Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8F_IPHf2e6LQj8jbK5xiBaoTaxk.roa
File: 8F_IPHf2e6LQj8jbK5xiBaoTaxk.roa (raw, json)
Hash identifier: qfNG1fTmcZFcEfMyJIDt2lRw0i1iRX/ScdHpNZhwBOk=
Subject key identifier: F0:5F:C8:3C:77:F6:7B:A2:D0:8F:C8:DB:2B:9C:62:05:AA:13:6B:19
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019096C9A05D6C10569AF70F2B69E32790DE
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8F_IPHf2e6LQj8jbK5xiBaoTaxk.roa
Signing time: Tue 09 Jul 2024 09:18:34 +0000
ROA not before: Tue 09 Jul 2024 09:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 40
2a14:67c0:100::/48 maxlen: 48
2a14:67c0:101::/48 maxlen: 48
2a14:67c0:102::/48 maxlen: 48
2a14:67c0:103::/48 maxlen: 48
2a14:67c0:110::/44 maxlen: 44
2a14:67c0:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 11 Jul 2024 16:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:c9:a0:5d:6c:10:56:9a:f7:0f:2b:69:e3:27:90:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 9 09:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f05fc83c77f67ba2d08fc8db2b9c6205aa136b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:c6:28:bb:4e:c3:27:72:c2:39:70:0e:b2:
fc:63:f5:98:4a:cd:59:58:71:81:c1:25:75:36:72:
63:f1:de:ac:d4:9b:b0:e0:b1:2b:db:03:33:eb:86:
9a:cd:b3:d1:b3:02:a8:fc:f9:ac:4c:8f:7c:16:57:
48:13:da:34:ee:a0:42:8d:00:90:4c:0e:fd:c7:30:
11:b7:93:c5:34:d1:44:0d:f1:03:1a:85:f8:95:69:
1a:28:87:35:a5:47:1b:bf:40:f5:c8:6a:01:b1:c6:
9e:2d:cd:12:ca:08:40:86:1c:31:86:e9:37:24:1a:
76:6f:7e:d7:23:7c:80:ea:6b:e0:56:aa:8d:48:c8:
2a:07:4f:92:ef:1a:5d:87:43:1b:a3:da:c7:c3:ed:
19:7b:b8:65:1c:2f:03:06:50:88:38:c4:29:3b:d2:
61:f6:f6:6c:d4:12:86:6a:a4:58:82:44:68:cf:42:
ea:34:38:54:64:5f:ef:9b:c8:13:3b:69:41:86:54:
3b:64:39:f7:69:37:90:8a:e8:29:96:b9:9f:15:71:
ef:9c:db:73:78:68:a4:24:1d:00:01:4f:17:b1:00:
2f:8d:d2:92:7f:24:ea:c5:be:73:e3:91:2f:f2:7e:
79:0b:52:d1:b3:6d:d9:a4:68:82:6d:ae:39:33:15:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:C8:3C:77:F6:7B:A2:D0:8F:C8:DB:2B:9C:62:05:AA:13:6B:19
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8F_IPHf2e6LQj8jbK5xiBaoTaxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d1:1b:36:08:14:80:88:f0:e2:87:4a:45:29:34:87:5f:19:c7:
7e:80:43:44:e5:e4:bb:d0:d1:f6:6c:8a:0d:a6:39:0c:78:ea:
21:24:ce:15:93:d1:d7:c0:24:f5:c7:b2:59:16:68:05:33:03:
8e:71:d8:a8:68:c1:d5:a7:81:4d:d8:01:30:52:4c:82:ff:01:
89:23:d3:0f:39:e9:b8:fd:52:9c:e3:f0:56:2e:b8:f5:e9:6e:
ae:58:a6:11:9b:74:bc:40:db:0e:d6:d9:10:6e:bb:39:92:20:
3e:23:29:db:d0:68:84:f3:d3:33:dc:30:93:7a:c3:f2:8c:5f:
b3:07:b7:11:db:ca:d3:05:1d:75:4b:0d:a0:89:41:a6:d3:70:
0c:2d:83:0b:3f:d8:b6:18:40:0f:50:cf:df:39:5d:fc:e6:21:
ca:8e:0f:0f:de:73:af:de:5a:92:0e:21:71:0c:f5:fb:4e:4d:
ae:ef:17:4b:1e:b7:59:01:aa:23:9e:25:dc:e0:44:ff:fe:5e:
7d:96:88:8b:52:2c:e6:a1:5c:f8:5f:e4:e1:a3:b2:4b:c0:f6:
d8:d0:36:23:2d:f3:d0:f2:25:eb:aa:14:38:7b:c1:e3:44:4f:
11:8e:4d:a3:29:c0:ed:59:70:d7:75:a4:b9:db:01:a8:56:3d:
c8:52:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 17:47:37 2024 by rpki-client on console-fra.rpki-client.org