Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/JaNbXefZA_yHWQz9GX0ghc50Njw.roa
File: JaNbXefZA_yHWQz9GX0ghc50Njw.roa (raw, json)
Hash identifier: tbxnTiA3mnrvfg58hoGsqSBQIIKhXF1JPbI9cWda6yA=
Subject key identifier: 25:A3:5B:5D:E7:D9:03:FC:87:59:0C:FD:19:7D:20:85:CE:74:36:3C
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 01856F428C6E92744B32AFDC3159938F7F64
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/JaNbXefZA_yHWQz9GX0ghc50Njw.roa
Signing time: Sun 01 Jan 2023 21:35:10 +0000
ROA not before: Sun 01 Jan 2023 21:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213396
IP address blocks: 2a0a:4540:3000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:8c:6e:92:74:4b:32:af:dc:31:59:93:8f:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 21:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a35b5de7d903fc87590cfd197d2085ce74363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:e3:bc:00:64:c1:a4:70:95:f3:4f:0f:7a:
8a:e6:97:53:fa:8e:da:d4:b0:a6:9c:2e:6d:2a:28:
d7:a0:e8:64:0b:ca:24:9c:a8:9e:74:ca:69:8e:79:
29:ae:2c:70:b0:7f:c8:a3:05:a2:20:71:64:05:85:
c2:55:70:93:0f:1b:c3:b2:dd:fb:57:e2:e8:af:0d:
26:24:2d:fa:d7:c4:b3:58:9f:51:ec:0c:d1:a1:26:
04:5f:03:b2:27:25:b1:89:62:db:7e:7b:e5:bb:78:
6e:47:7f:cb:54:77:04:9e:77:6a:e5:dd:b3:7e:f2:
71:46:66:c2:53:e6:ad:68:7e:f7:c8:c4:ce:61:71:
9b:55:26:ff:64:32:c0:31:e5:5e:d5:1a:2a:79:f1:
21:1d:31:9c:d9:16:24:ce:95:d6:42:cd:9a:3c:d7:
a1:47:ff:ff:c4:74:46:8f:58:f3:dc:e2:4d:db:d3:
5f:2e:16:7e:aa:7d:55:30:e1:e4:67:43:f9:09:af:
20:65:88:3c:93:42:d5:70:aa:64:b1:07:02:99:ca:
27:7d:4c:2e:22:37:ad:0c:33:0e:88:21:22:3b:0b:
a0:5f:75:48:5d:ef:b4:f2:64:d5:b5:3a:44:cf:b8:
bf:2d:ca:ec:b3:51:df:f0:8c:05:41:da:9a:c3:b2:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:5B:5D:E7:D9:03:FC:87:59:0C:FD:19:7D:20:85:CE:74:36:3C
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/JaNbXefZA_yHWQz9GX0ghc50Njw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:3000::/48
Signature Algorithm: sha256WithRSAEncryption
26:35:78:ca:8e:be:3e:b1:34:79:59:4e:00:f5:80:ec:dd:5b:
77:4f:1a:d0:d1:12:df:f7:0c:a4:1b:4c:4a:34:22:f0:f5:98:
b7:11:3d:ab:c2:f0:c1:11:92:f2:f8:58:0c:e3:67:30:d3:32:
38:68:a5:c8:6c:80:7f:6c:04:6d:f5:e7:c0:7c:58:20:c6:f4:
9e:e6:43:76:a3:68:9b:73:c2:45:36:31:70:6e:66:55:56:6d:
06:58:2a:3a:af:e6:37:6c:d3:cc:d1:dc:8d:92:bd:86:07:e7:
0b:88:35:ab:39:0f:f1:5c:29:f0:4a:5e:b4:35:62:24:f9:06:
32:b9:48:03:92:60:5d:a5:5e:93:70:87:5a:1c:e3:d3:39:1a:
0c:b5:ea:61:e6:82:7c:0e:a0:74:e0:4b:f7:b2:58:40:82:ce:
1a:74:4d:fb:96:59:14:99:7c:c9:0f:4b:2c:84:1d:c2:04:a9:
2b:7f:33:46:8a:e1:cd:e0:f4:53:10:62:63:5f:9e:60:c2:97:
ea:b5:cf:71:00:29:b0:e8:04:1d:90:db:c0:3a:94:0a:1b:6a:
b9:b4:f3:5a:03:ec:54:a8:c3:0d:f8:7d:9b:4b:c9:1e:77:f6:
11:df:0f:99:49:73:83:41:7b:b6:87:9a:94:aa:a8:5b:5e:1d:
2d:32:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org