Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/6HuaAO2ERAM3hhYT01oNi9JE9HE.roa
File: 6HuaAO2ERAM3hhYT01oNi9JE9HE.roa (raw, json)
Hash identifier: ugSJBM4MeIe706RBX4QVUSFwy5oFGTGZrFjzMlySA+4=
Subject key identifier: E8:7B:9A:00:ED:84:44:03:37:86:16:13:D3:5A:0D:8B:D2:44:F4:71
Certificate issuer: /CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Certificate serial: 01936D6585F83914D26B55623806123F561F
Authority key identifier: 9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/6HuaAO2ERAM3hhYT01oNi9JE9HE.roa
Signing time: Wed 27 Nov 2024 11:33:10 +0000
ROA not before: Wed 27 Nov 2024 11:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213831
IP address blocks: 2a14:8000::/32 maxlen: 32
2a14:8000:1::/48 maxlen: 48
2a14:8000:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Dec 2024 10:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:65:85:f8:39:14:d2:6b:55:62:38:06:12:3f:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Validity
Not Before: Nov 27 11:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e87b9a00ed84440337861613d35a0d8bd244f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:a9:fd:f8:b4:44:f5:d1:28:d5:5d:8c:f6:
a4:ee:6a:8e:46:d1:2f:f2:e9:32:e0:c6:1f:a7:f2:
c0:a0:e8:43:8b:c3:c7:cc:53:e5:ac:91:4c:e4:c3:
68:2a:af:43:78:f1:af:c5:38:f3:da:04:fd:13:75:
8a:f0:9e:28:db:53:03:35:86:7d:68:25:f5:f1:d1:
14:f0:eb:76:ae:90:0a:00:79:bd:2a:7b:bf:10:43:
12:cc:17:68:3d:55:f9:ab:37:7a:28:b9:e9:dc:cd:
14:59:25:5b:98:8d:47:9b:8e:6f:ac:9f:9a:92:03:
fb:1f:f7:6f:80:cb:43:16:36:79:5e:a8:45:79:eb:
aa:06:46:8b:59:fc:27:ec:09:7b:ef:0e:46:8a:a6:
c0:00:81:b1:c2:e6:3b:8d:86:79:c1:e9:aa:5e:05:
8a:4b:e0:5f:7a:3d:92:81:54:2d:21:58:45:28:e3:
1a:25:2b:b9:3b:b8:4b:2f:65:5d:00:cc:b9:c1:d2:
ad:ea:da:a1:3a:73:37:97:3b:be:5c:f0:80:b5:57:
6e:dd:ca:75:91:d7:be:ad:c1:7f:c1:21:51:28:d7:
6d:a7:bd:4e:fe:6e:d2:9b:da:5d:31:99:ac:b5:b0:
88:1a:b7:fc:00:59:e7:94:46:90:ec:54:35:08:10:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:9A:00:ED:84:44:03:37:86:16:13:D3:5A:0D:8B:D2:44:F4:71
X509v3 Authority Key Identifier:
keyid:9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/6HuaAO2ERAM3hhYT01oNi9JE9HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8000::/32
Signature Algorithm: sha256WithRSAEncryption
61:4a:e0:f7:48:9d:ed:e9:a9:a8:b5:47:22:f9:75:21:c2:b8:
eb:c2:90:7c:15:4d:37:a0:fb:4b:0a:3e:1c:7c:70:43:21:c3:
b1:2e:86:65:6c:94:e4:0f:a0:5f:e5:5b:a9:ad:7a:8d:06:3f:
9f:6e:3f:ec:cd:b1:fb:6e:9c:a5:1d:08:af:9d:2c:da:09:2e:
0d:db:21:36:9c:63:b5:f5:66:5d:ce:74:32:6a:11:8e:d1:2d:
14:7d:e8:ba:16:58:76:d5:b6:b9:68:19:50:06:47:70:90:31:
5b:09:72:ee:cb:31:5a:24:2d:1c:3c:b0:38:52:7b:57:90:72:
c6:1f:fe:48:6f:5f:1b:a6:79:ed:29:d3:4b:9f:51:39:7e:65:
cc:4b:52:ff:e6:bd:ab:46:44:84:42:3c:e6:ce:e8:f6:d1:75:
3b:84:39:65:37:15:9b:ab:65:ab:38:68:21:73:20:d2:03:c8:
38:ad:94:7f:ad:b6:24:93:15:2a:04:47:2f:b6:91:aa:1a:11:
0e:cf:0e:10:53:bb:c7:07:89:a9:d7:f8:dc:f4:ae:5a:e2:77:
84:32:7e:c9:ea:e8:fb:f4:00:39:1c:bc:74:1b:85:2a:31:b0:
8f:d7:32:2d:ee:bf:f9:45:49:4f:e1:d0:08:cd:17:4b:d3:60:
89:f5:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:18 2025 by rpki-client