Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/HJb0hg_ySltkg8bU6iKbaD_Utnc.roa
File: HJb0hg_ySltkg8bU6iKbaD_Utnc.roa (raw, json)
Hash identifier: aC1Tqu65gkQYjG/u9ZzeYjM3PfcxntW2jtlKl679L9c=
Subject key identifier: 1C:96:F4:86:0F:F2:4A:5B:64:83:C6:D4:EA:22:9B:68:3F:D4:B6:77
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 01904943BD37FFE18B68E81BDF82E7307E5D
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/HJb0hg_ySltkg8bU6iKbaD_Utnc.roa
Signing time: Mon 24 Jun 2024 08:01:34 +0000
ROA not before: Mon 24 Jun 2024 08:01:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Jun 2024 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:43:bd:37:ff:e1:8b:68:e8:1b:df:82:e7:30:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Jun 24 08:01:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c96f4860ff24a5b6483c6d4ea229b683fd4b677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:54:b0:8c:bd:25:53:e0:7c:d2:3f:23:cd:
18:6e:13:b9:04:3c:6f:b0:dd:cf:98:a0:65:51:bd:
66:2b:10:ab:28:ff:20:1a:de:2d:0f:65:18:61:98:
0e:6e:12:47:d9:67:c0:9f:13:23:f6:ac:97:de:19:
fa:98:7b:80:f0:bb:1a:99:01:90:67:ea:73:41:fa:
c2:54:03:f7:36:a4:14:73:54:ce:78:d4:32:50:9b:
6e:dc:55:25:7d:7d:ae:e8:6a:71:8a:61:5e:d2:40:
92:a6:ba:d7:6b:b0:a3:07:da:9f:18:76:df:f8:9a:
e5:01:55:79:47:c6:a2:96:27:86:53:31:81:6c:91:
67:fe:20:4b:84:3c:04:57:d8:d9:32:fa:ba:0e:11:
6f:81:51:11:e0:cd:2c:fd:69:c9:94:e3:30:39:f2:
6d:88:fc:11:84:54:a1:d7:75:52:9e:dc:4e:01:0a:
ee:3c:ee:35:5b:44:71:f6:ec:c9:dc:82:42:9b:5b:
fd:6d:d5:59:5a:cc:6f:4b:62:db:96:ae:2c:95:3b:
0a:c0:89:c8:a6:36:57:20:ef:cf:4d:0d:64:9b:c4:
21:3c:ed:c7:fe:f8:de:9f:fd:4f:2a:48:16:de:11:
ac:80:48:4a:a4:fb:6d:67:93:61:7b:79:fa:e3:f3:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:F4:86:0F:F2:4A:5B:64:83:C6:D4:EA:22:9B:68:3F:D4:B6:77
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/HJb0hg_ySltkg8bU6iKbaD_Utnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:a9:68:71:e2:d4:80:51:bd:a0:23:8c:41:0e:35:93:7e:ec:
7a:1b:cc:3c:04:b6:33:e8:0d:31:86:00:5f:ac:71:be:dc:15:
46:a4:6e:e3:c7:7c:9c:33:27:a4:4d:f5:9b:91:be:46:2f:f6:
47:0d:ed:80:26:d1:db:c2:41:34:29:50:6b:e2:66:ab:13:b5:
f0:d2:66:5f:c4:c2:81:b8:fd:65:8b:4b:11:b1:e1:7c:f9:9f:
5c:ed:03:29:99:88:bd:1c:12:63:a7:21:78:8b:26:67:24:59:
51:b2:14:51:e9:4c:4e:9a:04:69:8c:33:c6:45:8b:15:c3:a2:
90:a3:68:ab:e4:cc:4b:81:72:d5:76:b0:39:a6:db:d8:55:e4:
0b:31:e2:27:34:52:f2:6e:86:a1:8f:43:22:77:8b:46:5e:37:
fa:9b:53:14:cd:b6:4c:72:58:54:0d:dc:c8:65:74:fb:9c:bb:
65:4c:32:a9:59:52:74:25:0e:1e:a3:97:51:4d:35:0d:07:90:
5d:82:6b:d7:bc:6d:c2:64:b8:e5:3b:bb:01:c0:a7:a2:cf:95:
3b:e9:1d:5f:75:f6:3b:17:12:b4:c8:35:fd:16:f6:50:56:32:
87:b3:c2:42:6b:b3:18:d9:0f:93:74:b1:3b:2b:e5:45:4f:32:
e2:b1:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:24 2025 by rpki-client