Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/XIOPs6HVBk88q00JWnH8yDkEJaQ.roa
File: XIOPs6HVBk88q00JWnH8yDkEJaQ.roa (raw, json)
Hash identifier: PqcKYX7pKNwAi7GYXN4RhvtAfVMXWIspVwaZ/nbnsfE=
Subject key identifier: 5C:83:8F:B3:A1:D5:06:4F:3C:AB:4D:09:5A:71:FC:C8:39:04:25:A4
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0191830A19CFCB0A914061E83BD80C8D70BF
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/XIOPs6HVBk88q00JWnH8yDkEJaQ.roa
Signing time: Sat 24 Aug 2024 06:19:22 +0000
ROA not before: Sat 24 Aug 2024 06:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a14:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:0a:19:cf:cb:0a:91:40:61:e8:3b:d8:0c:8d:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 24 06:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c838fb3a1d5064f3cab4d095a71fcc8390425a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:c0:4a:58:7b:ba:d0:97:95:3d:8e:64:57:
a7:6a:f1:72:83:3c:a0:bb:f5:8c:00:44:0e:9f:30:
31:a8:e7:96:94:83:1a:a3:cf:e1:c9:2c:a1:40:65:
2d:5d:af:71:4d:27:12:e6:8e:e6:ea:e4:c7:05:b7:
88:89:29:1d:21:6f:e8:99:28:c9:6b:72:60:4c:d5:
a8:09:09:42:2f:c2:50:d0:88:69:c9:ba:79:4e:f9:
c0:8d:da:24:63:6b:23:94:f7:72:e7:72:36:77:79:
99:77:e5:93:61:15:3e:b1:a8:fa:59:68:91:f7:86:
94:2e:09:31:1d:5c:ff:ca:ff:ac:4a:0a:c6:4b:e5:
6f:c4:41:dd:1c:52:30:82:f8:28:ef:0b:6a:50:6d:
4f:95:6e:a9:03:2f:5d:91:b9:c6:43:43:0b:44:2e:
de:71:6d:dc:02:fc:aa:8d:4e:c9:a5:d8:3d:1a:f1:
aa:88:64:5b:10:5c:f8:df:9c:d4:91:c5:97:66:05:
bd:4d:04:b9:5a:83:d6:6b:8a:b5:52:65:66:c0:85:
47:40:30:b3:1e:81:3d:82:51:be:00:3e:42:d5:87:
be:84:79:87:4a:19:7e:98:36:2e:c8:86:dd:8b:33:
b0:d2:0e:ca:2c:d5:45:a9:48:06:f1:52:1c:2a:9a:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:8F:B3:A1:D5:06:4F:3C:AB:4D:09:5A:71:FC:C8:39:04:25:A4
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/XIOPs6HVBk88q00JWnH8yDkEJaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:cf:9f:ca:69:7c:21:26:7b:1e:c6:e3:31:98:af:77:8c:80:
98:57:9d:d6:fc:30:92:c2:c6:7b:01:19:23:97:ac:05:2a:88:
61:20:ef:86:15:b4:5e:4c:bc:e1:f9:70:dd:94:e5:20:d4:df:
ca:d1:91:df:5f:85:3f:99:d9:9e:61:7a:b8:77:a1:1d:bb:03:
ed:31:56:37:22:23:3b:70:0a:02:57:a1:0f:91:61:5a:10:07:
0d:1a:95:f4:73:07:e3:48:f1:0b:50:bd:dc:91:02:a6:c5:82:
1c:a5:a2:30:03:d6:83:b1:0b:a8:56:e5:54:64:d3:44:37:de:
13:f7:35:18:24:b6:1a:74:34:c0:68:77:b5:b5:e2:8a:02:f8:
f9:96:a2:bf:d6:bc:64:e3:e8:1a:d0:07:ca:de:26:24:a0:47:
60:e3:3f:59:21:76:74:1f:d1:4d:fb:f9:3d:a9:6f:15:65:8e:
2a:17:f9:93:d9:09:76:25:ee:13:76:b7:56:19:9d:c2:11:54:
c4:ff:e2:9f:a4:4f:b8:4b:83:28:62:b5:42:14:e1:f3:35:30:
9a:a9:b3:d7:57:f5:39:73:9a:4b:c9:e7:ee:0d:32:e1:2a:91:
0e:12:98:d3:44:15:4d:20:34:33:a3:5e:4a:0e:05:d2:32:a4:
98:db:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 18:52:39 2024 by rpki-client on console-fra.rpki-client.org