Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jfo2mFHdxBZ7S7viU3lAi34T9vw.roa
File: jfo2mFHdxBZ7S7viU3lAi34T9vw.roa (raw, json)
Hash identifier: goRlcG5xdwPEHTVhap2mPJXXCNNSmLaOMigHYzFnqGI=
Subject key identifier: 8D:FA:36:98:51:DD:C4:16:7B:4B:BB:E2:53:79:40:8B:7E:13:F6:FC
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 01926141B35CB64C7DB269335FAA25C870D7
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jfo2mFHdxBZ7S7viU3lAi34T9vw.roa
Signing time: Sun 06 Oct 2024 09:55:48 +0000
ROA not before: Sun 06 Oct 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 2a14:6:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 06 Oct 2024 11:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:61:41:b3:5c:b6:4c:7d:b2:69:33:5f:aa:25:c8:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Oct 6 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dfa369851ddc4167b4bbbe25379408b7e13f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:4a:28:a2:01:ed:1d:e5:72:65:1a:f4:05:
c2:38:e0:8b:27:c1:30:ad:31:03:d4:37:a6:7d:d5:
1d:c7:d7:4b:29:91:a5:19:8b:fa:8e:30:b1:46:64:
fc:1a:0c:2e:05:03:30:a0:7a:44:ca:4c:0c:71:14:
2f:09:d3:3d:f3:86:d3:32:db:71:f0:63:25:13:12:
3f:51:3d:d5:31:b1:7f:2f:00:48:b2:f6:5c:1f:d8:
f8:f1:df:96:78:4e:e7:1b:f1:e1:41:67:42:cb:c2:
c1:79:33:1d:f9:6a:d6:c3:d0:ee:fa:b0:32:4f:ab:
f1:e4:05:51:c3:ac:99:cb:23:73:d6:56:11:5c:04:
61:94:4a:ba:df:b2:d7:eb:4d:3a:bb:ea:81:36:ac:
d9:d5:68:2d:d1:d7:35:e5:22:2e:93:db:34:3d:b1:
33:2b:4d:71:c7:32:0a:eb:46:ec:37:08:22:42:f3:
c3:f5:f2:8f:d1:c3:8c:70:61:6b:5d:d9:b1:50:e5:
c3:0f:ef:d2:d4:c4:05:9c:3d:54:90:56:87:9c:36:
02:fc:35:da:26:dc:2f:74:1e:73:49:fa:74:cf:3a:
a7:67:43:fd:42:9f:6a:57:c5:39:31:20:88:18:3a:
96:49:51:a5:37:78:75:cd:80:9d:f5:6b:93:25:19:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:36:98:51:DD:C4:16:7B:4B:BB:E2:53:79:40:8B:7E:13:F6:FC
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jfo2mFHdxBZ7S7viU3lAi34T9vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6:10::/48
Signature Algorithm: sha256WithRSAEncryption
36:08:4c:eb:5e:0f:e3:e7:0e:76:19:b1:a7:1c:ab:34:97:e7:
b1:7b:42:ee:ed:eb:a1:29:13:b9:97:a8:b9:60:1d:09:cb:03:
f7:24:13:7f:36:0e:e8:95:de:f4:55:57:cf:d6:81:5c:a7:70:
08:c7:92:02:8a:dc:0e:1a:95:b3:a3:b1:8b:a4:d7:bf:e2:9e:
52:1a:65:9a:5e:ff:45:31:9d:30:dd:ad:91:04:05:b6:96:3f:
ce:9e:9c:45:9b:3c:29:45:5c:6e:5f:49:c2:d6:e4:f7:fd:7e:
22:03:1a:4e:24:5a:9c:d8:73:cd:59:76:fb:a4:ba:23:25:f2:
48:be:d8:93:e2:f9:84:89:b2:9f:c9:d4:3c:ac:a8:30:ef:6d:
fa:6d:a2:e2:71:d8:80:70:e0:b3:eb:70:f5:aa:3f:6e:ec:ac:
f7:75:01:3a:5f:b6:f2:53:db:a8:20:cc:ed:c0:90:f1:f8:1d:
26:51:3a:68:46:b8:85:a1:44:c5:71:c1:0e:17:10:9a:38:e0:
b3:d4:2b:31:69:7d:52:d2:16:b5:4c:29:5a:4a:bb:49:9b:34:
20:44:c4:4c:2c:41:5f:b7:38:7e:3f:7a:9a:d0:62:91:4a:4d:
32:45:e5:83:81:51:6a:59:7a:16:8f:d4:13:ac:e6:3d:82:c1:
fb:fc:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 16:43:52 2024 by rpki-client on console-fra.rpki-client.org