Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/veBgTH_blekzIVgYcdN1c_KUo90.roa
File: veBgTH_blekzIVgYcdN1c_KUo90.roa (raw, json)
Hash identifier: T0C5FRDrHjDXoTThBxPxXZl0+lzlHUDCeS4j8LEeFaY=
Subject key identifier: BD:E0:60:4C:7F:DB:95:E9:33:21:58:18:71:D3:75:73:F2:94:A3:DD
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 018F6F06EFE53403FDD5ABEBA2DF20845661
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/veBgTH_blekzIVgYcdN1c_KUo90.roa
Signing time: Sun 12 May 2024 22:57:56 +0000
ROA not before: Sun 12 May 2024 22:57:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216357
IP address blocks: 2a14:3b41::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 May 2024 17:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6f:06:ef:e5:34:03:fd:d5:ab:eb:a2:df:20:84:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: May 12 22:57:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde0604c7fdb95e93321581871d37573f294a3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:9a:36:eb:18:38:1a:b4:07:d8:86:a9:54:
d1:5d:06:c1:af:85:59:a9:16:4b:25:ac:9d:3b:f1:
22:06:a2:56:f0:99:ac:2f:9d:bf:da:be:29:d8:a8:
a2:72:c3:88:4d:04:2c:89:27:d8:40:ed:41:23:bd:
46:ce:f0:c7:45:80:8c:18:31:20:f9:fe:7f:bd:29:
bd:fd:66:b7:fb:07:e6:aa:d3:d5:b1:52:63:8a:97:
ef:4d:9e:65:b6:27:dd:e2:12:23:c4:05:5d:f4:08:
9c:59:f9:b6:0b:1d:24:1b:6d:17:56:3b:53:98:f4:
ef:38:ed:5a:8e:df:cf:f6:63:e8:eb:df:c8:cb:ec:
26:ff:5e:b9:00:6d:d0:31:41:70:5e:91:68:e7:28:
89:f6:9a:99:d0:9f:c5:7c:07:52:b5:9a:1f:9d:27:
80:a7:98:d2:42:a9:a3:a9:39:ae:c5:e9:c3:30:af:
f8:15:69:a3:b8:ec:9f:c4:65:b8:b5:cc:1a:2d:4e:
04:d7:7f:28:4f:67:96:e0:5b:4e:ff:23:39:92:45:
b7:c0:a2:5f:2c:18:3e:22:8e:a8:2c:62:27:3a:81:
58:1e:fb:47:f6:6a:e3:42:c7:00:83:eb:6e:66:49:
ee:25:45:04:d0:ff:ce:e5:58:a3:67:f2:f4:f4:d9:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:60:4C:7F:DB:95:E9:33:21:58:18:71:D3:75:73:F2:94:A3:DD
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/veBgTH_blekzIVgYcdN1c_KUo90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3b41::/36
Signature Algorithm: sha256WithRSAEncryption
a9:b1:e9:f1:74:70:a1:58:b8:73:47:1c:60:5d:79:d4:98:75:
68:05:ef:85:42:83:71:e5:d2:68:d8:5d:3f:3c:22:12:5a:4f:
65:b6:08:3f:74:c6:97:cd:85:83:f6:10:4b:0f:be:11:24:8f:
39:0e:2e:9e:aa:e7:37:27:80:8b:a5:4e:4b:00:05:3f:63:00:
38:d6:63:ce:8e:fe:75:79:b0:67:9a:bd:05:25:d5:2c:77:4c:
8b:f1:c3:ea:d7:5f:b3:87:dc:63:fd:7c:56:96:18:2a:db:aa:
97:c2:2d:70:14:35:17:ad:9d:97:f6:f5:fd:3e:4d:d1:60:c8:
aa:e2:b4:c7:e7:c3:15:aa:f8:c0:d5:ee:a2:7a:a9:e8:6f:90:
2b:fc:0d:df:11:8b:d8:b1:9b:6f:04:c1:87:b0:8c:77:34:30:
8f:5a:8a:33:f9:c7:9d:87:68:42:1c:15:7b:0d:13:a4:13:6e:
cf:70:4b:d7:b7:b7:c0:19:b7:93:41:89:6a:3b:19:ed:d6:b3:
ef:7e:94:ea:8f:4a:36:69:ca:24:f5:7d:78:48:98:c3:9c:c5:
52:e7:fc:ff:e7:44:c1:4d:f0:36:cf:80:05:f4:0b:9f:c1:d9:
86:91:f9:9f:8d:5a:2e:82:61:0a:b4:e8:ab:a7:80:1f:9e:88:
67:39:3b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:54 2024 by rpki-client on console-ams.rpki-client.org