Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1R-LNWj7uOdTPuv3TRhqhoOuFQU.roa
File: 1R-LNWj7uOdTPuv3TRhqhoOuFQU.roa (raw, json)
Hash identifier: Tq6H3YJkBgfKsevENDqg4j4vOUWe7dpN3Xp4+c+33Ac=
Subject key identifier: D5:1F:8B:35:68:FB:B8:E7:53:3E:EB:F7:4D:18:6A:86:83:AE:15:05
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 01856F4288F9650949EF6ECAF8854766B6BD
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1R-LNWj7uOdTPuv3TRhqhoOuFQU.roa
Signing time: Sun 01 Jan 2023 21:35:09 +0000
ROA not before: Sun 01 Jan 2023 21:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:4540:1000::/48 maxlen: 48
2a0a:4540:220::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:88:f9:65:09:49:ef:6e:ca:f8:85:47:66:b6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 21:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d51f8b3568fbb8e7533eebf74d186a8683ae1505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:36:49:b6:97:6c:96:24:54:f9:5c:bb:c5:
6f:bd:9a:16:ad:fc:5d:cd:c6:1a:b4:8c:c1:70:60:
a8:db:6f:e2:34:5e:67:fc:33:ee:16:43:0a:2e:48:
ef:84:50:5b:89:b0:a5:6e:a3:a4:05:9f:fe:38:6d:
71:f6:12:25:e0:15:6b:c3:5a:e1:ad:08:a5:aa:6c:
d6:3d:c3:b9:82:d5:78:55:a6:a3:64:af:20:fb:24:
a4:52:85:34:18:9a:5f:bb:20:6f:3e:e2:73:f2:24:
ea:7c:c5:f7:ff:12:ab:f4:7a:f2:53:b2:15:8b:cc:
bb:33:ef:c8:28:3c:de:f4:ee:a7:ea:c7:fe:5b:83:
b3:df:c4:41:7d:62:be:52:9f:23:f9:57:21:c9:08:
e0:d8:8d:2b:17:21:74:43:3d:10:b3:9d:55:95:5e:
d0:bc:76:c4:3f:39:96:37:96:55:9f:10:c6:ba:b8:
77:0a:ae:eb:bf:4d:75:00:25:35:92:02:45:24:de:
d7:12:2e:1a:85:a6:64:3b:06:05:12:b4:e2:9b:03:
fe:63:43:1a:e0:a8:9d:ad:d8:02:db:ef:27:39:5c:
34:34:d8:c8:14:7e:b9:29:14:9c:fe:6e:f4:03:5d:
ea:08:57:a2:7e:5b:b9:ad:e4:01:e7:cb:ad:26:46:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:8B:35:68:FB:B8:E7:53:3E:EB:F7:4D:18:6A:86:83:AE:15:05
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1R-LNWj7uOdTPuv3TRhqhoOuFQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:220::/48
2a0a:4540:1000::/48
Signature Algorithm: sha256WithRSAEncryption
64:37:d4:9e:de:2e:46:16:e0:75:90:19:ae:34:60:16:98:29:
6c:2d:4f:02:7d:94:df:1b:8b:70:3b:b7:fe:94:4c:fc:a5:8c:
4e:b5:b1:b8:ce:3d:55:ab:93:9d:90:d0:b2:9c:c5:d8:1f:28:
ef:28:1f:a9:8b:7f:83:92:cc:08:8a:3c:a9:d7:56:44:eb:dc:
db:7a:dc:81:fc:b2:87:71:50:00:20:8b:b8:d0:33:48:39:0f:
2c:60:63:6f:9e:bb:d3:eb:49:dc:bf:4f:df:d6:8f:74:c5:51:
d5:8b:63:d7:12:b6:3f:b9:48:8d:fd:e7:c5:55:4f:b7:2b:fd:
ad:00:43:f3:8c:55:63:51:7f:44:89:26:67:d3:49:32:61:d2:
22:88:e1:fe:3d:69:51:84:e3:a2:64:86:0a:d9:6b:d5:96:4b:
07:a0:51:6c:8c:91:5e:6d:c9:8b:c4:60:a4:9e:be:7a:05:27:
48:aa:09:42:98:00:a0:3a:1b:c3:11:ce:ea:ae:16:8b:2e:86:
bc:c1:a9:09:cc:22:b3:f4:0e:82:12:4b:1a:ea:96:0b:f4:4c:
2a:84:c8:02:8a:62:5c:a1:78:56:21:c7:6a:1a:be:9f:e1:ab:
5b:d9:5f:1d:22:47:be:a0:45:ba:e5:62:73:de:d3:61:28:dd:
30:7a:ce:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org