Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/4xjlFqeRoZE7tH8IMEmebhpFNJ4.roa
File: 4xjlFqeRoZE7tH8IMEmebhpFNJ4.roa (raw, json)
Hash identifier: t24zNG/T78wO3OXgzv1MviOb70p/JaqOG4JnjTkeADU=
Subject key identifier: E3:18:E5:16:A7:91:A1:91:3B:B4:7F:08:30:49:9E:6E:1A:45:34:9E
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 018D4FC0015552A1B5772975CE209874A340
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/4xjlFqeRoZE7tH8IMEmebhpFNJ4.roa
Signing time: Sun 28 Jan 2024 11:06:39 +0000
ROA not before: Sun 28 Jan 2024 11:06:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215679
IP address blocks: 2a14:7780::/29 maxlen: 64
Validation: Failed, certificate revoked on Sun 28 Jan 2024 13:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4f:c0:01:55:52:a1:b5:77:29:75:ce:20:98:74:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Jan 28 11:06:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e318e516a791a1913bb47f0830499e6e1a45349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:c4:4a:85:e4:01:05:4d:70:90:b0:13:9c:
53:51:a9:2e:80:c0:e2:46:26:b4:eb:8b:a4:95:05:
60:25:47:e5:b3:56:9b:74:1c:a8:34:76:50:1c:b2:
6a:21:bb:e2:21:6b:f6:17:82:57:b5:a9:6e:69:ae:
17:87:53:b9:9e:e4:55:68:56:4c:b7:50:09:ab:59:
d6:4c:22:47:f9:e7:c3:50:6a:27:40:af:4c:91:18:
97:a1:3e:53:31:0e:72:33:ba:ab:4d:7c:78:7c:8e:
17:e6:86:c3:7a:36:79:98:c0:f3:2a:7f:99:f2:ce:
c5:88:92:ee:5a:69:c0:df:a7:f5:0d:48:80:aa:c6:
56:12:ea:20:9d:1b:d2:04:fe:5e:43:bc:71:75:b2:
e8:7a:f9:50:1d:29:8e:26:f2:18:69:f8:b5:22:f9:
21:0a:fd:48:3b:db:be:52:fe:87:fb:04:57:a4:9a:
cb:4a:8e:3f:c3:1d:52:9e:b6:57:e0:a1:9f:45:3a:
91:b8:48:61:a6:9b:0a:03:d8:e8:e7:65:0a:38:03:
1a:99:56:33:dd:70:87:de:f7:e8:77:35:69:79:59:
17:60:38:f7:53:07:b1:d7:ee:6d:0c:14:f6:b3:f1:
51:c1:54:7e:8d:5c:88:02:61:c9:e0:ca:ca:63:80:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:E5:16:A7:91:A1:91:3B:B4:7F:08:30:49:9E:6E:1A:45:34:9E
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/4xjlFqeRoZE7tH8IMEmebhpFNJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7780::/29
Signature Algorithm: sha256WithRSAEncryption
7b:8d:6e:8d:a3:a3:ed:d8:77:23:97:95:fd:52:db:84:ba:05:
b8:7d:4e:67:33:15:82:ca:b7:3f:f2:cd:31:3b:fc:3f:3a:8f:
ab:ec:b4:fa:51:90:ef:8d:f9:08:cb:24:8f:e5:2e:1b:9a:b5:
28:4d:55:b3:f1:ef:2f:66:6a:bd:4e:fa:89:5e:fc:65:89:2a:
fd:29:03:33:2c:d8:d5:a2:34:d1:43:ed:fd:5e:56:d3:d3:94:
48:51:bb:99:30:a3:56:98:e7:fd:df:d5:a4:c3:c0:ed:0f:ed:
7f:de:04:20:ad:8c:53:ad:1b:25:4c:3e:54:e8:39:48:08:76:
bc:f9:f6:50:53:29:d7:19:dc:8d:f5:c7:13:5b:6c:f5:d9:ef:
ea:96:66:e8:eb:52:82:92:98:43:8b:f8:cb:ac:ae:b6:e5:73:
d2:ae:c9:87:91:22:b4:0d:a3:25:67:c3:76:42:a4:67:fd:30:
6d:4a:03:f4:52:24:a9:ab:80:64:98:78:ae:e3:c2:f4:66:16:
ca:75:7b:a5:66:16:95:03:93:55:41:e8:11:dd:a7:c6:94:68:
25:04:fc:e2:4f:c5:eb:94:10:5e:bb:df:5f:ea:b6:9b:3e:48:
95:17:29:b2:e1:e1:99:46:c4:76:0a:03:51:78:03:8c:1d:93:
9f:74:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 15:23:45 2024 by rpki-client on console-ams.rpki-client.org