Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HEOSi4_cYGFruXnIm4v1RglfvTM.roa
File: HEOSi4_cYGFruXnIm4v1RglfvTM.roa (raw, json)
Hash identifier: es8ICtM+Ag4hbdm6Dx/CGdN+EnvbXoGv+Smx/pFH6co=
Subject key identifier: 1C:43:92:8B:8F:DC:60:61:6B:B9:79:C8:9B:8B:F5:46:09:5F:BD:33
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019354FB3713D6231EED2FADD26E240D3AD4
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HEOSi4_cYGFruXnIm4v1RglfvTM.roa
Signing time: Fri 22 Nov 2024 17:46:09 +0000
ROA not before: Fri 22 Nov 2024 17:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a06:d640::/32 maxlen: 32
2a06:d646::/32 maxlen: 32
2a09:e302::/32 maxlen: 32
2a09:e306::/32 maxlen: 32
2a09:ef01::/32 maxlen: 32
2a09:ef02::/32 maxlen: 32
2a09:ef05::/32 maxlen: 32
2a09:ef07::/32 maxlen: 32
2a0a:b385::/32 maxlen: 32
2a0b:9001::/32 maxlen: 32
2a0d:3c44::/32 maxlen: 32
2a0d:95c1::/32 maxlen: 32
2a0d:95c5::/32 maxlen: 32
2a0d:afc0::/32 maxlen: 32
2a0d:afc6::/32 maxlen: 32
2a0d:c105::/32 maxlen: 32
2a0f:3102::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Nov 2024 16:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:fb:37:13:d6:23:1e:ed:2f:ad:d2:6e:24:0d:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 22 17:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c43928b8fdc60616bb979c89b8bf546095fbd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:65:f3:35:f9:99:62:e7:b5:94:6b:b5:40:
ea:3a:c8:cd:35:b1:7b:82:07:75:1a:5e:9e:0b:b1:
af:b2:4a:81:c5:1f:cc:06:d8:15:33:ca:69:32:cf:
8f:c3:12:d1:49:92:54:87:e6:65:8a:7f:8c:85:fc:
d9:9d:cd:9a:22:6d:7f:7f:b4:8a:ea:98:a7:07:1c:
18:6f:40:44:f4:18:04:14:97:2f:28:1d:22:91:37:
f3:00:38:ea:04:d2:9d:dc:35:d5:2e:22:41:bb:74:
e2:0b:49:d7:f7:d8:80:89:da:5d:d7:49:b6:20:c2:
99:97:19:1a:e4:0e:ee:5c:ff:5a:53:d3:18:a4:8f:
8a:f8:22:04:42:5b:e9:45:4d:a8:98:60:3b:3b:8f:
43:2b:88:3a:99:f5:50:c4:83:cf:eb:1a:c1:a3:c1:
2c:e8:51:8d:ee:aa:21:b2:42:4f:86:a3:2d:5a:ba:
23:f4:28:ff:72:11:04:33:b1:0f:a2:b5:2e:8d:a6:
aa:87:69:fc:72:d2:72:68:21:81:c8:9e:e5:c5:be:
85:6e:76:e5:50:03:c1:43:ca:40:2f:90:9b:c0:49:
45:fb:37:e7:6b:92:60:26:89:6f:ab:fa:23:41:53:
ac:f7:ee:85:07:3c:f7:5b:43:ea:23:68:18:7b:e8:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:92:8B:8F:DC:60:61:6B:B9:79:C8:9B:8B:F5:46:09:5F:BD:33
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/HEOSi4_cYGFruXnIm4v1RglfvTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d640::/32
2a06:d646::/32
2a09:e302::/32
2a09:e306::/32
2a09:ef01::-2a09:ef02:ffff:ffff:ffff:ffff:ffff:ffff
2a09:ef05::/32
2a09:ef07::/32
2a0a:b385::/32
2a0b:9001::/32
2a0d:3c44::/32
2a0d:95c1::/32
2a0d:95c5::/32
2a0d:afc0::/32
2a0d:afc6::/32
2a0d:c105::/32
2a0f:3102::/32
Signature Algorithm: sha256WithRSAEncryption
21:bb:63:6a:58:f4:71:f3:44:52:b5:6a:b5:35:04:b4:5d:e1:
94:a6:34:41:d0:68:2a:69:a3:83:dd:5d:59:c9:9d:1a:f3:38:
90:3e:b8:76:9b:39:f8:f7:08:ff:96:e5:56:2b:6c:20:e0:6c:
2c:2c:94:cd:93:80:27:e6:92:82:05:07:c1:44:6b:19:9c:88:
8f:fe:41:6e:13:b0:e1:d7:b4:56:c2:32:79:5c:4f:a1:d5:7d:
d8:74:6c:5a:4f:52:1f:66:82:91:2f:e8:c0:51:fb:64:ec:2c:
01:63:f4:41:a8:76:1c:7b:23:38:64:44:33:65:48:3a:54:74:
26:ff:3e:1b:b8:64:c1:fb:a5:75:c0:9f:98:1b:3a:d3:78:74:
b1:f2:17:d5:b9:42:92:a0:9f:c9:ca:98:84:39:32:f3:1e:e1:
e9:f2:0d:20:00:12:3a:ff:bf:9f:1d:e3:91:7a:91:8b:fd:1c:
2c:d5:c6:10:37:69:b0:bc:d3:9e:55:37:13:e9:ae:14:aa:09:
c0:7d:33:54:75:51:98:64:d4:5e:c4:8b:a9:aa:85:a8:ce:ef:
48:b8:2c:bc:52:94:09:88:83:a5:cf:16:c6:ce:12:90:68:9b:
c8:db:57:03:76:7f:2c:87:a6:2b:d5:2e:25:65:80:60:22:1b:
6b:04:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:36 2025 by rpki-client