Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/1YFLw3D7EgSjqNUv0saYy8FpDZo.roa
File: 1YFLw3D7EgSjqNUv0saYy8FpDZo.roa (raw, json)
Hash identifier: JAzWJ56BhgDvKQpiXq3FLX7W3H/2liWuB2lLUEFxiXs=
Subject key identifier: D5:81:4B:C3:70:FB:12:04:A3:A8:D5:2F:D2:C6:98:CB:C1:69:0D:9A
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0192B0782713FA318BADDE3B53481C64075D
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/1YFLw3D7EgSjqNUv0saYy8FpDZo.roa
Signing time: Mon 21 Oct 2024 19:05:16 +0000
ROA not before: Mon 21 Oct 2024 19:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214145
IP address blocks: 2a01:e140::/44 maxlen: 48
2a01:e140::/48 maxlen: 48
2a01:e140:1::/48 maxlen: 48
2a01:e140:2::/48 maxlen: 48
2a01:e140:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Oct 2024 20:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:78:27:13:fa:31:8b:ad:de:3b:53:48:1c:64:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Oct 21 19:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5814bc370fb1204a3a8d52fd2c698cbc1690d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:38:63:ff:01:fe:8a:fb:86:54:d8:80:2a:
01:44:e0:2e:6c:86:01:df:d7:09:57:50:b7:aa:7e:
e0:8c:72:21:10:c8:cc:f3:92:07:dd:dd:32:c9:77:
cb:16:80:c8:a3:e6:04:15:cb:a6:81:a4:84:cf:42:
8b:52:c1:68:5c:96:e5:22:0b:73:e5:2a:e4:92:26:
f1:5b:9b:8a:68:6d:95:d8:ff:4f:e2:54:77:a7:ba:
68:cb:97:60:7a:d8:16:25:77:a5:17:b6:8a:b3:97:
b4:dd:e6:0e:9f:ae:60:4e:1a:ba:df:b7:76:45:2d:
c7:e4:19:34:89:2d:87:c0:99:87:a5:1c:0f:7b:75:
01:17:73:45:ac:93:d9:97:18:49:64:23:bc:a3:62:
b3:a9:53:3c:fa:8d:5d:85:40:0a:79:7a:25:16:cc:
f2:d0:2e:65:a9:93:86:d0:f8:a0:a2:6b:4c:48:b8:
d4:07:71:1c:bd:dc:52:86:95:e5:f7:02:de:72:32:
d0:c4:c8:e5:73:43:62:db:61:cd:72:90:fa:a4:24:
41:2f:e2:51:84:d0:47:f9:f6:04:a3:9d:46:31:8b:
a4:dd:19:3c:e1:c1:b6:48:16:36:26:a0:22:7a:d3:
09:97:d5:fc:ee:fa:8e:33:57:9d:cc:22:f9:a3:19:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:4B:C3:70:FB:12:04:A3:A8:D5:2F:D2:C6:98:CB:C1:69:0D:9A
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/1YFLw3D7EgSjqNUv0saYy8FpDZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e140::/44
Signature Algorithm: sha256WithRSAEncryption
90:22:05:fc:ef:90:c7:1d:e2:84:c8:20:02:e3:4d:a2:83:78:
00:07:84:a8:9c:d5:6d:89:6c:fd:36:a9:1d:a7:2c:da:16:15:
65:39:a5:d6:76:17:bd:25:f7:7b:1b:ad:27:56:a6:e8:4b:07:
26:e4:91:d7:cf:36:06:38:14:f8:6b:19:63:25:e2:3d:d9:4a:
66:b1:0f:3b:eb:33:19:a8:f9:b8:fd:a9:24:de:db:7a:22:14:
15:77:29:8c:54:39:c8:f5:aa:2a:79:46:fe:33:97:8b:1c:8b:
8e:b3:30:38:0b:1b:03:46:93:7b:2f:96:f6:f7:d7:7d:6c:f1:
9c:d1:63:54:95:02:55:98:4c:7e:ad:33:af:72:24:23:31:75:
0a:f7:51:3e:24:8e:98:9c:56:91:fb:b2:f6:83:13:7e:73:94:
80:34:01:58:26:c0:29:32:e4:61:59:57:b1:e6:b4:3e:0a:3d:
20:8c:56:b2:08:04:2e:cb:8d:6e:06:39:a8:cc:f0:bb:17:e5:
26:98:ff:ee:e8:40:d0:30:d1:9c:10:6f:bb:88:e2:8b:46:d8:
fd:8c:11:75:46:fa:9e:04:68:6b:a5:d6:30:07:e6:cc:0e:ee:
df:92:10:6e:6e:f5:f3:32:10:c7:3d:19:e4:b6:d9:a1:7c:bc:
d5:aa:33:69
-----BEGIN CERTIFICATE-----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Generated at Fri Oct 25 22:39:18 2024 by rpki-client on console-ams.rpki-client.org