Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eTxuWWcDd-cnF0FMaUGEQSmZclM.roa
File: eTxuWWcDd-cnF0FMaUGEQSmZclM.roa (raw, json)
Hash identifier: bQmGE5/7UzKOjrHjdDZTHoMULVPc6swPY8P+7sdaXK0=
Subject key identifier: 79:3C:6E:59:67:03:77:E7:27:17:41:4C:69:41:84:41:29:99:72:53
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0190770695951FE8F62EAB1814DA09AF0D22
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eTxuWWcDd-cnF0FMaUGEQSmZclM.roa
Signing time: Wed 03 Jul 2024 05:17:18 +0000
ROA not before: Wed 03 Jul 2024 05:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214601
IP address blocks: 2a14:67c0:400::/48 maxlen: 48
2a14:67c0:401::/48 maxlen: 48
2a14:67c0:402::/48 maxlen: 48
2a14:67c0:403::/48 maxlen: 48
2a14:67c0:404::/48 maxlen: 48
2a14:67c0:405::/48 maxlen: 48
2a14:67c0:406::/48 maxlen: 48
2a14:67c0:407::/48 maxlen: 48
2a14:67c0:408::/48 maxlen: 48
2a14:67c0:409::/48 maxlen: 48
2a14:67c0:40a::/48 maxlen: 48
2a14:67c0:40b::/48 maxlen: 48
2a14:67c0:40c::/48 maxlen: 48
2a14:67c0:40d::/48 maxlen: 48
2a14:67c0:40e::/48 maxlen: 48
2a14:67c0:40f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:06:95:95:1f:e8:f6:2e:ab:18:14:da:09:af:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 3 05:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=793c6e59670377e72717414c6941844129997253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:a4:a9:c7:69:35:01:66:94:ef:35:b6:2f:
70:7a:d3:be:ef:5d:3f:5c:f6:0d:9c:d4:b3:e0:1c:
08:0e:03:c1:5b:47:c8:01:a5:72:e2:ed:41:ca:01:
83:14:f8:49:be:b8:ed:95:2d:54:13:a4:05:7b:a0:
ec:1a:98:a7:97:97:23:56:14:af:98:55:0b:8a:53:
b3:ff:4f:9d:3b:ed:4a:aa:29:86:8d:11:49:f6:52:
ef:30:80:76:12:70:9c:11:52:ad:e7:51:6d:2f:4b:
9a:13:9c:6f:2d:a1:ed:f2:9a:a1:c5:a7:c5:f5:3f:
ef:5a:75:20:0b:5f:0f:e4:7f:ef:c3:76:15:7a:96:
b0:dc:7d:19:b4:00:5c:83:7a:af:9f:25:c8:30:18:
9d:74:f6:17:61:23:8e:cc:94:c5:cd:f2:f7:e0:31:
03:02:65:9d:d8:9e:17:8d:ae:c0:c2:96:45:7c:41:
a2:55:8a:10:3e:cb:f0:33:d7:08:49:95:86:3a:f6:
5e:a9:c0:f0:4f:8a:9c:dd:2c:f7:b2:88:83:83:15:
c9:92:03:5e:da:da:d8:16:0f:37:39:92:af:4b:fc:
5b:7f:33:4d:c1:12:70:49:1a:c6:5d:9a:98:9c:e9:
ef:50:9b:19:68:2f:8a:0f:b6:71:11:f7:ea:35:15:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:6E:59:67:03:77:E7:27:17:41:4C:69:41:84:41:29:99:72:53
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/eTxuWWcDd-cnF0FMaUGEQSmZclM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:400::/44
Signature Algorithm: sha256WithRSAEncryption
a9:0b:28:08:3e:b0:2c:14:8e:99:18:dd:48:97:2b:74:b0:48:
b1:e9:6e:ae:a9:16:5f:a6:1e:1c:5e:7e:83:e8:0e:8c:ab:01:
2e:79:f5:cd:b6:e6:2f:ed:9d:96:aa:60:5b:63:e4:b3:35:bb:
c4:5f:39:47:24:df:f5:e3:d1:bd:ae:7f:75:f5:4e:86:d2:52:
9c:7b:2b:41:4c:22:de:ab:d7:e5:f9:d4:8f:03:0e:74:2c:c5:
6f:60:0b:7a:c7:c0:d1:98:c3:ed:fc:a8:eb:d2:87:07:30:bf:
d5:43:23:38:ab:50:89:51:e6:e8:ee:61:aa:b9:c8:b0:78:a4:
81:83:e6:42:5f:88:44:a1:0e:f3:7f:c7:c7:ca:be:ce:ea:46:
19:85:b0:40:ef:66:16:b1:91:a7:7e:05:8d:ae:49:82:2a:3e:
28:e5:ea:9a:3e:60:5c:ee:91:e4:5f:d6:2a:e6:32:06:bb:fb:
4a:a2:e7:3f:d7:70:88:e9:03:d1:61:91:1f:11:f3:f8:30:33:
db:33:a8:97:f4:05:7f:57:7e:9f:fe:c8:26:c3:f6:f2:12:84:
7a:df:92:3b:23:5d:57:a1:6a:6b:8b:81:68:38:f7:a2:54:15:
dd:6f:29:fa:7d:2f:47:d5:33:dc:7b:91:06:45:ff:60:15:91:
9e:35:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:49:47 2024 by rpki-client on console-ams.rpki-client.org