Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hZjABkN-vtTArsx5WrR6vLNDsXE.roa
File: hZjABkN-vtTArsx5WrR6vLNDsXE.roa (raw, json)
Hash identifier: Plz/D5A5+ijx6yknUjEdv7qwfELz6OZsbu3GQSOZNAg=
Subject key identifier: 85:98:C0:06:43:7E:BE:D4:C0:AE:CC:79:5A:B4:7A:BC:B3:43:B1:71
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019078712239D2323A88932AE5CA1AB3928B
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hZjABkN-vtTArsx5WrR6vLNDsXE.roa
Signing time: Wed 03 Jul 2024 11:53:18 +0000
ROA not before: Wed 03 Jul 2024 11:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214661
IP address blocks: 2a14:67c0:500::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 18 Jul 2024 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:71:22:39:d2:32:3a:88:93:2a:e5:ca:1a:b3:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 3 11:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8598c006437ebed4c0aecc795ab47abcb343b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:d2:c4:03:36:66:bc:c9:1f:57:30:58:f1:
71:28:bd:f5:58:c9:15:b5:6c:2b:f6:93:dd:de:90:
4a:d3:9a:d3:d5:f4:a9:b4:28:89:fc:1e:00:d0:53:
74:24:f4:7d:07:75:32:56:9e:b6:97:9b:fc:cf:70:
83:4c:dc:c3:be:dd:ed:7f:24:9f:f7:00:d9:41:ca:
97:74:62:d4:e5:09:f1:19:68:b3:62:5a:19:a9:88:
63:cf:dc:4b:71:1c:e7:3b:e4:32:42:db:af:6f:09:
18:c3:f0:40:18:dc:62:9a:3f:93:89:65:68:30:7a:
17:d4:53:19:44:e1:cf:5f:f7:db:59:37:e9:b1:c3:
94:aa:6d:75:2d:8c:d5:ba:fb:2b:9e:2a:0d:8d:06:
22:8f:69:97:2b:28:05:cf:61:94:ce:09:3d:a5:88:
43:8c:ba:dd:ab:5d:c8:4a:f3:1e:4e:95:9b:b4:d4:
48:e7:f6:5a:07:0c:18:b3:23:8d:2c:95:62:f2:5e:
df:bc:f4:be:d8:41:ae:e9:aa:d9:a8:85:74:69:8e:
22:6f:0d:fc:ae:46:31:2b:20:07:75:57:a8:33:ff:
c8:5e:27:be:77:d0:f7:46:39:6e:2e:04:56:05:03:
e2:33:da:2b:07:67:9b:60:73:10:62:43:af:8c:04:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:98:C0:06:43:7E:BE:D4:C0:AE:CC:79:5A:B4:7A:BC:B3:43:B1:71
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/hZjABkN-vtTArsx5WrR6vLNDsXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:500::/40
Signature Algorithm: sha256WithRSAEncryption
53:46:9c:2f:00:62:e3:85:e0:2c:36:7c:c7:33:4f:e0:78:60:
52:c4:21:3b:f1:16:d2:c2:dc:39:f4:4f:43:4b:2c:8b:f3:52:
50:89:f0:17:f2:1d:45:0b:e5:fc:53:8a:96:42:73:94:4c:a8:
2c:cb:bd:6d:02:97:de:9d:e2:74:ec:84:fb:14:cf:4d:6a:ce:
37:92:05:ff:39:dd:f0:60:90:57:9a:63:30:13:e3:ff:21:b1:
22:e3:96:b2:b5:d6:df:8b:30:73:d5:03:ea:7e:93:73:a3:08:
4e:db:02:f3:39:78:b0:36:77:56:73:78:2d:24:27:eb:9e:72:
0a:eb:69:e3:2b:b8:ba:d5:2a:9b:01:02:6f:f4:a9:71:cd:57:
60:04:af:e3:6b:2e:05:e7:68:21:3a:74:9e:17:04:64:23:cb:
7f:fe:e2:96:80:da:be:1a:f7:71:1b:c6:c1:bf:94:9a:0f:d9:
cc:b5:38:90:d1:19:f0:e1:c6:31:c0:11:cc:55:1d:75:61:fc:
f8:8a:a8:0f:92:ef:6f:e0:6a:51:8c:4f:82:8c:90:15:06:c3:
0e:88:47:a9:94:3d:fa:1d:1b:0b:1e:8b:06:69:c3:be:4c:19:
2b:9f:a2:a8:a2:d4:4b:06:56:b2:1a:36:99:0b:58:56:d7:37:
a8:9d:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 20:10:51 2024 by rpki-client on console-fra.rpki-client.org