Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/F_y0ZqRmOJGYQ9D1eTHSRr4EA-g.roa
File: F_y0ZqRmOJGYQ9D1eTHSRr4EA-g.roa (raw, json)
Hash identifier: Abu7h4ImueqxBUYrbCd1F8mdK0ZZ1Mfw+T9C5ZacKqQ=
Subject key identifier: 17:FC:B4:66:A4:66:38:91:98:43:D0:F5:79:31:D2:46:BE:04:03:E8
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01856C9CAAF6F832A31690F9B6E7F1A9ACA6
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/F_y0ZqRmOJGYQ9D1eTHSRr4EA-g.roa
Signing time: Sun 01 Jan 2023 09:14:44 +0000
ROA not before: Sun 01 Jan 2023 09:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199491
IP address blocks: 2a00:1908:e000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:aa:f6:f8:32:a3:16:90:f9:b6:e7:f1:a9:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 09:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17fcb466a46638919843d0f57931d246be0403e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:42:02:d6:67:76:ca:47:13:83:d0:a4:40:
82:d4:bc:4c:00:75:06:16:88:d1:06:6b:78:62:86:
6e:db:cb:eb:c5:2f:51:d7:fc:4b:e3:da:10:10:60:
89:a8:8d:42:30:7f:2e:67:d5:b4:30:40:26:85:0f:
d2:80:4e:54:cf:81:16:a2:c7:e5:19:5b:60:11:8f:
db:67:7e:d7:c7:7d:0b:47:35:fd:87:2d:78:42:93:
3b:33:08:ab:69:50:87:00:c8:20:07:74:2b:fe:9c:
bc:47:7f:8b:fd:d1:07:4d:cc:f9:b6:01:d6:3f:72:
ca:6c:69:b9:9b:4d:f4:58:67:6e:55:cd:bf:7c:ac:
7d:68:e0:c0:5c:2c:34:3d:72:a6:59:da:ba:5a:b7:
48:ad:25:5f:b3:aa:b3:89:7d:6e:5c:32:f6:2b:e4:
a8:4d:d8:87:f8:3d:81:89:7a:e2:b5:aa:c8:37:7b:
49:82:89:d2:c4:51:9e:a2:4b:22:88:c9:35:eb:92:
4c:51:fb:c0:af:a6:7b:bf:92:6d:53:56:94:31:98:
00:08:24:c0:34:f4:33:6c:94:16:42:2e:81:b1:cb:
0e:81:a8:74:2c:df:21:69:77:e7:61:14:4f:da:6c:
6f:fb:58:3b:df:c5:4d:95:3b:d8:bf:a2:8a:eb:12:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FC:B4:66:A4:66:38:91:98:43:D0:F5:79:31:D2:46:BE:04:03:E8
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/F_y0ZqRmOJGYQ9D1eTHSRr4EA-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1908:e000::/48
Signature Algorithm: sha256WithRSAEncryption
59:0d:3c:28:76:98:c0:77:a2:b2:dd:e1:0d:72:bc:22:2f:14:
00:4f:18:93:97:2e:27:8a:69:3c:d7:eb:ff:98:91:04:12:83:
69:b2:a0:f7:bd:0d:89:13:35:8b:ca:31:60:6d:64:e0:fe:b1:
cd:6d:37:aa:9f:2a:a5:e9:52:8e:0b:2d:4d:7f:bf:00:7a:d3:
c4:d8:be:33:ac:15:3f:8e:07:2d:93:e1:f8:d7:59:0c:7d:8a:
be:b0:80:9b:b9:92:71:6e:3e:c2:81:0f:5d:a6:f6:6a:1e:7a:
d8:49:d7:65:d5:62:f2:3e:f8:69:70:12:9b:81:7b:08:6e:de:
6b:b4:b2:ee:34:2b:ea:3e:61:1d:56:cc:0b:8d:c4:d6:87:e8:
a2:0f:d6:80:bc:65:a3:7d:43:54:36:a2:93:1a:64:bb:e0:8c:
09:a8:05:ef:7c:e5:13:d6:46:8a:91:4a:99:92:47:35:ef:9c:
c4:d9:1a:8f:6a:5d:84:84:c9:72:46:70:30:e8:94:71:df:38:
60:15:25:de:35:21:b4:b4:b3:a8:ab:b7:34:8c:05:0b:a6:c1:
61:3a:5a:2a:a9:a9:2e:e5:93:88:29:32:e3:48:3e:69:f0:07:
fa:41:5d:05:78:91:0e:bc:9a:71:95:cf:73:2d:a7:c2:38:9e:
ad:d3:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:13 2024 by rpki-client on console-ams.rpki-client.org