Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/CRJmRaSfUb-AubLeF8BLjHqQKmU.roa
File: CRJmRaSfUb-AubLeF8BLjHqQKmU.roa (raw, json)
Hash identifier: OOtZya3YyCkJFvTd7/txrR4OSzgYSyXtJPPVHrCghoE=
Subject key identifier: 09:12:66:45:A4:9F:51:BF:80:B9:B2:DE:17:C0:4B:8C:7A:90:2A:65
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 01856F428BADDA0005FB7800098E4A44FC56
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/CRJmRaSfUb-AubLeF8BLjHqQKmU.roa
Signing time: Sun 01 Jan 2023 21:35:10 +0000
ROA not before: Sun 01 Jan 2023 21:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205723
IP address blocks: 2a0a:4540:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:8b:ad:da:00:05:fb:78:00:09:8e:4a:44:fc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 21:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09126645a49f51bf80b9b2de17c04b8c7a902a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:a4:e9:60:97:63:e2:19:93:30:3b:80:bf:
81:39:1b:d8:93:ab:ae:f1:40:07:34:d8:7c:bb:70:
d8:78:7b:17:3f:d5:e7:b8:a2:5e:f9:c6:60:8d:4a:
84:64:8e:5e:8c:a4:73:fa:93:42:e9:3c:69:bd:bc:
82:43:b3:75:68:97:8c:c4:a3:93:ef:cd:89:8a:fa:
71:ae:ac:38:a0:da:98:4e:40:fc:1c:97:4d:25:55:
ab:68:e7:a2:f4:2d:49:86:83:68:7d:fa:7a:69:e8:
2d:a8:d3:db:61:a9:f1:a5:75:3f:94:3b:48:83:6e:
97:01:b8:ad:4b:19:e5:92:80:6c:2c:4b:c0:79:f4:
5f:44:bd:9e:43:f0:dd:a1:b1:93:a2:20:8c:c8:3e:
f5:fb:b1:f7:ac:29:af:98:18:6c:e6:7d:8b:e8:46:
56:6a:74:d7:a7:4b:5f:77:47:da:85:fd:cf:61:87:
60:bf:95:1b:a2:8c:8d:ee:81:51:36:d7:1c:e9:27:
ed:54:84:df:a6:cd:76:41:e7:e3:40:81:18:e9:6f:
54:29:77:c1:7e:9f:58:4b:c8:51:20:4d:40:37:8a:
3b:be:ac:71:dd:3f:24:75:2a:66:4d:fc:55:8d:31:
6d:63:4d:10:6c:3d:98:ee:4b:9e:29:c1:ca:5e:ea:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:12:66:45:A4:9F:51:BF:80:B9:B2:DE:17:C0:4B:8C:7A:90:2A:65
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/CRJmRaSfUb-AubLeF8BLjHqQKmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:2000::/48
Signature Algorithm: sha256WithRSAEncryption
81:0a:a0:d2:3e:0d:0b:60:d9:70:ba:e3:73:35:d6:49:f1:09:
ee:0b:fa:12:16:65:08:d1:e6:48:9f:92:92:31:17:7f:8a:ca:
d9:ef:b8:6a:8c:93:f4:de:45:8d:45:42:53:7f:51:a2:c6:51:
2a:f1:fd:d1:13:a9:12:79:d1:1a:7d:7e:0b:23:28:90:c3:59:
3d:d7:73:6a:75:36:65:35:ca:c3:58:5f:c6:9d:12:74:28:24:
06:27:11:22:4c:11:ee:76:cb:d6:ce:c0:35:bd:07:d3:ac:b3:
9e:79:81:8f:47:02:11:6c:4e:92:1f:b8:38:9f:7a:b8:63:a0:
1a:82:e9:a4:a9:34:e1:ce:a2:ee:42:ba:81:47:1b:ca:31:da:
0e:d5:10:d1:d2:97:38:ac:50:9b:ef:ac:55:c0:bd:c8:0b:a3:
60:78:41:28:92:3f:14:f3:77:25:65:43:d1:60:c6:5e:01:cf:
4f:fd:03:c4:7b:b2:11:12:9a:9d:d9:72:0f:b3:d4:98:7b:ac:
1a:d4:84:24:f7:39:03:3c:4f:c0:04:a6:8e:84:94:a5:96:d8:
49:69:61:2e:fd:a9:f6:6e:29:dc:f5:56:04:6d:b4:40:6a:17:
7d:25:08:b3:05:bc:6b:ba:b4:e3:0d:c4:50:8f:42:46:c0:63:
19:21:79:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org