Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/xoR1VUOE2qX-hrC_5i0p_QDKKBU.roa
File: xoR1VUOE2qX-hrC_5i0p_QDKKBU.roa (raw, json)
Hash identifier: rG5wQa/0Z3qax7J5dLWVQyU1rYDGU4huBTr5A//aLhw=
Subject key identifier: C6:84:75:55:43:84:DA:A5:FE:86:B0:BF:E6:2D:29:FD:00:CA:28:15
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 0192E262D73B5D281BCAA31113CFD9270303
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/xoR1VUOE2qX-hrC_5i0p_QDKKBU.roa
Signing time: Thu 31 Oct 2024 11:43:01 +0000
ROA not before: Thu 31 Oct 2024 11:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214145
IP address blocks: 2a01:e140::/44 maxlen: 48
2a01:e140::/48 maxlen: 48
2a01:e140:a::/48 maxlen: 48
2a01:e140:10::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:62:d7:3b:5d:28:1b:ca:a3:11:13:cf:d9:27:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Oct 31 11:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68475554384daa5fe86b0bfe62d29fd00ca2815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:c4:74:ab:81:55:60:5d:a2:3b:56:ec:95:
be:a2:fd:4f:c7:9e:14:80:01:c3:c7:4b:52:71:ad:
1d:ea:5e:2d:b4:1f:e9:28:27:52:de:99:09:10:24:
b7:29:bb:07:3a:2d:02:1a:30:f4:f3:82:e8:35:e8:
69:e4:9a:e5:40:c6:b5:fe:e4:a9:a6:07:ec:36:bf:
7f:79:37:fc:fc:c8:21:0f:b7:97:fb:f6:b1:c0:96:
03:79:44:e7:68:a0:de:7a:e3:6c:a4:27:80:d8:b4:
4e:89:0d:f0:6f:df:6a:5a:46:f8:e6:18:d5:3e:48:
0f:00:ac:7c:a7:32:c4:68:72:6c:ce:c7:b8:4c:02:
22:78:3b:46:39:13:9c:e3:0b:34:9d:0d:b0:68:79:
61:1c:3d:03:0b:60:d4:b2:a5:21:ec:23:7e:d6:3a:
dc:ae:74:69:c9:99:71:ed:92:e4:c6:71:0d:70:80:
e0:6e:97:cc:21:58:59:5f:c8:89:9c:72:41:b9:b6:
c7:21:dc:98:d1:6b:8f:fa:b4:37:cd:a4:78:b7:bb:
aa:53:7c:2f:83:29:07:a9:cc:76:7d:9c:70:33:e8:
b0:ac:68:cb:e4:fe:75:b0:27:83:91:f1:4a:8d:81:
fd:a8:c5:dc:0d:64:81:04:86:ab:a8:ad:f9:2e:a8:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:75:55:43:84:DA:A5:FE:86:B0:BF:E6:2D:29:FD:00:CA:28:15
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/xoR1VUOE2qX-hrC_5i0p_QDKKBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e140::/43
Signature Algorithm: sha256WithRSAEncryption
33:86:14:86:a0:e6:86:3e:a4:fc:bd:75:83:63:64:ce:70:4d:
30:b8:c1:ee:ec:de:c7:37:af:bc:ec:09:c3:00:d7:eb:f3:31:
c5:27:05:3a:8a:83:3d:57:e2:42:a8:e3:9e:e4:dd:0d:f3:c2:
b0:cd:cc:62:d2:f7:52:5b:10:43:cd:f6:80:e8:98:27:c4:c7:
4d:e1:09:ad:f5:9e:27:d6:cd:61:83:4b:5a:7a:2a:0b:7b:f7:
d4:d3:8b:6b:80:08:84:68:7d:bf:d7:30:08:72:a6:39:0d:49:
2a:f9:ed:78:a5:5a:c1:69:6f:5d:bd:db:12:a6:cd:70:bb:85:
e4:ba:cf:9b:9e:98:2b:1f:ee:29:c0:aa:5c:52:e4:ad:7e:5e:
04:7c:90:23:de:18:b4:80:ca:58:b4:06:e9:d7:0c:c6:45:ea:
0b:eb:85:d7:8b:b3:84:dd:74:19:e8:3f:8f:fc:c6:6d:8a:82:
64:22:7e:66:0c:28:92:dd:0b:08:bb:77:ee:9a:72:9e:d0:15:
cc:32:20:9e:c0:77:96:94:74:c5:4f:57:c9:69:b7:dd:17:42:
08:26:15:49:af:13:2d:fe:f4:ac:cb:4d:28:8a:f1:c2:f9:a0:
a4:c2:43:cd:0d:d1:63:6c:09:d2:13:b0:cb:b2:22:f8:76:3a:
fc:b7:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 03:32:55 2024 by rpki-client on console-ams.rpki-client.org