Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/J0Y9tiSdXpzd4LVFMWPGEMgsZPA.roa
File: J0Y9tiSdXpzd4LVFMWPGEMgsZPA.roa (raw, json)
Hash identifier: BCoroZ9QHcDmqCrrBMh7lLNkF3rJlIquKlQjNwwiC1w=
Subject key identifier: 27:46:3D:B6:24:9D:5E:9C:DD:E0:B5:45:31:63:C6:10:C8:2C:64:F0
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 018BD33A5505EEF7117B2E2E39B011DA3781
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/J0Y9tiSdXpzd4LVFMWPGEMgsZPA.roa
Signing time: Wed 15 Nov 2023 13:44:57 +0000
ROA not before: Wed 15 Nov 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200373
IP address blocks: 2a14:4b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:3a:55:05:ee:f7:11:7b:2e:2e:39:b0:11:da:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Nov 15 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27463db6249d5e9cdde0b5453163c610c82c64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:fc:0f:04:7c:09:75:e2:d1:f4:04:4b:0c:
ec:33:a6:26:a8:8c:d3:86:6c:f3:e6:57:d7:f0:ae:
97:36:f5:3d:c4:8a:19:75:24:56:2c:93:8c:ef:bf:
fc:23:05:4a:45:1e:5c:f9:cd:54:b6:d1:29:73:49:
0c:13:41:db:60:38:53:47:08:6a:5b:36:9a:41:a7:
bb:5e:16:97:5b:7f:8b:fb:5e:0f:6c:bb:88:ce:1a:
57:1e:72:ee:27:37:57:93:bb:cc:51:a3:01:86:30:
75:b0:35:8f:30:58:63:db:0e:d1:b4:ce:7d:fb:a5:
7e:b9:63:aa:60:08:4b:d6:fd:2a:bc:7d:cb:5a:88:
fb:8e:78:1a:a2:13:35:b5:9a:1b:a2:6b:7a:26:c4:
be:c4:fc:c6:5c:f6:cf:3f:b0:a4:98:9b:9a:32:7a:
0d:12:4e:0e:2f:23:cc:d2:05:ce:dd:f9:c9:e2:3f:
46:f4:eb:c8:61:6f:3f:5e:8b:43:43:ae:8d:40:17:
28:2a:2e:b8:b5:74:62:40:0e:eb:89:7a:b9:88:c1:
d8:e7:bf:77:d4:d2:b5:11:59:22:75:dc:5e:52:6e:
d8:dc:33:24:a4:86:07:e2:c3:50:9d:88:35:b7:de:
0d:64:eb:72:ac:b2:3d:bc:85:8e:fc:26:df:3f:bb:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:3D:B6:24:9D:5E:9C:DD:E0:B5:45:31:63:C6:10:C8:2C:64:F0
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/J0Y9tiSdXpzd4LVFMWPGEMgsZPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
73:7b:17:96:49:ea:f1:3c:a7:8a:85:30:43:00:c5:01:3a:d8:
ee:af:83:1c:0d:82:fd:ba:09:98:ab:11:63:c9:b0:b6:88:3d:
7a:a5:1d:e7:4b:97:bb:88:00:07:2b:ba:ed:6d:b9:fd:1b:91:
1d:55:1a:38:34:1e:8e:22:df:48:33:0c:ba:27:37:5c:1c:d8:
ff:8f:b7:66:ba:f1:94:8a:71:6c:8b:7b:25:4e:14:92:23:52:
89:05:33:9e:c6:18:1f:09:3d:d1:95:60:25:9a:0a:f3:f1:39:
40:14:89:98:c7:45:52:0d:ee:71:6d:d0:e4:7a:9f:f9:79:1b:
51:f8:3d:12:ff:6d:53:e4:f6:6e:c5:4a:f8:ac:72:18:37:d9:
20:fa:fc:00:b9:0f:5a:8a:1d:2b:65:c8:5b:80:49:3f:3c:ca:
59:8d:ec:1b:9e:4a:32:80:2b:67:fe:49:7f:e1:1b:4f:bb:d2:
62:4a:3a:a6:05:c1:99:82:80:dd:bf:99:06:e6:5a:42:bc:b2:
42:4e:ee:76:15:60:6b:68:d5:26:24:80:2c:a1:27:31:83:1f:
09:7b:44:fb:26:65:e0:09:ed:40:83:29:35:e5:86:b3:7d:84:
7b:7c:66:6f:9d:59:f0:af:52:18:bb:fc:0f:f9:07:c2:44:25:
76:53:48:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:03 2024 by rpki-client on console-fra.rpki-client.org