Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/W8FuezNb6-YTNEf6TeZJOGxbZKY.roa
File: W8FuezNb6-YTNEf6TeZJOGxbZKY.roa (raw, json)
Hash identifier: GCdSpUp/xJv9KkPUiXjRgdcisg07/8B/CRpI+H+Dh8g=
Subject key identifier: 5B:C1:6E:7B:33:5B:EB:E6:13:34:47:FA:4D:E6:49:38:6C:5B:64:A6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0192DF0554A3B5234168486E9746A6ED0A5F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/W8FuezNb6-YTNEf6TeZJOGxbZKY.roa
Signing time: Wed 30 Oct 2024 20:02:01 +0000
ROA not before: Wed 30 Oct 2024 20:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215127
IP address blocks: 2a14:6ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 02 Nov 2024 23:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:05:54:a3:b5:23:41:68:48:6e:97:46:a6:ed:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Oct 30 20:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bc16e7b335bebe6133447fa4de649386c5b64a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:37:67:a4:4b:60:cf:a2:42:6c:b3:9a:cd:
71:60:ae:72:df:3e:2e:99:97:50:44:95:03:ea:75:
ec:bb:a0:23:39:98:b3:da:d3:fb:3f:f5:61:9f:61:
34:8b:10:37:7b:dc:60:9a:f1:b2:5b:47:12:a8:ca:
8d:86:f6:d2:30:df:71:b1:ab:6d:83:fe:80:6b:dc:
7a:31:cf:89:a0:d6:e5:49:59:69:29:c4:83:fb:c3:
a4:95:2b:6f:7c:5c:35:08:f8:22:5a:ba:51:65:de:
70:67:d4:1b:64:a5:88:e9:1c:12:94:d8:3d:b7:c6:
05:9d:bd:cc:c0:e2:63:fe:6d:9f:52:f0:d4:f9:0d:
2d:4b:60:a1:51:f2:f6:83:ef:b4:e9:1e:23:53:2e:
74:0c:b3:1b:55:eb:5b:2a:2f:7d:8e:bc:2d:75:82:
37:52:ea:2f:73:85:1f:4f:00:08:b0:ab:6b:76:fe:
3a:0d:f0:60:fa:6c:70:02:27:ad:11:6b:c8:cd:a5:
02:43:b7:e1:0e:9b:49:4f:99:d2:ae:dc:06:54:22:
c8:4b:24:5f:39:d5:bc:53:f7:46:2b:7a:3c:a2:c1:
76:1a:b4:1f:04:94:7d:c2:55:1d:56:d3:e2:5f:28:
bf:15:77:20:95:d1:92:96:d1:e3:28:74:57:a4:7d:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:6E:7B:33:5B:EB:E6:13:34:47:FA:4D:E6:49:38:6C:5B:64:A6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/W8FuezNb6-YTNEf6TeZJOGxbZKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ac0::/29
Signature Algorithm: sha256WithRSAEncryption
06:61:64:d4:0f:79:de:8e:86:7e:33:8f:80:55:2e:ea:80:3b:
dd:bd:3c:db:58:93:18:26:ae:a7:d5:30:29:eb:6b:4c:f0:8e:
11:0a:66:11:cc:23:f9:17:e8:1c:ec:5e:e9:a3:65:ac:ec:3a:
6a:2e:dd:e3:25:77:62:e0:0d:db:89:33:97:4c:c4:f8:44:60:
c4:59:2f:fb:e5:5f:25:e9:5d:97:75:49:d7:1b:b5:90:99:ad:
ae:67:c2:ff:28:bf:dd:d3:e9:61:b4:2b:4a:49:bf:d9:13:51:
38:d3:5a:48:b9:db:e9:a7:93:2c:22:1d:76:d2:6d:86:c6:c8:
f1:47:92:7a:e9:ae:bd:6a:d2:fd:a1:3c:c2:8c:9b:d2:50:0d:
e4:fa:eb:f0:e8:e1:8f:5f:f0:7b:73:02:cb:86:e3:55:98:92:
67:24:19:54:ff:e4:9f:3f:5c:d6:a0:3e:47:b3:04:0d:76:50:
a9:df:cd:dd:5c:c0:9f:ed:65:15:94:07:6e:a4:3b:3a:5b:e0:
db:1c:f8:7e:25:dd:b7:38:1b:7b:59:76:d5:ed:4c:ac:d9:b8:
de:68:55:65:2e:20:b0:07:19:e7:7f:ca:1e:7f:12:0e:f7:95:
84:ad:b6:01:c4:3b:76:7e:93:34:39:5f:0c:29:69:67:be:e3:
a6:28:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 02:36:16 2024 by rpki-client on console-ams.rpki-client.org