Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/1-FzGsFBOjrQP427p2yH1FhUiC1U.roa
File: 1-FzGsFBOjrQP427p2yH1FhUiC1U.roa (raw, json)
Hash identifier: lhY9G2gi2KBqBS/XV/x8y2Oz7GlAtglFp3Son6PuRFQ=
Subject key identifier: F8:5C:C6:B0:50:4E:8E:B4:0F:E3:6E:E9:DB:21:F5:16:15:22:0B:55
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018CC3B6AB29DD49AD5BC2B83B2D20959324
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/1-FzGsFBOjrQP427p2yH1FhUiC1U.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206873
IP address blocks: 2a11:641::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Apr 2024 09:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ab:29:dd:49:ad:5b:c2:b8:3b:2d:20:95:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85cc6b0504e8eb40fe36ee9db21f51615220b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:05:2c:4c:7c:30:60:6c:18:34:98:5b:b8:
bd:78:ca:cd:37:f4:f6:65:72:8f:9e:ed:93:4e:5c:
88:1b:dc:ff:fd:5b:33:72:2f:92:81:1a:2c:89:58:
93:8f:aa:b4:08:90:c4:a7:63:d0:76:fe:f1:6f:c3:
81:99:42:ed:ad:ca:49:ca:4a:11:e8:87:16:1a:b1:
78:b5:aa:e1:f5:9e:db:07:ee:f2:16:b7:97:7d:df:
3a:9b:df:b5:2c:2a:90:49:ac:a7:f9:8d:34:f6:90:
99:a7:b4:21:63:e1:76:38:86:c2:1c:ff:b2:2b:ef:
1a:2f:82:60:ea:6f:b8:4d:7a:1d:e4:69:2a:34:b4:
21:0f:59:f4:d8:97:26:73:5d:c5:b5:0f:2c:7d:17:
4a:5c:bf:9d:fc:3d:63:1e:7b:7a:4a:87:f7:41:2e:
18:2a:d5:c6:46:33:fd:2e:ec:59:29:ba:f6:0b:21:
44:9d:90:f8:ad:e0:2d:89:1d:ce:a9:c1:2c:fd:3e:
29:f2:af:b1:18:71:6f:10:22:fb:9a:17:28:26:0e:
5a:3e:f6:7f:4f:c6:09:bf:5b:00:62:6c:6b:9e:73:
f3:59:4c:b1:ec:cc:26:6e:38:35:c8:00:9b:cf:c8:
12:d5:61:7c:cc:63:e1:1c:b2:24:5d:d1:2c:90:0a:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:C6:B0:50:4E:8E:B4:0F:E3:6E:E9:DB:21:F5:16:15:22:0B:55
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/1-FzGsFBOjrQP427p2yH1FhUiC1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:641::/32
Signature Algorithm: sha256WithRSAEncryption
59:4f:95:58:2a:6e:2f:be:ec:ec:87:dc:d7:f9:c6:ff:25:47:
3c:ff:ad:73:b5:67:ca:ad:1c:5c:ab:d3:83:c7:ac:85:45:16:
90:59:af:04:ca:ea:7c:b5:a5:e0:7b:cb:33:1f:6b:36:77:b9:
13:1b:8a:af:74:b1:ac:fb:4c:4f:4c:2a:f6:1a:64:6f:a7:46:
65:9c:85:d8:06:6a:bf:e0:59:da:e6:3e:11:05:76:0b:e4:c4:
08:79:4e:78:43:db:88:cd:d6:ae:d3:64:d5:8c:4a:68:27:9a:
cf:8a:6b:c1:9d:2b:7f:36:fe:bd:52:29:f2:32:a5:37:a2:e9:
a9:e6:44:af:78:56:d9:6d:67:aa:bd:18:51:2f:5e:da:c3:79:
f4:7d:cb:f6:6c:2e:79:6f:aa:86:60:23:62:40:57:f5:e0:83:
35:54:40:07:be:a8:72:60:1b:2d:92:74:1a:ff:54:2f:e4:e5:
ea:48:90:f6:78:0a:00:16:32:53:73:8f:df:d0:62:3e:0a:7c:
05:c9:9b:1e:3a:0e:6e:a7:80:6a:8b:01:12:a6:ec:69:10:f4:
eb:56:a3:e1:6a:a0:dd:a2:ee:66:a6:d8:32:6a:c3:4c:a5:5d:
8f:0a:eb:3e:af:8f:21:6a:8d:ae:1d:66:80:fc:0a:0e:6b:d6:
0e:5d:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org