Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a3a2f32392d3239203d3e203630323233.roa
File: 326131343a396530303a3a2f32392d3239203d3e203630323233.roa (raw, json)
Hash identifier: JKIgCKz4waFTO0ln13QEevJnJy10WschxfwN/h71ta4=
Subject key identifier: AC:AF:AC:AE:6A:12:73:4C:00:22:93:A2:D4:B7:43:8A:D1:50:83:10
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 4D83CA4DC825157A4CDBF4FFEA014E474730A184
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a3a2f32392d3239203d3e203630323233.roa
Signing time: Sat 14 Dec 2024 18:43:32 +0000
ROA not before: Sat 14 Dec 2024 18:38:32 +0000
ROA not after: Sat 13 Dec 2025 18:43:32 +0000
asID: 60223
IP address blocks: 2a14:9e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Dec 2024 23:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:83:ca:4d:c8:25:15:7a:4c:db:f4:ff:ea:01:4e:47:47:30:a1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: Dec 14 18:38:32 2024 GMT
Not After : Dec 13 18:43:32 2025 GMT
Subject: CN=ACAFACAE6A12734C002293A2D4B7438AD1508310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:98:83:cd:eb:58:a0:b4:6f:81:25:26:9c:
2a:f5:26:99:f6:49:17:0d:fc:3f:18:79:a9:23:72:
89:ea:51:11:18:21:31:5c:6c:7b:09:e4:fe:65:23:
0a:53:40:90:d7:c0:db:5d:ac:3a:a3:ff:58:f2:ac:
f7:37:c6:b9:ea:b3:22:af:38:16:08:b7:11:94:43:
20:1b:f5:4b:c3:b9:a6:8d:75:7a:b1:35:53:79:84:
b8:a1:bd:56:36:41:8c:92:9a:b8:76:1d:d4:8d:3f:
d8:7d:27:93:51:03:26:60:1a:03:0a:fe:7a:38:17:
82:f1:b1:f1:af:ae:01:f1:53:18:10:08:4e:4a:7c:
2f:f2:bc:97:72:39:bf:af:6a:87:0f:2f:d3:97:6f:
7e:e7:85:f0:3b:f7:00:ed:b4:77:8c:c0:70:19:6e:
dd:08:10:b4:63:68:96:6e:6e:5c:ee:4d:4b:fb:07:
8a:f1:f9:4a:3f:8e:11:0d:64:90:3f:dd:b7:f1:3f:
d2:71:27:60:7e:59:b6:6c:af:b2:c9:7f:e6:d0:52:
d0:68:d4:0e:db:71:6a:95:ec:55:c1:9a:e3:a0:8d:
0a:da:ff:bb:a9:e5:f9:d8:66:ff:da:35:11:29:b2:
c2:4f:58:a7:a5:7a:1b:f9:57:e8:56:36:e0:af:67:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:AC:AE:6A:12:73:4C:00:22:93:A2:D4:B7:43:8A:D1:50:83:10
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a3a2f32392d3239203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
0e:2d:2f:67:8c:0c:dd:c2:fd:67:20:67:e6:17:76:38:de:6d:
9b:93:90:91:ce:a6:a2:b1:fb:ee:13:11:0a:e2:ab:60:08:69:
cb:77:ee:b2:88:9e:fa:7a:83:b4:8f:dc:f7:a2:28:d9:df:6f:
f2:1b:4c:52:c4:5b:5f:e6:d3:9e:f4:39:3e:3e:cc:b7:2a:cf:
ea:8a:07:87:6b:7b:de:80:ec:6e:d0:3c:2d:0f:53:46:de:d9:
6d:67:45:6c:ee:61:87:53:be:db:55:28:13:d8:c3:68:0b:90:
2c:40:2e:b1:d3:51:36:f0:5a:74:5e:75:75:9e:57:de:39:33:
b7:71:8c:d7:a7:d6:e7:c7:1c:ad:6d:7f:00:d9:37:e5:8b:d2:
63:33:85:b0:c4:36:5a:0d:fc:f9:65:5e:49:69:50:81:a2:57:
38:fb:8f:3a:e5:16:81:36:39:81:a6:f5:3f:2c:a5:05:e2:04:
ab:e6:d7:d3:cd:3e:ac:47:a1:ab:09:e6:56:ac:6d:3c:f7:d3:
dc:30:13:a8:f2:bc:cb:a8:a1:73:40:c1:a2:2e:fe:e8:72:b9:
75:2d:a8:41:8c:f8:11:0c:54:80:17:21:06:c1:91:47:c4:91:
3d:6c:bc:01:88:80:06:16:f7:b9:7d:23:4d:d6:2b:c0:0a:40:
90:81:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:19 2025 by rpki-client