Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/cJH2yQoWhdp_HUxZRpHXTeQi2U8.roa
File: cJH2yQoWhdp_HUxZRpHXTeQi2U8.roa (raw, json)
Hash identifier: A38EGRDD0+kLPz6QEWe4lqUkEnjsaopcrU+oKJ9yoFo=
Subject key identifier: 70:91:F6:C9:0A:16:85:DA:7F:1D:4C:59:46:91:D7:4D:E4:22:D9:4F
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0190770DE871EE6638B8025BEFE64364AC5B
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/cJH2yQoWhdp_HUxZRpHXTeQi2U8.roa
Signing time: Wed 03 Jul 2024 05:25:18 +0000
ROA not before: Wed 03 Jul 2024 05:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 40
2a14:67c0:100::/48 maxlen: 48
2a14:67c0:101::/48 maxlen: 48
2a14:67c0:102::/48 maxlen: 48
2a14:67c0:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 09 Jul 2024 05:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:0d:e8:71:ee:66:38:b8:02:5b:ef:e6:43:64:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 3 05:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7091f6c90a1685da7f1d4c594691d74de422d94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:6c:d8:98:3e:85:ad:39:de:23:75:28:9c:
18:22:3a:d9:3c:fd:58:9f:73:ec:a7:f4:aa:4c:ff:
f7:b2:72:f5:a2:fd:f5:23:58:74:c6:f6:54:1a:a2:
c2:8e:09:c0:34:df:6a:68:93:8b:40:0f:a3:9f:e3:
df:34:b1:a5:e6:e8:8a:de:e5:29:8f:a6:fb:0a:37:
80:c6:1c:50:3d:52:cf:d5:b1:e0:54:1e:c6:7e:e1:
26:90:56:cd:b8:73:a4:ba:aa:a5:e3:71:4a:c1:21:
ca:13:5b:bb:46:cb:88:9b:e7:b4:45:ff:1e:92:ae:
fc:72:c9:6c:01:de:16:01:45:93:fc:b3:b1:a0:e4:
a7:90:dc:4c:45:05:5b:d2:00:09:86:24:b8:32:24:
43:98:7e:4b:5d:01:53:1a:b9:87:c3:69:6d:84:f6:
07:00:57:a0:5b:7c:f2:6c:45:23:9c:4f:58:f8:94:
c9:ec:9c:ec:97:b6:fb:a4:fc:1a:a6:ba:9c:ea:c8:
84:13:6b:2b:53:30:67:b4:8e:6d:ef:c4:b2:51:f8:
7b:6e:2a:7a:8f:7d:cd:2e:82:ca:8b:57:22:c4:a6:
71:2a:48:87:4b:07:f7:c4:60:58:6a:10:b2:fa:c2:
4b:bf:c0:2a:9a:d3:58:10:54:60:45:c8:99:14:27:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:F6:C9:0A:16:85:DA:7F:1D:4C:59:46:91:D7:4D:E4:22:D9:4F
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/cJH2yQoWhdp_HUxZRpHXTeQi2U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:92:59:7a:00:a9:93:93:7b:12:c5:12:99:39:75:11:de:cd:
e6:59:1c:65:e1:ca:bf:92:6e:9c:5d:a9:f5:c3:e1:fb:07:36:
e4:75:14:b3:b6:6c:3e:ee:cd:74:e8:43:78:14:c5:e3:a5:93:
92:5e:7e:80:d4:1e:ea:e3:69:1e:d8:e2:0e:0c:4f:51:1c:25:
29:af:9d:db:66:00:c8:df:32:61:33:c1:17:9e:77:a6:84:db:
a5:7c:d7:e7:79:d1:f6:4a:36:b1:8d:cf:27:87:7b:a4:0a:a2:
c1:23:b3:0e:6a:bc:1f:b4:cd:0e:d7:43:22:2e:ac:89:b5:07:
06:27:ec:4a:1a:d0:37:bc:55:78:74:3a:bf:5f:f9:f9:d1:1c:
31:9d:b6:18:18:07:22:cd:31:8b:f1:f7:e2:f6:d0:7e:b1:b7:
70:9b:36:6b:fa:c9:a7:f1:27:ac:2c:21:92:b0:10:54:d3:f2:
b3:71:53:89:43:1d:55:ca:b0:7f:b5:6e:6a:7d:4e:9d:2c:45:
30:1c:2f:42:a2:e7:78:62:f6:98:fc:15:b1:bc:e0:4f:49:4d:
f8:72:f1:98:90:d2:9e:a4:47:b0:e1:32:ae:ef:5a:fd:2d:8d:
97:6c:29:ab:ec:98:c4:ee:37:2b:7a:37:9b:b4:8b:77:64:15:
1f:a0:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 06:56:01 2024 by rpki-client on console-ams.rpki-client.org