Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/jJDVGv28uHeiteoqZfbLJaY8Y_M.roa
File: jJDVGv28uHeiteoqZfbLJaY8Y_M.roa (raw, json)
Hash identifier: pLq7W37f+MpkLnFQznMLc0skBtVwWmuOrUxkqZjc8W0=
Subject key identifier: 8C:90:D5:1A:FD:BC:B8:77:A2:B5:EA:2A:65:F6:CB:25:A6:3C:63:F3
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 0190A97103CDEEBCC0BCEED0E87465528313
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/jJDVGv28uHeiteoqZfbLJaY8Y_M.roa
Signing time: Sat 13 Jul 2024 00:14:34 +0000
ROA not before: Sat 13 Jul 2024 00:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:7640::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jul 2024 03:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a9:71:03:cd:ee:bc:c0:bc:ee:d0:e8:74:65:52:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Jul 13 00:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c90d51afdbcb877a2b5ea2a65f6cb25a63c63f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:90:25:51:06:f5:8e:e8:0d:8a:ee:4c:41:
fc:24:5d:10:95:a7:c3:f6:fb:19:f7:15:80:f0:f7:
9c:89:3a:b0:ed:06:c5:a7:a9:98:33:10:07:d2:9d:
80:9a:ef:d3:07:ab:ee:96:55:74:66:d0:ae:5d:4e:
fa:db:2a:ab:7a:6e:21:f1:a5:80:c4:57:75:a9:c4:
d4:95:33:73:5f:29:8d:a9:2c:0c:88:58:2d:b5:99:
9e:03:eb:78:ce:67:4f:4e:72:36:90:98:76:98:50:
37:12:f6:52:d4:9e:7d:40:fe:85:cd:2e:3c:11:a9:
a5:93:b8:72:74:94:b0:58:17:c4:cf:91:38:e4:c4:
10:58:8b:da:0c:0f:e8:6d:ed:17:76:04:38:df:c3:
97:f3:bc:12:9c:71:e8:78:e1:c4:27:1d:3b:13:b3:
3a:06:89:b2:8f:7a:f7:58:f3:7d:45:f9:6e:d1:bc:
4a:bd:07:02:38:8f:b8:9f:0a:b4:14:00:60:57:b5:
7f:54:82:f5:49:ad:12:3d:0a:22:18:fc:40:94:b0:
32:f1:ff:59:05:40:50:e7:1a:fd:18:c5:e9:2f:67:
32:85:72:92:b1:b0:e0:a6:bf:60:2d:50:d3:b9:ac:
65:e5:dd:e7:02:c9:2a:2a:a9:a0:32:07:41:d4:75:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:D5:1A:FD:BC:B8:77:A2:B5:EA:2A:65:F6:CB:25:A6:3C:63:F3
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/jJDVGv28uHeiteoqZfbLJaY8Y_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7640::/48
Signature Algorithm: sha256WithRSAEncryption
2c:91:5a:41:7a:51:1a:c5:0d:8d:fd:e4:24:80:44:77:e0:eb:
4e:41:c0:06:73:bd:e5:1c:cc:c2:51:63:84:0f:c0:c8:55:aa:
4e:e1:e3:39:37:8f:a9:0f:1c:a6:b0:42:d4:e6:83:fb:26:ef:
4d:dd:24:bc:8b:46:7f:cd:9b:55:77:d5:42:5b:13:44:a3:af:
41:bd:94:d6:f3:f8:f4:58:67:48:1d:70:18:f2:00:4b:22:9d:
e4:f7:6d:30:4c:ea:2d:a8:83:22:fd:22:a0:c3:6b:8d:5f:da:
2c:7d:45:15:a9:13:a0:97:d1:00:64:1f:c2:76:57:2a:39:57:
f3:f5:ee:71:5f:f0:df:21:8a:67:c3:f7:db:14:6f:5c:8a:00:
db:6b:80:06:2c:fe:68:25:63:a9:fc:ef:73:94:4c:5a:59:65:
7a:db:fb:69:d3:7f:4c:d8:57:7f:51:fe:a8:6d:9c:fb:f9:0c:
4c:68:d3:0d:6e:62:3a:09:81:12:30:d5:f6:b2:82:8a:fd:63:
4c:22:85:d4:d6:f3:b8:7e:34:7f:79:53:41:00:51:ce:01:9e:
1a:0a:d0:83:d8:14:23:d3:91:16:ea:ef:ee:23:19:c0:ac:b6:
48:39:43:a7:2e:86:e6:d2:39:62:f8:df:dc:0c:7e:89:4f:98:
e2:28:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:42 2025 by rpki-client