Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/fibQ4bmohRxMK-ycQox9Y8k3Qqc.roa
File: fibQ4bmohRxMK-ycQox9Y8k3Qqc.roa (raw, json)
Hash identifier: XLCDRTyVrJzvbMRYgPPQsqTbijNRn2Ds4M14o2OQkOw=
Subject key identifier: 7E:26:D0:E1:B9:A8:85:1C:4C:2B:EC:9C:42:8C:7D:63:C9:37:42:A7
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 018A6EE4F8F3B19715D1B1616DC97A903AFD
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/fibQ4bmohRxMK-ycQox9Y8k3Qqc.roa
Signing time: Thu 07 Sep 2023 09:06:54 +0000
ROA not before: Thu 07 Sep 2023 09:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 2001:678:95c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:e4:f8:f3:b1:97:15:d1:b1:61:6d:c9:7a:90:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: Sep 7 09:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e26d0e1b9a8851c4c2bec9c428c7d63c93742a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:05:3b:b2:8e:87:7d:04:c9:85:e3:c1:a6:
93:99:62:9c:11:ff:c1:85:50:b7:48:67:f9:13:f3:
4b:b6:33:06:55:6c:b8:a6:cf:01:db:0f:62:f2:fc:
ee:a2:37:a4:2a:d5:1e:a1:d6:2f:04:63:c8:3e:73:
49:91:e4:6d:5a:e0:ce:e9:d7:7e:9a:28:31:8a:79:
9a:35:d8:c9:83:a9:21:26:64:7f:14:1e:ec:cd:a4:
68:47:4e:f9:17:a7:72:b5:df:9f:e0:20:92:35:9f:
50:f3:bb:70:07:b8:cf:a1:2d:bd:33:64:57:e8:85:
8b:70:1b:ed:33:b9:a1:72:6e:c0:cb:c5:38:bb:9b:
9b:ce:7f:8a:73:05:69:9d:60:c1:5c:3f:c6:3a:99:
d6:61:38:68:e0:56:79:fc:3f:ef:11:3d:d3:b5:34:
9a:35:e0:34:fb:0a:5a:b6:27:0f:cc:d6:a4:39:85:
2f:2d:92:9d:83:3e:74:3e:43:7c:f8:d2:22:fd:23:
17:98:99:61:31:a5:14:d8:41:d2:1a:77:0b:b3:c0:
74:b3:81:fe:b1:31:5e:6f:e7:86:f2:e9:02:7b:d6:
5c:74:00:3d:bb:d2:fb:fa:40:c1:06:b6:71:6c:8e:
58:19:e2:9d:87:c7:2c:08:2b:35:7f:68:c0:91:54:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:D0:E1:B9:A8:85:1C:4C:2B:EC:9C:42:8C:7D:63:C9:37:42:A7
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/fibQ4bmohRxMK-ycQox9Y8k3Qqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:95c::/48
Signature Algorithm: sha256WithRSAEncryption
87:32:f0:46:61:3f:5e:1c:0b:de:e1:cc:e5:19:15:de:62:1f:
8b:03:70:f5:4b:44:cf:94:cd:00:ed:89:a0:6c:f4:c5:72:b8:
53:87:9e:ce:91:a9:f9:f5:19:3f:17:69:c7:6f:81:08:5d:38:
cd:3a:19:ca:c4:1b:12:53:7b:32:4f:d8:51:41:e6:9d:a2:0d:
65:0b:ef:89:4b:9c:6f:52:3a:ea:87:48:2c:f4:0a:48:1e:db:
7b:45:93:69:30:cc:7e:1c:ce:66:f3:c2:d7:7c:76:31:52:bb:
f4:46:c4:40:6c:80:de:57:24:4a:f9:16:2e:56:5c:d3:94:99:
da:fa:7e:03:06:51:e7:08:c3:83:25:80:48:d9:52:8b:82:67:
4c:5f:c8:57:c7:de:02:52:3b:2d:80:93:05:6b:ec:6d:59:5a:
18:ed:28:27:1a:a2:28:81:d7:07:18:49:7f:8c:80:b2:4f:22:
43:23:06:ad:01:16:75:fe:e2:98:26:05:45:b8:2d:c6:4f:1a:
c9:31:63:61:0b:cc:fc:a7:fb:5c:b2:13:7d:62:6e:9a:76:30:
6a:43:66:a4:c9:f3:57:2b:86:63:ed:19:3c:9f:b6:4e:84:16:
19:94:cc:17:13:9d:f6:64:70:1a:df:95:cb:ed:dd:c5:89:01:
c6:ce:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:53 2024 by rpki-client on console-ams.rpki-client.org