Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/9rxRO7qbwHAIkmjB47rq3gkPyHA.roa
File: 9rxRO7qbwHAIkmjB47rq3gkPyHA.roa (raw, json)
Hash identifier: XdT9vn9uCUV3HQfimSipQlwBLlKd3oJW6z80W6nhZCA=
Subject key identifier: F6:BC:51:3B:BA:9B:C0:70:08:92:68:C1:E3:BA:EA:DE:09:0F:C8:70
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 018C8CFD95CE18CF2A2CE62264BBF298A78B
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/9rxRO7qbwHAIkmjB47rq3gkPyHA.roa
Signing time: Thu 21 Dec 2023 15:27:58 +0000
ROA not before: Thu 21 Dec 2023 15:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:4e87:1000::/48 maxlen: 48
2a14:4e87:1020::/48 maxlen: 48
2a14:4e87:1010::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Dec 2023 15:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:fd:95:ce:18:cf:2a:2c:e6:22:64:bb:f2:98:a7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Dec 21 15:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6bc513bba9bc070089268c1e3baeade090fc870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:db:27:4a:f2:ca:a0:1b:5c:db:72:d9:42:
3e:b7:e8:69:70:31:d2:b4:4b:d5:2e:6a:c0:41:a0:
74:02:46:93:a4:51:7f:2f:09:67:f7:67:7f:1f:2e:
d9:d4:3c:2d:c0:7d:29:56:bf:d5:6d:9f:18:a2:0d:
3f:d0:58:a5:02:4a:d6:61:ab:01:6a:d9:9a:85:ee:
55:bb:38:8b:ba:05:81:d8:67:d0:4d:fb:6e:79:c0:
71:4a:d9:36:84:72:ad:e8:c1:93:07:db:2b:95:a3:
ed:ac:1b:ab:bf:65:8a:2a:9f:54:22:22:5b:32:60:
5d:68:71:89:b6:ac:0f:ed:73:1f:13:5c:d2:e4:61:
9c:db:72:32:01:49:99:52:5d:85:db:89:1f:b2:1a:
8d:90:b9:d9:94:cb:ff:63:20:da:43:08:82:03:ba:
8f:19:df:cb:20:7d:9f:22:9c:2e:91:0a:17:a6:e4:
66:d5:04:8a:38:25:42:c8:ac:90:1a:93:f0:61:98:
88:7c:f3:e9:5e:36:f9:72:cc:7b:55:00:bd:f4:36:
49:29:b3:17:71:c6:24:81:bf:14:75:f9:67:f2:2c:
ab:eb:ee:d6:99:fc:53:97:5a:17:d7:cb:71:17:84:
de:48:3e:91:4d:06:03:01:a8:52:e1:5a:55:c2:ce:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:51:3B:BA:9B:C0:70:08:92:68:C1:E3:BA:EA:DE:09:0F:C8:70
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/9rxRO7qbwHAIkmjB47rq3gkPyHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4e87:1000::/48
2a14:4e87:1010::/48
2a14:4e87:1020::/48
Signature Algorithm: sha256WithRSAEncryption
a8:a5:8b:54:6f:7c:9e:a8:ba:75:b5:03:98:d0:1a:1b:4d:16:
cf:c1:b0:2f:9b:ac:2a:c7:be:08:47:af:20:22:4f:7f:7b:ea:
7d:6a:75:37:95:21:75:46:9d:f2:c0:69:08:be:3f:c5:da:eb:
c4:41:c9:43:26:19:b5:02:7e:26:5c:39:3a:28:ad:12:e7:88:
4c:6a:57:cd:82:fb:4c:0a:eb:52:3f:59:7e:e3:d8:ff:84:33:
a1:c9:b3:a6:3f:68:65:2f:54:65:72:02:c6:ff:41:e3:11:07:
d5:48:e8:9e:8b:fc:32:b6:85:47:42:b3:fa:5a:76:2b:aa:f1:
8c:7d:4c:57:c9:3c:44:7d:f7:e0:9d:5a:d7:61:ed:4d:6f:f9:
7b:ba:a4:06:99:9a:8f:21:a1:20:09:e1:4c:26:54:38:b0:60:
1e:a6:7e:4a:fb:96:22:06:b6:04:ee:b8:9e:e1:69:57:75:d7:
95:b5:cb:fc:1a:89:6d:54:6d:53:f5:58:c2:dc:da:8e:f5:35:
3b:16:3c:10:65:ec:29:a6:d6:0b:24:b4:be:0f:f0:f1:cd:74:
4a:1e:52:6f:4f:fe:03:80:be:d6:7a:68:84:98:02:a9:bc:4d:
8c:59:6d:f9:ad:d5:4d:be:bb:35:b6:3d:8a:17:41:b2:fd:0e:
bd:bb:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:26 2024 by rpki-client on console-fra.rpki-client.org