Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/e1vsrrUI0op3Gxurjiw1QUep7Rk.roa
File: e1vsrrUI0op3Gxurjiw1QUep7Rk.roa (raw, json)
Hash identifier: HjOJkaVRtvB2pJ95JS3zDGk933f2HxnYwO08MUibSWU=
Subject key identifier: 7B:5B:EC:AE:B5:08:D2:8A:77:1B:1B:AB:8E:2C:35:41:47:A9:ED:19
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01923D18CEE00CD1A07F9188DF2C47E79BC3
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/e1vsrrUI0op3Gxurjiw1QUep7Rk.roa
Signing time: Sun 29 Sep 2024 09:24:48 +0000
ROA not before: Sun 29 Sep 2024 09:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 2a14:140::/29 maxlen: 29
2a14:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 13 Oct 2024 09:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:18:ce:e0:0c:d1:a0:7f:91:88:df:2c:47:e7:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Sep 29 09:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b5becaeb508d28a771b1bab8e2c354147a9ed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:68:3f:3d:13:07:32:69:c6:fa:1f:6e:ea:
4e:39:ad:2e:c1:de:cc:c2:e7:af:6e:34:fb:36:d8:
e5:2d:06:06:88:2b:ae:80:e4:9c:23:f1:00:dd:07:
e3:d6:e4:a8:56:80:0b:a2:60:11:58:2f:68:93:ea:
88:6d:16:c3:0d:5d:ba:02:98:89:33:4a:ff:48:bc:
9c:e8:79:6c:09:86:bd:df:90:26:27:2a:db:d4:4b:
6b:38:d5:36:fb:d0:5e:1c:b1:3e:a7:bc:96:41:e4:
42:b6:bf:00:80:52:5c:46:b3:db:c3:df:ca:ae:d0:
8d:e9:a4:dc:ff:3d:93:db:f5:15:f7:d9:b1:45:f8:
fe:42:21:35:a7:9a:b0:02:8d:74:1b:70:5e:34:5a:
ef:1e:52:42:ac:42:bd:26:0c:22:d2:7f:82:e2:1e:
8d:99:8a:17:38:cd:41:d5:2a:3e:be:98:0e:2f:be:
75:6c:3f:f2:88:72:f3:15:92:b0:af:86:64:42:c5:
b7:4d:44:ad:8e:21:90:75:5f:de:47:a5:89:27:77:
b7:1c:ed:b8:8e:2a:8f:f3:8e:66:01:bd:a1:b0:c5:
10:82:e3:4c:d5:52:49:98:a6:99:81:f8:00:cc:40:
1c:5d:fd:28:d2:12:9b:51:4b:c2:94:4d:62:9a:38:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:EC:AE:B5:08:D2:8A:77:1B:1B:AB:8E:2C:35:41:47:A9:ED:19
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/e1vsrrUI0op3Gxurjiw1QUep7Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:140::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:51:02:48:df:95:97:0d:46:d3:2b:8c:b8:19:0c:aa:1e:a3:
07:21:c9:24:90:0f:39:43:33:e9:61:f6:7b:c7:a1:99:ae:5e:
4b:95:0a:bd:ca:a5:a5:31:d4:9a:79:0e:7e:bc:56:e9:da:5c:
23:f8:56:1c:9a:38:6d:e4:69:93:4f:3e:20:d2:e2:6b:ff:c4:
c1:c8:e3:ad:bc:30:03:4f:fb:a3:15:08:8c:fd:49:ef:0b:ab:
d8:a9:1b:6b:6d:ec:ad:3b:d2:e6:22:65:ea:5a:e5:8d:56:6a:
52:fa:7a:4a:ca:3c:f1:59:7d:fc:43:0a:c0:44:57:2a:99:2a:
28:1c:f0:fb:ad:af:8b:fc:a1:34:43:e1:38:b3:c6:a4:55:3d:
22:a0:b5:fc:62:9a:18:06:1d:31:6a:5b:ba:c3:3c:a9:96:82:
d1:5d:6c:41:97:ec:c1:43:2f:03:8c:fc:d1:56:ab:3a:54:f6:
59:73:21:11:c3:a1:1f:48:af:15:b7:5b:d5:92:6a:2c:0e:ad:
8e:e0:3f:c6:14:da:82:14:6d:85:e0:3c:55:cc:99:6e:6a:12:
4e:c4:43:26:10:c3:ae:87:14:ac:00:54:2c:d6:1b:dc:40:e3:
ae:85:cb:3c:3a:a7:cb:ce:7a:43:cc:09:72:c1:4b:b9:2e:47:
94:7d:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 12:58:27 2024 by rpki-client on console-ams.rpki-client.org