Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/iluIxW9SWhMYhFI00WkjdX-dF90.roa
File: iluIxW9SWhMYhFI00WkjdX-dF90.roa (raw, json)
Hash identifier: 0/z1/eXlxyhVy70SPEVpqOhZnw822I7uE0m5RI9r+e0=
Subject key identifier: 8A:5B:88:C5:6F:52:5A:13:18:84:52:34:D1:69:23:75:7F:9D:17:DD
Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Certificate serial: 018CED6445BF67198BF75C530750CDF87235
Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/iluIxW9SWhMYhFI00WkjdX-dF90.roa
Signing time: Tue 09 Jan 2024 08:43:40 +0000
ROA not before: Tue 09 Jan 2024 08:43:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216016
IP address blocks: 2a14:300::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Jun 2024 09:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:64:45:bf:67:19:8b:f7:5c:53:07:50:cd:f8:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb
Validity
Not Before: Jan 9 08:43:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a5b88c56f525a1318845234d16923757f9d17dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:7e:2d:22:97:db:5c:4c:9e:8b:10:a9:a2:
9a:21:30:42:d9:ba:6f:3a:af:8b:b2:6c:b2:1e:5a:
80:b1:bb:4f:1e:9a:f9:de:19:7c:0a:ef:3d:d8:69:
8e:eb:00:56:5b:1a:9b:52:1e:ec:1e:f9:41:60:ca:
f6:c0:9d:be:a9:26:d5:56:af:0a:28:bc:1e:be:e7:
e1:4d:c8:a1:d6:2a:6e:47:14:cc:1e:37:69:ba:06:
64:fa:21:0c:e6:8e:43:93:54:8a:fc:83:e1:ae:ef:
8f:3c:01:09:e8:71:e0:d7:64:68:aa:c0:a0:15:fe:
8e:4f:0e:fd:c6:13:93:c7:f1:4d:72:d3:07:4a:92:
a3:c0:72:1d:6f:f7:02:67:db:e1:e3:82:b3:dd:8b:
e7:40:5a:e2:8e:39:16:51:e7:10:44:f3:03:bd:ad:
3f:1f:93:93:1a:2a:e2:d3:2a:b2:5c:77:41:1f:09:
37:91:a1:4f:cd:07:9f:8c:32:8f:d5:5e:e0:95:fa:
f4:3e:4a:9b:c2:00:8f:cd:b4:31:15:9b:65:8e:4d:
12:27:5e:e7:ee:84:22:b8:ad:2b:1b:b3:e4:5b:e5:
0e:3b:5d:64:58:39:f4:fc:da:3f:49:12:5f:40:18:
eb:77:05:ae:ed:ad:3d:f3:b0:fc:ea:d0:0a:4c:c9:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:88:C5:6F:52:5A:13:18:84:52:34:D1:69:23:75:7F:9D:17:DD
X509v3 Authority Key Identifier:
keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/iluIxW9SWhMYhFI00WkjdX-dF90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:300::/29
Signature Algorithm: sha256WithRSAEncryption
96:3d:29:3b:32:5b:70:18:e9:28:cd:1a:55:d7:80:aa:d5:0c:
16:63:88:3a:8c:8c:14:57:37:93:29:7b:89:b4:11:c7:0a:54:
b0:cf:5e:45:73:1d:67:dd:6f:02:0b:88:d8:68:17:d9:5f:57:
5d:aa:2f:8a:e8:2a:13:7e:62:4e:9e:01:c4:70:af:93:ce:75:
54:e2:5a:30:78:62:db:e3:ef:50:06:6e:c7:9b:12:15:63:7b:
c0:0f:b3:3c:cb:c6:d4:d7:02:13:14:e9:af:c0:00:6a:79:7c:
d9:5a:9c:63:9a:4a:83:77:8c:c1:76:29:8b:d1:d7:d4:89:0b:
47:04:e9:d2:4e:a4:83:d8:8a:f2:e5:26:5a:43:42:d7:d7:5d:
99:83:93:08:77:4d:a3:b6:b6:23:2f:80:fd:e6:c0:37:30:51:
6f:bc:88:03:a7:22:63:23:9f:5d:2c:db:04:0c:fe:48:d3:5f:
34:c2:58:35:67:a0:d4:5c:18:bb:05:f8:73:0c:6b:f7:5f:c3:
93:56:fb:b4:2e:f9:9d:6e:d8:27:18:e6:1a:aa:4f:92:31:11:
79:12:f0:81:7b:cb:92:f5:bb:89:8e:4d:ed:77:b1:f2:e2:bb:
88:79:bf:27:b4:8a:72:d0:5b:3a:ea:39:b8:c7:b9:e7:a1:a9:
ec:7d:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 13:12:49 2024 by rpki-client on console-fra.rpki-client.org