Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/cCHrfx-Cj63KqwKa74-WkbJs-xY.roa
File: cCHrfx-Cj63KqwKa74-WkbJs-xY.roa (raw, json)
Hash identifier: n0nDxTKOjm1EeWkMFPncAWNIt+cI2157VyoOjCJS+d4=
Subject key identifier: 70:21:EB:7F:1F:82:8F:AD:CA:AB:02:9A:EF:8F:96:91:B2:6C:FB:16
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01924403717549BF7DADFF1B1B653E8C439A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/cCHrfx-Cj63KqwKa74-WkbJs-xY.roa
Signing time: Mon 30 Sep 2024 17:38:49 +0000
ROA not before: Mon 30 Sep 2024 17:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214411
IP address blocks: 2a14:140::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 13 Oct 2024 09:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:44:03:71:75:49:bf:7d:ad:ff:1b:1b:65:3e:8c:43:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Sep 30 17:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7021eb7f1f828fadcaab029aef8f9691b26cfb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:cd:4e:79:e1:8e:d1:c5:e9:eb:5f:cf:72:
2c:e0:2d:d7:fd:0b:76:98:79:64:82:42:35:9b:84:
22:4d:80:a0:f4:72:30:c7:2d:fb:2a:06:30:3b:4f:
e9:1b:60:52:8b:43:ac:b6:35:c3:66:4a:39:fc:d9:
ea:aa:8d:a3:13:99:44:58:c4:bf:89:cc:4d:e7:6a:
8c:9b:04:fd:11:44:9e:04:3b:8e:39:48:20:7f:88:
d1:8b:f4:5b:b6:d3:a0:95:5f:7d:94:30:96:e7:19:
a3:e2:71:b5:6a:46:14:0c:b8:1f:79:1a:1e:c8:53:
12:3a:4c:c9:4f:a2:38:91:c8:e2:da:d0:af:a1:64:
6c:66:d8:f0:4b:f3:c5:38:78:d8:2b:66:08:f5:ed:
88:07:40:be:30:97:46:9c:e2:c1:98:60:ab:39:5f:
21:55:22:46:e7:9e:30:03:8c:a4:74:22:47:0d:4c:
ea:4e:ca:be:a7:a9:88:48:45:71:8c:c5:f9:e9:35:
d0:71:01:32:2f:8d:5a:45:4c:63:80:5c:e4:65:57:
98:9f:4f:fd:2d:55:7c:76:6f:a5:bd:96:92:64:4a:
80:25:ea:56:bd:c9:af:49:c9:c8:af:1c:62:7f:dc:
f8:00:cb:72:cc:f0:79:4e:0e:60:dc:56:82:99:89:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:EB:7F:1F:82:8F:AD:CA:AB:02:9A:EF:8F:96:91:B2:6C:FB:16
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/cCHrfx-Cj63KqwKa74-WkbJs-xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:140::/29
Signature Algorithm: sha256WithRSAEncryption
6f:45:f4:0c:4d:8a:66:b9:b8:e4:49:07:19:aa:35:62:dd:5a:
a3:77:23:f2:f3:4c:96:33:ba:61:f5:db:20:af:c8:fe:5c:92:
02:79:b5:32:a5:83:b8:38:df:55:c8:e8:85:8f:d1:64:43:73:
ba:79:84:01:16:c1:2f:aa:a2:a8:c2:24:58:93:ad:c2:86:85:
cc:38:f8:81:19:87:c3:8a:ae:c5:09:34:23:74:4f:43:ef:00:
9e:d9:b7:df:68:8f:ec:57:04:04:6e:db:4d:55:a9:a0:28:55:
e9:cb:b5:b4:95:8b:7a:d6:3f:9c:6a:27:6b:d5:7b:6e:50:a4:
97:7d:06:1d:2e:4e:13:5b:e5:06:fc:a5:72:86:b9:6c:aa:a5:
22:79:8d:58:84:cf:56:ee:e2:1c:89:b9:35:9d:64:b5:5a:8d:
1d:70:3f:3d:53:e0:dd:ee:3c:0a:fc:48:15:00:fb:84:8c:b2:
5a:96:e6:df:d9:20:74:aa:b9:e0:fe:aa:fc:83:75:7b:5c:ea:
59:05:f9:06:36:03:ab:79:03:8f:a8:f2:5f:be:b6:43:61:d2:
63:72:a5:70:92:9f:cb:bf:68:6c:01:62:25:e0:88:52:ce:b7:
d5:d1:9f:f8:d6:4e:f3:ad:f0:df:2a:83:03:ff:2a:2b:f1:5c:
7b:a7:d4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 12:58:27 2024 by rpki-client on console-ams.rpki-client.org