Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hmgAZmjwfhRfsvAVnxf0dz9JMko.roa
File: hmgAZmjwfhRfsvAVnxf0dz9JMko.roa (raw, json)
Hash identifier: HdRuGC+Txx90ivAtxODT39JSfqVr4jgf1tnjfhuqzpU=
Subject key identifier: 86:68:00:66:68:F0:7E:14:5F:B2:F0:15:9F:17:F4:77:3F:49:32:4A
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018F489245F49AFBF39CF5672C33E6BC6F2C
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hmgAZmjwfhRfsvAVnxf0dz9JMko.roa
Signing time: Sun 05 May 2024 11:44:56 +0000
ROA not before: Sun 05 May 2024 11:44:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 2a12:d3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 05 May 2024 11:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:92:45:f4:9a:fb:f3:9c:f5:67:2c:33:e6:bc:6f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: May 5 11:44:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8668006668f07e145fb2f0159f17f4773f49324a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:25:cc:13:0b:9f:fd:2e:90:c2:a3:64:1e:
87:b2:61:68:52:fd:8e:a6:a6:b4:d7:f3:d8:09:e9:
94:6c:ec:3d:a8:dd:72:fd:a8:80:a4:9b:00:de:51:
d1:05:97:a9:bd:48:d9:dc:7f:ca:f2:79:6c:a6:c8:
2f:c8:ca:e7:90:7a:39:1a:e1:59:99:5e:3a:ee:78:
9b:61:d6:f6:a7:b7:64:90:73:6d:f2:0a:e6:56:19:
cb:91:6e:e8:e4:ac:bc:0b:6b:23:94:c4:01:47:76:
43:35:04:c5:11:cf:22:c7:f0:2c:f2:a1:8e:dd:77:
e7:7b:19:ff:d6:32:73:53:ee:4c:29:2a:e4:94:dc:
62:b2:15:e4:b8:e2:d3:b6:c9:43:cb:a4:bf:9c:9e:
16:c5:3d:c9:6a:f7:77:35:58:bd:56:12:58:0d:1c:
9d:9a:35:fb:0b:76:da:0b:fc:7c:96:fa:83:b1:68:
fc:18:ff:69:ce:9d:60:b7:d8:7c:17:8f:af:5e:f0:
73:40:42:67:69:07:b6:80:ac:53:71:ba:1a:3f:76:
f4:ba:7b:b6:82:dc:fd:96:33:93:43:32:14:8a:de:
b1:01:78:63:57:d5:4e:a7:95:f0:78:bc:89:4a:73:
20:6a:f1:4a:3d:58:23:93:90:61:dd:6f:f2:9e:3b:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:00:66:68:F0:7E:14:5F:B2:F0:15:9F:17:F4:77:3F:49:32:4A
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/hmgAZmjwfhRfsvAVnxf0dz9JMko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:9a:9e:67:8c:e2:26:33:6a:b9:4d:9f:de:6f:83:1f:65:ea:
ad:9a:e4:2c:71:aa:05:55:55:db:8c:2a:47:3d:bc:b6:be:0d:
44:90:bf:3d:d8:6c:7c:d7:fe:1d:06:56:f3:d7:1d:dd:fc:73:
20:3c:bc:58:66:3e:5e:a5:27:21:61:0a:b9:14:78:6c:95:88:
03:96:d4:97:fb:e2:8f:2d:47:f1:73:ad:96:50:f6:6a:ef:83:
41:1f:31:b7:d3:65:89:0f:35:7e:fa:71:38:42:fe:ee:00:e7:
d8:d3:1a:f0:73:67:0b:15:97:0d:a5:0c:e1:c5:1c:a3:a5:69:
76:2c:d0:ac:15:af:62:74:da:bc:63:f6:6a:81:a6:fe:20:7a:
04:28:a3:f4:1a:ec:ef:8c:5e:12:1f:66:31:ba:f8:84:fe:75:
89:18:5d:41:01:c9:ed:74:07:90:97:c7:1a:6f:b8:59:f6:c9:
69:53:42:45:f4:9b:cf:b4:98:5d:97:6b:99:e0:f2:90:ed:e4:
41:6c:b3:04:8a:36:b9:19:6a:64:a0:d5:4d:47:d4:6f:45:30:
22:7d:96:fb:65:8e:a0:05:25:14:f5:95:43:d1:ec:eb:86:73:
e2:51:26:00:f3:8e:a7:8a:c5:67:4c:18:f7:31:69:2e:e6:ba:
b4:56:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:09:36 2025 by rpki-client