Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OHJj4fGTGpEj6pG0hwP5IDsaPc0.roa
File: OHJj4fGTGpEj6pG0hwP5IDsaPc0.roa (raw, json)
Hash identifier: ugOKkWw9NV95DyMqXcxc43eTtnYKFNfkgYrClTwO1/g=
Subject key identifier: 38:72:63:E1:F1:93:1A:91:23:EA:91:B4:87:03:F9:20:3B:1A:3D:CD
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0192DF046A905ED5A4AD32B33D05203CAD66
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OHJj4fGTGpEj6pG0hwP5IDsaPc0.roa
Signing time: Wed 30 Oct 2024 20:01:01 +0000
ROA not before: Wed 30 Oct 2024 20:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215113
IP address blocks: 2a14:6b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Nov 2024 20:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:04:6a:90:5e:d5:a4:ad:32:b3:3d:05:20:3c:ad:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 30 20:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=387263e1f1931a9123ea91b48703f9203b1a3dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:fe:1a:98:62:e6:db:6c:6e:6b:fe:bd:b7:
d3:38:57:ea:5b:84:52:30:52:d4:60:59:98:c9:1f:
a9:90:3f:23:35:03:a6:a6:88:a5:f8:b1:d3:a1:0c:
e8:a0:1e:22:f0:5f:22:3a:ee:7d:a8:05:38:07:9a:
fb:8b:4b:ef:96:3e:1a:bd:92:4b:49:7e:96:e6:66:
36:3f:1e:c5:74:76:ae:c2:e8:28:7a:a4:96:f8:0b:
f8:3b:e5:9e:fe:86:4d:11:12:1c:10:46:08:12:76:
63:5f:5e:17:d9:fc:47:c1:b7:9c:51:89:84:de:00:
d9:0d:4f:61:60:6c:94:c6:37:4c:25:f1:f8:57:c0:
3b:7a:31:22:7f:05:91:c6:1b:0e:34:03:07:86:0c:
1f:c9:36:8c:fb:33:56:06:d7:bd:ab:8d:b6:dc:83:
6d:a0:0d:36:3b:72:e8:b1:cd:ed:43:f1:42:b8:b3:
65:7f:ea:e4:a6:21:85:1a:28:81:e5:69:49:ed:91:
54:9f:20:ca:87:ce:2d:95:09:ef:45:bd:0a:7a:8a:
44:e2:9e:8f:2b:7b:b3:c2:36:6c:19:53:85:06:57:
2d:f2:0a:a0:3f:75:5f:ad:30:c4:97:6a:0e:48:a6:
cd:42:fc:12:2e:27:be:c0:d8:06:aa:c6:47:ab:be:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:63:E1:F1:93:1A:91:23:EA:91:B4:87:03:F9:20:3B:1A:3D:CD
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/OHJj4fGTGpEj6pG0hwP5IDsaPc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
51:5d:82:a6:5e:08:b0:f2:f3:6e:68:12:6f:ba:79:46:c1:4d:
b2:a9:0e:1a:fa:1d:8d:21:cd:3d:27:0c:9b:5e:70:61:bd:be:
1a:8c:35:7d:34:75:84:28:7f:d7:33:85:e3:4c:ef:19:6b:36:
6c:ea:83:81:c5:fe:c3:96:b2:d8:4a:a3:61:56:5f:60:c3:78:
89:3c:5d:35:54:62:81:1c:a0:0b:c4:ba:47:67:dd:db:d9:bc:
4e:d8:7c:dd:aa:00:45:e2:6d:bc:9d:98:a2:b9:52:86:16:02:
44:44:2a:e3:c8:16:37:0e:4a:ae:08:5c:d0:4b:b2:b4:81:d5:
ff:21:bd:fb:2f:fe:dc:11:57:33:94:98:9c:d7:ec:1d:19:86:
d9:f6:f9:bb:dc:f7:12:ff:4e:e9:cd:51:a8:86:e4:4c:e8:e6:
83:9f:4b:96:6f:7a:0f:8a:e3:8c:02:51:9d:7d:39:1b:99:9e:
06:9f:0b:66:68:4c:58:f2:c6:98:24:13:e5:a1:a5:a9:08:f5:
6e:00:2a:29:8a:4b:ab:7c:28:6d:84:01:82:51:d4:53:64:f6:
21:e5:63:4b:29:4f:28:39:6b:35:64:c0:27:50:21:c0:5c:58:
1b:6e:dd:40:06:a9:4c:e6:92:80:0c:06:91:b3:cc:93:d8:7a:
7a:66:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:35:35 2024 by rpki-client on console-fra.rpki-client.org