Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/J3QRb6y0ijYBwRTi0vA7-9DMxHc.roa
File: J3QRb6y0ijYBwRTi0vA7-9DMxHc.roa (raw, json)
Hash identifier: OONX73OySLTtbJPGK82HjHNjbwfCwcpytWpd3PvRPco=
Subject key identifier: 27:74:11:6F:AC:B4:8A:36:01:C1:14:E2:D2:F0:3B:FB:D0:CC:C4:77
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 018B1F0E0A7E86DCB1297B2384493F5726FB
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/J3QRb6y0ijYBwRTi0vA7-9DMxHc.roa
Signing time: Wed 11 Oct 2023 14:04:55 +0000
ROA not before: Wed 11 Oct 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216176
IP address blocks: 2a14::/32 maxlen: 32
2a14::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 11 Oct 2023 22:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:0e:0a:7e:86:dc:b1:29:7b:23:84:49:3f:57:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Oct 11 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2774116facb48a3601c114e2d2f03bfbd0ccc477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:2c:0c:8f:71:ed:0e:8d:18:8f:35:78:47:
67:91:77:ef:76:4c:47:96:c1:7b:6f:48:38:17:99:
e9:15:ef:83:83:5d:0d:55:26:88:1c:17:c6:44:89:
6e:55:2c:85:a2:de:6f:f0:2e:12:a4:60:f5:af:a5:
89:e7:ab:27:87:3a:25:04:e9:a2:fb:7c:96:62:13:
01:49:ad:ea:5e:97:cc:36:61:da:f1:31:d7:e8:71:
9e:a7:d1:6c:22:40:75:87:32:30:cb:97:f6:8f:ff:
0e:6f:8d:e4:69:23:0b:a9:23:38:15:ca:46:92:b4:
1f:ef:d3:6e:4e:09:f8:10:74:73:c1:d6:7d:45:cc:
fa:07:82:85:ab:15:78:ab:8d:6f:5a:cb:24:e2:68:
b3:4b:10:c3:5c:4e:39:e6:cf:56:c5:d1:54:8a:9a:
04:8a:a2:db:64:12:97:e5:ab:ea:0b:da:2f:35:59:
b8:4a:e4:0a:10:6c:de:de:4e:a9:2a:68:b6:6f:31:
78:7a:af:e4:7e:cc:06:94:fc:06:04:e8:1e:89:72:
98:b5:0f:d7:5b:8f:2a:ec:1d:3b:a4:88:7e:81:ac:
97:8f:f6:f5:b5:79:ab:9e:77:7b:1e:e4:91:68:46:
24:ff:92:99:c3:18:30:1f:e0:de:58:a7:0a:52:df:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:11:6F:AC:B4:8A:36:01:C1:14:E2:D2:F0:3B:FB:D0:CC:C4:77
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/J3QRb6y0ijYBwRTi0vA7-9DMxHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14::/29
Signature Algorithm: sha256WithRSAEncryption
97:0b:a7:31:85:ae:61:af:dc:39:5a:1d:05:8c:1c:72:43:1a:
13:f0:cc:e4:60:9b:b4:1f:da:3e:ca:c8:8a:6f:5d:9e:30:16:
f6:9b:6f:3c:23:84:ce:c5:fb:cf:35:85:b9:58:51:90:b0:f9:
b1:7a:51:32:58:27:ef:fd:32:41:73:9f:aa:b4:e4:95:bc:53:
34:59:19:f0:9b:57:d6:77:7f:4d:77:17:69:73:a4:d7:d5:ba:
a4:4b:22:f0:f4:b3:30:79:37:42:3c:38:27:ae:4c:16:8b:66:
b9:ec:5c:3e:b1:55:7b:74:f7:98:7c:9a:44:06:b3:91:87:08:
92:2f:69:40:e5:a6:94:e1:08:0d:b0:9e:ab:33:17:7d:aa:e0:
c1:a3:d7:8f:1e:bf:4f:4f:36:91:b2:18:cf:66:37:4a:d7:e6:
13:e9:d0:02:f5:6f:60:dc:00:55:9c:fe:85:85:72:1d:50:b4:
69:0c:e0:e9:f6:6d:a2:95:47:35:8d:aa:e8:eb:ce:3f:9a:83:
9e:fd:d8:f0:39:02:70:2a:fa:2b:31:df:a5:3f:e0:6e:2f:5e:
0e:32:5f:7d:ee:22:23:e2:10:b8:19:8c:20:ff:31:57:43:64:
5c:42:07:99:b6:f2:60:9d:31:05:e7:d1:75:29:39:bc:b1:69:
f1:b6:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org