Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/X8a_JO1KCPfFrJ_FRVvnc9kUvzQ.roa
File: X8a_JO1KCPfFrJ_FRVvnc9kUvzQ.roa (raw, json)
Hash identifier: zv555PLua8KL5AaQtfh/d8fz8SQkdR5JyBJ+3YtpTBc=
Subject key identifier: 5F:C6:BF:24:ED:4A:08:F7:C5:AC:9F:C5:45:5B:E7:73:D9:14:BF:34
Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial: 01856CB8465318E199289D09A5175350968F
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/X8a_JO1KCPfFrJ_FRVvnc9kUvzQ.roa
Signing time: Sun 01 Jan 2023 09:44:54 +0000
ROA not before: Sun 01 Jan 2023 09:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1715
IP address blocks: 138.63.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:46:53:18:e1:99:28:9d:09:a5:17:53:50:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Validity
Not Before: Jan 1 09:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc6bf24ed4a08f7c5ac9fc5455be773d914bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:be:58:30:69:ab:05:74:3b:9a:80:ce:74:
f4:d1:a8:ba:97:0c:c6:9b:d2:41:35:87:55:66:84:
dd:1d:65:30:a0:e0:d0:0b:fa:1c:ed:4c:7a:54:4e:
b8:69:ef:0e:51:2d:7e:dc:74:01:e4:c7:77:cb:09:
f4:33:99:40:18:c8:1f:3d:64:f8:28:7b:88:84:47:
8a:87:fe:f7:92:a6:1a:b8:9b:de:4e:ab:b5:3e:c6:
f7:67:57:0d:6c:1c:e0:26:65:ff:8d:d0:a6:b7:9e:
00:e0:4a:4f:3f:5d:d4:68:b6:c0:02:38:66:31:e3:
95:67:a4:ca:34:a6:6d:2d:88:6b:ae:ef:93:d3:b1:
c4:62:0a:b9:4c:37:a9:ac:c4:f1:cf:76:9d:59:eb:
86:68:7b:f0:53:c2:61:43:7e:12:50:56:65:88:fa:
35:f9:f2:06:32:ba:26:d4:12:e7:48:7a:de:ae:73:
43:b9:57:3a:47:9e:c8:95:23:3b:c0:18:12:b0:25:
e4:70:25:89:9f:64:50:34:c0:a0:19:40:8e:cb:4a:
6c:46:0b:9f:74:40:97:7f:37:02:53:5f:69:bf:99:
27:68:91:44:88:de:19:31:cd:67:1b:5b:b7:be:a4:
a3:79:de:5b:8d:c5:a7:56:cf:56:78:ed:04:00:e7:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:BF:24:ED:4A:08:F7:C5:AC:9F:C5:45:5B:E7:73:D9:14:BF:34
X509v3 Authority Key Identifier:
keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/X8a_JO1KCPfFrJ_FRVvnc9kUvzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.63.0.0/16
Signature Algorithm: sha256WithRSAEncryption
dd:b9:6a:98:43:23:7f:8f:b0:4b:ae:f4:34:95:0c:07:74:43:
36:f1:6a:3a:19:64:2d:9a:d9:ed:e8:00:fc:7e:dd:12:5a:81:
fa:8a:3c:ab:11:1b:ec:6f:6e:80:71:39:d3:c9:0b:74:23:18:
53:66:9e:f5:76:0f:aa:16:ea:ab:94:b3:3b:89:fb:e8:f1:7c:
be:b5:73:b0:cd:f6:3a:2b:fa:6e:b9:a9:ae:e1:64:df:e6:de:
60:d8:78:d3:a2:48:d3:e3:34:f6:28:9b:ba:88:3f:a4:6a:d7:
e7:7b:7b:49:3e:00:4a:b1:74:e8:77:fd:48:75:e8:4f:62:c1:
ee:c9:35:28:5a:db:6e:f5:45:09:45:c4:ed:de:1a:e7:78:64:
c4:46:41:12:ec:24:67:c3:ed:c8:31:67:5a:33:51:e8:24:1f:
e6:b1:61:a3:21:7b:99:e6:a0:de:1e:66:5d:84:c2:7f:47:34:
c1:5f:f1:f4:42:ae:9a:66:af:c3:fb:71:39:d6:a6:6c:09:c3:
dd:f2:f4:99:7c:f8:65:86:39:79:61:e4:66:bd:b7:5f:02:59:
e3:6e:f1:c5:db:68:6e:cf:d3:37:98:4b:0e:ff:87:0a:bc:ef:
55:35:76:c7:24:96:68:ce:86:4b:e0:a7:d6:ce:45:aa:9c:b8:
fa:cf:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org