:eb:06:80:
69:60:a6:b8:6d:64:21:eb:2e:51:81:74:b1:c5:eb:14:bd:6e:
8c:9a:e6:d2:e9:73:1c:1a:cd:27:ba:ba:0e:c9:e6:77:79:92:
42:1e:03:9e:ad:56:47:95:0e:ef:14:8c:3b:77:cd:11:8b:77:
44:36:24:cd:b9:ce:5a:b4:04:47:73:d0:50:c4:5e:c6:b3:4d:
a6:77:a6:a0:bd:0f:d7:16:01:21:9e:0e:ce:f1:e4:bd:88:d5:
3c:09:8b:72:8d:b6:f8:03:d9:2b:98:09:13:b2:e9:f9:88:24:
9b:36:9a:eb:3a:5d:fd:7a:8f:7d:df:1f:f4:55:0d:44:05:2b:
e7:f0:66:97:8e:cb:6b:1f:82:d4:d5:d8:22:67:44:78:7f:28:
c7:b9:cf:36:1e:71:fc:c4:74:44:7b:66:05:4d:f0:70:c1:ec:
38:33:e2:12:ad:0a:4b:48:b3:4e:70:d0:61:8b:77:fe:ff:b4:
a9:30:13:f2:76:29:6e:99:da:b3:ee:2e:dc:f8:63:d7:d9:99:
ce:ab:c5:fe:99:af:0b:01:6c:86:d6:4b:cc:d6:70:bd:70:2c:
1e:78:47:bf:b0:70:86:82:8b:c6:c7:9c:f2:b9:13:89:a5:9a:
ae:89:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:43 2024 by rpki-client on console-ams.rpki-client.org