Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/1-ynOE-B0MW8MHCacTxAJn3WGPQQ.roa
File: 1-ynOE-B0MW8MHCacTxAJn3WGPQQ.roa (raw, json)
Hash identifier: aRrgAAhBFAxto+i8aqNFZywDNTbhs804mlwWIKR8p1Q=
Subject key identifier: FB:29:CE:13:E0:74:31:6F:0C:1C:26:9C:4F:10:09:9F:75:86:3D:04
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 018DD60CEF8ACE0FE0573A4507B9321A27EC
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/1-ynOE-B0MW8MHCacTxAJn3WGPQQ.roa
Signing time: Fri 23 Feb 2024 12:59:48 +0000
ROA not before: Fri 23 Feb 2024 12:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2a14:5200::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Apr 2024 23:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:0c:ef:8a:ce:0f:e0:57:3a:45:07:b9:32:1a:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Feb 23 12:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb29ce13e074316f0c1c269c4f10099f75863d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:1a:06:df:e7:31:60:6a:42:ed:17:a9:dc:
4e:e7:94:91:b1:53:6e:25:5c:5c:1a:3c:56:e4:e8:
d1:4f:c0:28:31:e3:c5:57:78:7c:97:14:ff:f1:5c:
86:e4:72:9a:3d:05:1d:89:69:40:84:b8:8d:45:69:
69:a9:3e:4f:6c:3c:33:72:d3:71:1c:00:f8:5e:2a:
e0:31:ae:95:73:08:3e:32:6c:eb:02:eb:62:bc:cc:
70:e6:6a:92:a9:6b:05:66:19:f7:fd:4c:29:1f:72:
9b:a2:50:29:09:74:bb:f5:60:2e:b4:01:75:57:b8:
a3:92:59:e1:fd:91:e4:6d:0d:04:75:95:12:49:45:
cd:71:d5:5f:f4:89:03:15:21:dd:6f:3b:fd:66:35:
fe:d9:1f:c0:eb:92:1a:ff:07:00:c3:a1:e9:52:43:
77:0d:51:dd:96:e0:9f:4a:f5:9d:88:ad:00:c8:eb:
69:ad:67:91:06:d8:ae:24:ed:a8:ba:12:33:c9:42:
52:44:f3:1a:ec:6a:72:0b:09:87:be:a4:db:4e:ff:
88:df:0b:e6:09:55:71:d0:66:56:d9:50:6d:f1:a6:
b3:4c:71:c7:c9:8f:ce:50:e8:1f:76:a5:29:a2:56:
1c:9d:64:af:2c:f7:67:e0:e8:f4:03:63:56:75:93:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:CE:13:E0:74:31:6F:0C:1C:26:9C:4F:10:09:9F:75:86:3D:04
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/1-ynOE-B0MW8MHCacTxAJn3WGPQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5200::/29
Signature Algorithm: sha256WithRSAEncryption
d4:3f:56:69:1e:4a:82:a4:8d:5b:88:02:30:24:ff:76:72:99:
d0:80:12:88:5c:9b:f3:55:b3:1f:a9:72:47:4b:5c:3b:65:9e:
78:f3:df:41:62:95:f5:d9:cc:d3:3d:91:64:35:d2:88:46:c7:
a7:04:16:49:25:c2:0a:48:e9:06:b1:f0:20:ad:a7:0f:fe:2a:
b9:d8:61:fd:d6:ff:e7:b1:a6:e2:4e:85:1e:45:04:5b:13:14:
38:a6:c9:98:3a:55:75:23:0e:97:67:a6:c1:a2:45:a7:f6:d0:
b6:88:1f:ee:1b:1d:f4:b0:c8:df:16:a9:61:a1:91:4b:7b:1b:
d1:d3:26:cc:15:e0:ab:8c:a6:74:9b:fb:96:5e:ee:b4:96:1a:
d2:69:47:fa:64:ae:68:63:c1:6b:83:6b:7c:7a:44:9e:3a:ca:
17:d2:da:43:9f:8c:2c:e1:1f:62:04:3e:18:20:93:e5:00:0c:
28:64:14:2f:d3:ca:3a:36:89:b7:45:b2:fa:22:66:4c:67:5e:
5c:99:5e:7b:fa:9e:c9:2d:c6:cc:66:0a:d2:db:d2:e4:79:6d:
93:0f:3b:b6:f4:69:bd:19:9a:22:65:8e:b9:05:54:7e:82:77:
aa:27:90:3c:e3:12:c7:2d:98:01:fd:ff:6f:13:0a:ea:5f:76:
bf:a7:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:23 2024 by rpki-client on console-ams.rpki-client.org