Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hz0w0eUn42Pi87JR2HvWiwk0Z7Q.roa
File: hz0w0eUn42Pi87JR2HvWiwk0Z7Q.roa (raw, json)
Hash identifier: hYc6h0jjfCxPhLzrwpIMAHjoF0VUmsn2DWF7hX3l3bw=
Subject key identifier: 87:3D:30:D1:E5:27:E3:63:E2:F3:B2:51:D8:7B:D6:8B:09:34:67:B4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E07AA0D877338F48C5931D600A509D1B2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hz0w0eUn42Pi87JR2HvWiwk0Z7Q.roa
Signing time: Mon 04 Mar 2024 04:12:48 +0000
ROA not before: Mon 04 Mar 2024 04:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 2a10:4100::/32 maxlen: 32
2a12:a345::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 May 2024 12:51:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:aa:0d:87:73:38:f4:8c:59:31:d6:00:a5:09:d1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 4 04:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=873d30d1e527e363e2f3b251d87bd68b093467b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:e9:2f:f0:d2:50:87:71:84:4f:54:74:cc:
5f:d4:62:c3:b9:22:fe:77:cb:84:b9:de:ef:92:bc:
f6:9b:49:4b:e0:7a:70:c4:1d:ed:8b:83:31:2f:3d:
4c:5a:11:9a:2a:2a:06:18:95:3b:e7:4a:21:59:01:
f1:21:73:db:1a:d2:49:1c:64:16:e9:74:19:17:84:
b1:bb:d5:df:22:62:96:e0:63:7f:d4:ff:a7:d9:1a:
58:e3:35:31:c3:f7:88:e5:c3:5e:2f:ef:00:f0:f7:
04:39:7e:e4:ca:77:c2:03:2f:97:a0:4f:01:66:86:
87:bf:4c:cd:51:14:ce:6a:03:6b:9b:f2:e5:95:43:
ba:fb:ce:97:e6:73:60:21:17:14:f8:da:3b:23:12:
b9:aa:72:5b:18:d4:b9:e0:6c:dc:16:37:dc:ba:64:
57:d2:d9:61:d9:a4:7c:40:a0:08:c0:23:7b:90:72:
df:0a:58:4f:d5:ff:d0:4b:78:6d:b2:fa:9e:70:ed:
e4:66:53:41:97:50:0d:d3:e8:65:99:64:65:b8:56:
60:f9:39:74:c0:49:6b:26:18:61:9f:ff:e2:66:ad:
92:97:59:c1:09:22:d1:6f:1e:e4:c6:1a:48:22:63:
b7:aa:1a:9f:b3:77:e9:81:2d:7e:e1:4f:4c:e6:2c:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:30:D1:E5:27:E3:63:E2:F3:B2:51:D8:7B:D6:8B:09:34:67:B4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hz0w0eUn42Pi87JR2HvWiwk0Z7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4100::/32
2a12:a345::/32
Signature Algorithm: sha256WithRSAEncryption
26:a4:2c:e7:f7:f0:c3:03:da:4f:0c:20:7e:33:2f:da:fb:a5:
0d:1c:bf:f0:fa:d0:6c:4c:85:f5:6a:66:f6:da:9a:b3:d9:26:
7d:65:03:58:01:9d:9c:80:11:10:a9:ee:fc:43:15:b1:1e:49:
d5:6b:a0:05:ac:d8:34:d0:7a:3d:84:e1:89:4d:5b:65:4c:0f:
62:64:e4:3d:37:50:9a:5e:81:9b:b0:ea:c0:f1:1e:99:e9:70:
d8:98:6e:c2:c6:85:7b:0b:dc:d8:23:18:3a:eb:2e:9a:03:77:
03:c5:29:59:99:84:01:d5:b0:16:cf:59:4e:7f:c8:93:71:6f:
f3:f0:84:58:97:eb:28:4b:34:31:d8:1f:11:85:2a:a3:f7:35:
be:b4:cc:02:65:39:11:b8:07:70:df:24:da:9f:24:cb:ed:fa:
0c:ed:16:4d:92:19:b0:46:ff:32:63:ab:15:78:9c:88:e7:71:
a6:9c:7a:99:94:9d:b0:85:e8:8b:51:47:67:b2:75:93:f4:b0:
6d:89:9f:ca:c7:87:de:7c:59:a3:17:56:52:89:74:6b:51:92:
76:72:2b:82:35:32:80:13:d1:a1:0c:2a:3a:59:7b:16:29:49:
18:ce:01:bf:18:3b:f9:aa:59:be:b1:a3:a3:4b:78:65:f8:fe:
74:5d:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org