Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/tjjDYSCWy2sv_fQzpF4-1mUEPBg.roa
File: tjjDYSCWy2sv_fQzpF4-1mUEPBg.roa (raw, json)
Hash identifier: VAIjWqELG6CqwixW0M++0A7Tq+JORNMf/zP/ZjNdUEA=
Subject key identifier: B6:38:C3:61:20:96:CB:6B:2F:FD:F4:33:A4:5E:3E:D6:65:04:3C:18
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 01856F428A19940FCA23517D3B3A26EB435E
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/tjjDYSCWy2sv_fQzpF4-1mUEPBg.roa
Signing time: Sun 01 Jan 2023 21:35:09 +0000
ROA not before: Sun 01 Jan 2023 21:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:4540:1000::/48 maxlen: 48
2a0a:4540:220::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:8a:19:94:0f:ca:23:51:7d:3b:3a:26:eb:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 21:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b638c3612096cb6b2ffdf433a45e3ed665043c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:95:28:bd:f1:89:b4:51:3e:4b:84:ac:3f:
8d:35:13:9e:a0:8e:0c:e3:0a:8d:e5:3a:43:2c:76:
01:d4:c9:ae:e0:98:5a:1a:81:e4:5e:cc:c5:a2:f2:
f1:56:05:1f:16:62:28:18:0b:ca:42:08:9d:5e:b9:
e0:47:9f:ac:56:37:07:5e:93:d2:e3:ad:8e:74:be:
68:0a:85:96:44:75:55:33:f8:3d:c5:8c:46:6e:47:
5d:de:a4:c0:fb:21:5d:8a:8e:e9:1a:c3:c1:f5:73:
bd:aa:72:0a:57:69:c7:3f:79:16:fb:14:a1:0c:bb:
4f:bc:d0:5c:1c:95:39:95:c0:50:e9:80:e8:7d:98:
8a:8e:88:b2:27:04:ca:e4:b9:28:39:2e:8b:1e:48:
6f:3a:9f:5e:b1:8b:55:f1:f4:44:19:eb:ef:61:23:
06:79:75:fe:71:93:63:00:86:5e:95:31:7c:b8:52:
23:0b:90:6d:8d:d4:f5:c9:63:37:ff:28:9a:f7:2c:
8d:bd:23:46:da:29:9d:b3:6c:f2:7e:f4:14:dd:b9:
29:18:b6:a2:86:53:b6:48:47:f3:dc:87:b3:64:a2:
6c:67:70:4c:9d:72:20:c2:b2:e1:ae:4d:65:89:47:
83:e8:cd:d0:01:c7:32:b8:c3:c6:1a:ac:dd:0f:f3:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:C3:61:20:96:CB:6B:2F:FD:F4:33:A4:5E:3E:D6:65:04:3C:18
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/tjjDYSCWy2sv_fQzpF4-1mUEPBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:220::/48
2a0a:4540:1000::/48
Signature Algorithm: sha256WithRSAEncryption
82:7c:63:01:4d:16:e3:22:7f:29:65:4f:91:86:56:0a:e6:28:
a9:37:82:c3:61:be:4a:54:2a:53:7d:82:2b:d0:fa:55:aa:26:
c0:a8:21:1e:c4:52:71:c7:75:f5:6a:f5:05:6a:c7:f1:c9:fa:
d9:55:ca:ad:6f:68:dc:e2:b6:72:0f:26:62:70:44:e2:a3:eb:
82:c8:a1:36:21:b2:09:4d:3f:b2:2a:a5:c1:2c:dc:84:22:03:
0d:ac:73:34:bf:85:43:4a:4b:db:56:85:96:ab:43:7f:c2:7e:
19:1c:20:43:43:3c:62:14:a0:dc:71:82:c4:35:e8:18:b0:06:
0a:82:1e:89:09:2b:12:b7:c6:1f:41:be:68:bd:d4:07:a3:0e:
43:e8:db:3e:9b:d8:12:ef:18:f6:e2:ce:3e:fa:3f:8f:73:06:
df:23:5c:4a:40:e4:64:ea:70:73:f4:fe:60:f6:4b:1b:06:e7:
85:07:fa:d5:ac:c8:5e:63:de:fd:bb:61:55:37:6d:15:c2:c0:
1d:09:6f:fb:c5:35:f3:6d:c3:98:9b:4e:04:23:6c:54:6d:2e:
7b:92:95:25:91:f3:b3:72:d3:6e:db:b2:22:f3:01:af:43:e8:
ac:a6:5a:e1:74:89:ea:74:06:82:4f:e1:9d:08:0c:fa:f2:b8:
9e:53:8b:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org