Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9fF0jhFOjIpoQxPwFKcZ_JZzWWE.roa
File: 9fF0jhFOjIpoQxPwFKcZ_JZzWWE.roa (raw, json)
Hash identifier: fB3VtgL9fPUdcb4UgNclrE17mjzGDu4W3+6QTA7PJ1o=
Subject key identifier: F5:F1:74:8E:11:4E:8C:8A:68:43:13:F0:14:A7:19:FC:96:73:59:61
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019015E101849B6494ACC4BA8E462BC1569A
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9fF0jhFOjIpoQxPwFKcZ_JZzWWE.roa
Signing time: Fri 14 Jun 2024 08:33:05 +0000
ROA not before: Fri 14 Jun 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 19 Jun 2024 01:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:e1:01:84:9b:64:94:ac:c4:ba:8e:46:2b:c1:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jun 14 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5f1748e114e8c8a684313f014a719fc96735961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:50:4d:0a:e5:f7:66:aa:a1:11:ce:67:a0:
0e:59:bb:b9:87:01:54:11:92:d2:03:37:44:a0:fc:
26:46:01:bd:b9:c8:e5:3c:ec:98:3a:31:2d:a2:76:
bf:5b:05:99:a8:f6:1b:29:e5:48:95:87:aa:d5:d6:
38:99:7b:c9:20:8f:5a:11:3c:b5:2c:7f:57:7b:1a:
62:24:e8:fa:31:df:30:cd:0d:f9:b4:ce:cf:58:c1:
29:69:b1:30:75:1d:64:51:88:8f:7b:2c:48:7c:8b:
7e:23:fd:0b:f8:4d:65:24:71:e0:37:42:71:6f:c3:
dc:6c:68:54:f6:91:b2:5f:5f:3f:cc:ce:e7:4b:ab:
83:b8:f4:3a:ae:d3:84:03:d2:a1:f0:ee:6d:8c:73:
3f:2f:94:5a:09:7a:7f:e6:d1:b2:50:59:69:52:a6:
9f:7a:2d:b9:3b:a5:3d:63:03:dd:ae:1e:3a:91:e0:
f6:fb:db:f4:bd:53:0e:f5:1d:20:62:b8:2d:54:70:
46:f1:f1:73:48:24:a0:2a:90:5a:5a:83:61:3c:c8:
53:f2:c1:47:c9:50:e9:69:52:20:dd:94:0e:05:88:
f3:21:1b:96:a9:0a:cf:97:a4:4a:a6:7f:c7:97:e9:
bf:a9:ba:01:1c:45:f7:15:df:b9:e4:f5:b7:36:4d:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:74:8E:11:4E:8C:8A:68:43:13:F0:14:A7:19:FC:96:73:59:61
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9fF0jhFOjIpoQxPwFKcZ_JZzWWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::/40
Signature Algorithm: sha256WithRSAEncryption
01:9a:59:63:fc:6f:31:00:bc:cc:9d:4f:31:c9:34:53:94:88:
d5:20:cc:95:d3:48:8e:d4:2c:b8:5e:47:6c:a0:12:fe:3d:29:
0b:c0:0e:cc:2e:83:14:f6:7c:ee:e6:cc:2a:9b:5d:74:b5:b2:
89:83:33:17:93:de:38:d7:8c:2a:f7:48:9f:58:b4:bd:9f:0d:
80:71:01:26:d8:c3:f4:f0:8c:84:3e:2a:23:69:f6:6d:59:d7:
85:88:13:b1:96:f4:f0:5a:da:64:ff:a4:88:4b:57:50:7b:c7:
59:42:6a:a0:27:8d:15:99:54:b8:80:f6:64:fb:07:01:c3:b0:
e3:84:2c:df:f8:06:6a:f3:e7:a3:db:23:9e:5e:24:91:c6:33:
b0:d2:e0:f1:42:ad:04:80:62:db:2c:eb:b5:8a:a6:cd:7f:ab:
eb:2e:23:f9:f1:c6:fa:41:47:9f:a9:7e:f6:c1:78:9b:d3:ff:
66:ff:7d:c1:36:0b:72:36:4e:40:1d:b2:ba:02:69:ec:67:63:
e1:f9:d6:8a:bb:40:77:68:43:35:5f:87:83:51:1f:60:28:54:
08:52:a8:fa:78:d9:a2:ba:24:36:ea:d9:09:b2:10:0b:5a:b5:
d7:05:82:28:53:86:f1:3a:ba:87:d3:21:85:d1:92:87:2a:59:
5a:35:86:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 03:02:28 2024 by rpki-client on console-ams.rpki-client.org