Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JFciAVCkoGGQ46QksnQNL1kTuyQ.roa
File: JFciAVCkoGGQ46QksnQNL1kTuyQ.roa (raw, json)
Hash identifier: 4ga7n4UQwdzFEXXQoayLSoAsBPiZGRYAnhW8KE5lm/E=
Subject key identifier: 24:57:22:01:50:A4:A0:61:90:E3:A4:24:B2:74:0D:2F:59:13:BB:24
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018AB8E20EC3849A019424E4B72BE12B8D8B
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JFciAVCkoGGQ46QksnQNL1kTuyQ.roa
Signing time: Thu 21 Sep 2023 17:55:37 +0000
ROA not before: Thu 21 Sep 2023 17:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 2a0e:dfc7:9c28::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:e2:0e:c3:84:9a:01:94:24:e4:b7:2b:e1:2b:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Sep 21 17:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2457220150a4a06190e3a424b2740d2f5913bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:b7:56:8e:e2:98:5c:e6:df:d1:3d:fc:f6:
5d:0c:df:d6:ef:a4:bd:04:ac:b1:2b:89:98:b0:30:
e5:f1:ea:d1:cc:8f:93:25:ba:20:3d:94:01:05:a0:
e2:af:68:be:f1:78:76:34:5e:a2:3c:40:3a:80:83:
4a:a4:31:80:4f:95:b0:32:f4:c4:89:7e:78:9d:f6:
a9:0f:31:ae:9c:88:da:69:84:5a:17:e9:fb:97:9f:
82:f8:1c:d9:a4:2e:9e:77:db:fa:0c:81:33:e9:5c:
2f:d6:d1:25:fc:7d:4e:4a:01:c8:81:c5:4d:a0:da:
d6:b0:50:36:18:03:c8:6e:78:06:5b:28:33:b5:cb:
d7:4a:f8:93:c7:1b:72:2f:9e:44:eb:13:87:d8:aa:
ef:1e:94:f4:82:fb:11:43:14:d3:6b:f3:af:dd:0d:
51:a1:eb:0d:7f:6b:b8:9d:64:f7:89:4f:df:3a:e0:
7e:ea:d3:f2:56:02:18:f2:23:ea:72:26:a8:5f:67:
83:e0:3d:1c:e7:21:2b:b1:21:62:55:fd:8e:2e:e7:
29:0b:ce:a8:79:fe:48:60:00:c8:10:c6:ea:bb:69:
3d:74:63:6a:38:35:68:ec:52:af:06:d5:94:e9:66:
a0:7a:d8:4c:df:cb:51:7d:eb:5a:6c:24:75:44:dd:
14:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:22:01:50:A4:A0:61:90:E3:A4:24:B2:74:0D:2F:59:13:BB:24
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/JFciAVCkoGGQ46QksnQNL1kTuyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc7:9c28::/48
Signature Algorithm: sha256WithRSAEncryption
0c:e7:25:46:4f:c3:85:a3:07:9d:cf:21:e9:c5:d1:f1:fb:fc:
c5:6c:25:7e:00:6b:ba:46:0b:8d:98:25:f5:6f:f1:98:8e:d3:
b2:b0:6a:79:c1:e9:a0:54:e1:ba:19:18:e7:9f:55:c6:ba:37:
6d:e9:63:0f:c3:4f:8b:96:75:47:91:01:93:cc:9b:36:cc:88:
2e:f8:33:f1:ad:af:61:ae:c8:bf:75:37:40:20:ca:b1:8c:25:
a0:f1:bd:15:f3:b3:06:1b:87:23:16:2a:94:2b:00:af:fa:a3:
34:94:e9:77:23:a1:65:95:91:41:d7:a4:3d:6a:36:1e:d0:be:
d1:f1:73:55:8a:a3:07:a6:ca:9a:ad:43:c6:58:7e:49:60:21:
59:7d:f0:b4:ff:f6:ec:c5:be:b9:41:07:2d:fc:05:a1:5a:a3:
33:0f:25:18:5b:d3:04:0b:46:16:a4:0c:1b:b8:1d:2a:7b:4a:
06:6b:f0:7f:1d:ea:5e:a5:2d:c9:51:99:68:b9:50:dd:6b:48:
6e:0f:a8:06:b9:4c:c6:ea:1b:73:f1:22:d3:95:42:81:09:db:
6b:ee:4d:34:c6:33:e0:02:61:2d:f8:08:10:97:e5:0b:b5:f6:
bc:ab:de:50:d7:f7:fa:46:f0:9d:99:5c:8b:43:04:0e:0c:d0:
8d:49:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:16 2024 by rpki-client on console-fra.rpki-client.org