Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/65XcU6682_nGeis5Vz5JROguPgI.roa
File: 65XcU6682_nGeis5Vz5JROguPgI.roa (raw, json)
Hash identifier: 0Sn3efNJmc4PkKkU0AOSxB8BQKXzvNwQQj9uIKqNvL4=
Subject key identifier: EB:95:DC:53:AE:BC:DB:F9:C6:7A:2B:39:57:3E:49:44:E8:2E:3E:02
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0192C57476C4E944E92497F776D72688080E
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/65XcU6682_nGeis5Vz5JROguPgI.roa
Signing time: Fri 25 Oct 2024 20:53:16 +0000
ROA not before: Fri 25 Oct 2024 20:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214145
IP address blocks: 2a01:e140::/44 maxlen: 48
2a01:e140::/48 maxlen: 48
2a01:e140:1::/48 maxlen: 48
2a01:e140:2::/48 maxlen: 48
2a01:e140:a::/48 maxlen: 48
2a01:e140:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 28 Oct 2024 23:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c5:74:76:c4:e9:44:e9:24:97:f7:76:d7:26:88:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Oct 25 20:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb95dc53aebcdbf9c67a2b39573e4944e82e3e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:e0:a0:15:fc:88:c5:c1:d9:95:46:25:13:
43:82:01:b9:07:f7:4b:d9:9d:21:cd:d6:4c:0b:28:
02:fa:5d:5f:06:20:eb:9d:6e:3d:95:2d:36:5c:cb:
6c:c9:45:bf:91:b8:e8:1c:ac:b0:e0:f0:bb:23:3b:
6c:48:38:4e:f0:9f:8f:90:31:1f:b5:90:b1:97:6d:
ef:f2:f4:49:cd:a5:3a:0e:8a:c8:62:3b:d5:1f:7a:
e3:b1:7e:36:26:23:2a:18:50:0d:8a:a6:88:65:38:
33:79:90:51:dd:30:b4:b2:f8:67:30:f9:d9:1f:c0:
9f:fb:00:f0:e6:27:3a:9d:15:58:12:39:a8:34:a6:
34:8b:a1:51:bd:b9:5a:f1:37:15:c5:4f:98:0c:25:
6b:00:12:e8:f8:4f:f7:85:66:23:dc:6e:ab:f0:ee:
40:c8:78:c9:c6:62:be:e2:48:52:d5:b9:76:7a:92:
4a:f2:4b:a2:ed:0b:9f:91:56:0c:44:88:a0:ee:6d:
11:1a:b0:fe:0e:7c:d1:6d:12:8d:e8:c6:b5:7c:cb:
d7:52:58:26:c1:d8:b8:af:5a:16:e3:1f:9f:9d:43:
2c:43:d9:7a:9e:29:ea:21:66:0b:d5:81:f4:1d:36:
3a:6a:32:9d:f7:6b:7f:cc:37:2c:96:90:3e:c6:d4:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:DC:53:AE:BC:DB:F9:C6:7A:2B:39:57:3E:49:44:E8:2E:3E:02
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/65XcU6682_nGeis5Vz5JROguPgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e140::-2a01:e140:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:b3:3e:40:dc:a7:6d:d7:ae:e5:15:f5:88:8d:34:9c:e4:80:
d8:60:8f:b1:4f:36:cd:6d:71:49:79:99:b4:61:d1:0b:a3:7f:
d2:54:b8:0d:eb:f9:7c:56:27:87:76:9f:76:d2:be:97:c1:68:
64:55:1b:42:4b:12:0b:50:90:5c:cd:5f:71:74:6b:43:60:a4:
5e:76:1f:95:09:ba:8e:e9:ca:21:d2:28:5f:61:5c:08:89:f3:
6d:19:05:ad:77:95:e8:ef:84:56:01:39:5e:88:47:67:35:ff:
79:a5:d2:9d:a4:7e:eb:0b:0b:08:69:06:d4:c0:5b:34:6a:1b:
23:a4:e8:7a:ce:e4:dd:60:b8:8a:4a:20:e4:01:e0:a0:43:ef:
16:57:b5:b9:3d:57:ad:de:87:02:19:20:c6:2e:5a:e5:ce:eb:
13:97:0f:1e:7e:68:0e:43:cc:f7:6b:b3:c4:34:e0:fb:48:d4:
f0:34:7d:8e:5f:1f:59:01:17:74:11:9a:90:f1:87:91:f5:7b:
09:8e:5a:75:dc:56:d2:e2:13:f2:83:4c:99:43:11:96:34:cd:
1e:88:4b:40:19:79:8b:30:3c:1b:89:e4:66:76:85:cc:4b:a4:
7c:2c:a3:bb:54:d4:4f:c4:46:7b:3d:3a:77:e3:1b:32:54:60:
72:32:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 01:20:27 2024 by rpki-client on console-fra.rpki-client.org