Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JgACR2uqyenuX9XkGzAkMSc47ic.roa
File: JgACR2uqyenuX9XkGzAkMSc47ic.roa (raw, json)
Hash identifier: FxSRXv7v2svI5YG28ywOHI3uhIohP55wk00esEIAzWs=
Subject key identifier: 26:00:02:47:6B:AA:C9:E9:EE:5F:D5:E4:1B:30:24:31:27:38:EE:27
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01934A14B046B81B544FEDB9C49B40E77437
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JgACR2uqyenuX9XkGzAkMSc47ic.roa
Signing time: Wed 20 Nov 2024 14:58:09 +0000
ROA not before: Wed 20 Nov 2024 14:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214674
IP address blocks: 2a14:67c1:500::/40 maxlen: 48
2a14:67c1:600::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Nov 2024 05:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:14:b0:46:b8:1b:54:4f:ed:b9:c4:9b:40:e7:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 20 14:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=260002476baac9e9ee5fd5e41b3024312738ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:9f:59:db:8d:c2:f5:fa:f9:8c:a5:57:e9:
2a:24:91:e4:33:d7:99:6c:8f:77:66:0b:fd:93:c1:
62:38:f1:8a:ca:54:e6:9e:81:89:29:19:db:08:c0:
e3:f5:af:64:5e:be:c9:82:b1:6e:7d:54:d3:8a:b1:
ec:f6:2a:9a:5b:bb:70:37:db:a6:22:08:50:61:b4:
87:af:ed:a0:79:00:4f:2c:91:8e:8c:d2:3b:bb:45:
ce:e7:27:dd:7a:15:47:e1:68:c2:bd:49:4f:1c:77:
dd:a1:de:e8:ff:2d:d1:8c:ca:82:75:e9:30:5e:6c:
5d:6a:7f:ab:c9:79:09:30:da:03:96:6a:27:4d:fc:
16:5e:a8:73:97:d2:3f:35:c1:86:e1:b8:c7:ac:71:
f7:07:ec:da:78:17:f6:41:ff:2e:41:fa:8b:2a:fd:
0b:f8:80:3f:54:23:7a:ce:bd:71:ad:0d:d8:3d:df:
f9:ad:69:6f:f8:65:5a:6e:47:70:e0:08:cc:4e:b4:
4f:b6:1d:a4:e7:7d:95:37:fc:4b:f2:34:92:0c:fc:
83:f8:60:41:6f:d6:ad:a7:17:55:ad:c4:a8:47:78:
2a:ef:74:e5:ab:31:e8:5e:61:72:73:d2:85:52:75:
32:60:8d:1c:bd:f0:7d:1c:95:9c:f5:7f:2b:c1:42:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:02:47:6B:AA:C9:E9:EE:5F:D5:E4:1B:30:24:31:27:38:EE:27
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/JgACR2uqyenuX9XkGzAkMSc47ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:500::-2a14:67c1:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:93:12:3f:c2:99:15:cb:64:06:14:79:cc:84:c8:61:cf:ea:
b5:b1:16:58:99:d9:3c:8a:a2:05:c0:c9:c0:a9:5e:25:dc:bb:
01:17:c4:67:11:57:2b:05:f5:67:8b:a7:2c:6e:fa:5e:17:bf:
c0:f7:84:c3:4d:be:17:a6:44:ae:19:97:10:09:7b:e9:cc:98:
8c:7e:5d:9d:e2:d0:bf:81:f7:c5:22:47:9d:e9:85:c4:22:3b:
59:ab:0a:51:36:6c:b8:e8:92:49:34:df:e4:f8:d7:fb:3d:5e:
69:ad:49:a0:f7:25:f9:b4:d7:ba:d0:e9:c3:fc:11:23:db:4f:
98:e0:c1:97:24:80:af:77:f2:98:ec:9e:7f:f5:be:03:fc:75:
56:81:cb:25:e8:fd:32:a3:71:7d:f0:f9:bf:3f:e8:b7:61:6f:
af:2d:74:94:12:b8:82:ed:80:6f:87:49:6b:90:71:00:cb:cc:
a8:e5:5d:24:67:42:c6:16:44:56:86:a7:79:69:36:97:59:55:
0c:6f:19:1e:6a:1c:ea:72:93:92:e2:ae:db:d7:5b:40:45:f9:
c7:88:4e:4f:40:b1:67:71:53:e2:9e:d2:fe:a4:a8:9a:a3:54:
a6:c2:a4:6c:3e:df:5c:37:66:99:ee:47:e3:62:1d:c1:14:90:
a3:82:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:42:02 2024 by rpki-client on console-ams.rpki-client.org