Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ftPK-6vsqIWzvPJ06twYrs9Vgvs.roa
File: ftPK-6vsqIWzvPJ06twYrs9Vgvs.roa (raw, json)
Hash identifier: j2iTZWz1JaigxPDOwG9x+OlrrXBwQU/8ScwWx0zz0MA=
Subject key identifier: 7E:D3:CA:FB:AB:EC:A8:85:B3:BC:F2:74:EA:DC:18:AE:CF:55:82:FB
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018D844252635DFF844A8904FD0FFDC1112F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ftPK-6vsqIWzvPJ06twYrs9Vgvs.roa
Signing time: Wed 07 Feb 2024 15:49:15 +0000
ROA not before: Wed 07 Feb 2024 15:49:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215561
IP address blocks: 2a0a:79c0:200::/40 maxlen: 128
Validation: Failed, certificate revoked on Thu 04 Apr 2024 11:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:42:52:63:5d:ff:84:4a:89:04:fd:0f:fd:c1:11:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Feb 7 15:49:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ed3cafbabeca885b3bcf274eadc18aecf5582fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:fb:0d:75:0a:68:db:dd:26:19:20:cc:0b:
59:03:df:4d:8d:28:22:ad:a6:1e:eb:f3:3a:6c:9e:
b8:89:8c:75:4a:a4:94:2e:34:19:72:20:31:33:bb:
6a:b7:5b:a3:89:07:f8:ba:d1:5e:dc:7f:db:be:32:
f0:4a:5a:e9:9b:ee:72:de:6e:cb:77:85:25:e3:20:
ef:0b:ab:72:10:ce:c1:73:a9:d5:12:53:45:09:e4:
0c:39:9d:cf:31:72:93:2c:0a:54:7e:09:ac:ee:59:
2d:50:9f:70:45:64:85:97:fb:83:cd:6f:6b:8d:a7:
55:d3:86:cf:21:21:c0:d0:ff:73:e6:ab:2f:19:63:
d5:c0:46:34:fb:1b:4c:63:cb:69:dc:1e:c7:11:a1:
49:df:d4:6a:6f:99:d1:c1:f4:4c:13:eb:55:c1:9c:
79:e8:bc:f0:c4:dd:b4:e5:99:99:46:11:19:9f:e7:
93:9c:1e:61:27:aa:b7:06:d6:45:bf:da:31:a4:3d:
27:64:5e:57:21:a9:31:8a:f4:2a:86:8b:0a:4b:14:
b8:b2:a3:30:83:f6:4a:ee:ce:68:ab:c6:68:7b:5b:
0e:ec:e2:e6:ef:fa:54:ae:3f:05:18:9c:d7:b3:32:
03:98:e8:d2:85:36:16:ba:d7:08:0f:63:e9:27:cd:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D3:CA:FB:AB:EC:A8:85:B3:BC:F2:74:EA:DC:18:AE:CF:55:82:FB
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ftPK-6vsqIWzvPJ06twYrs9Vgvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:200::/40
Signature Algorithm: sha256WithRSAEncryption
72:1c:2d:70:e2:66:08:9c:89:34:47:e8:01:b5:59:c2:5f:bd:
87:05:a9:07:cc:f7:c8:dd:49:22:87:83:43:7a:83:ca:e2:ae:
4b:43:6d:98:77:27:10:6e:07:6b:ed:a0:bc:56:bc:ca:d9:30:
df:1d:4f:de:cd:15:2e:9c:fb:ce:07:f5:6a:35:72:8b:52:63:
35:0c:e2:46:07:25:79:07:ef:cc:e8:0a:c1:1d:5d:ec:88:d3:
ce:36:5c:1d:5f:2c:a6:7f:95:bd:da:cb:53:ee:08:f5:93:81:
85:58:e6:fa:d4:50:09:c8:0e:de:1a:5e:4f:11:86:14:cf:d7:
3e:d4:9b:f7:45:57:fb:b4:0f:8a:06:7e:8b:b0:7c:27:51:a6:
47:55:88:1a:d0:83:72:6c:47:86:0e:64:63:8f:81:20:aa:6c:
9d:8b:d3:72:37:7b:ca:b5:d4:3f:14:d8:4f:09:50:0f:be:5a:
c8:29:96:97:51:03:17:4d:e5:4c:28:e5:4c:c6:a0:79:b8:9d:
cc:25:ca:50:18:32:01:ce:b8:51:07:b9:f1:e1:33:e5:2f:53:
8c:3f:73:6e:80:fe:cd:44:8d:be:14:34:ad:79:a4:1e:f9:e8:
99:37:4b:76:e7:e8:2c:29:d9:05:4c:bf:69:bd:a3:bd:9e:2f:
63:8f:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:21 2024 by rpki-client on console-fra.rpki-client.org