Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa
File: Ft7q856nylvOrDv8OOdDp7g6KPU.roa (raw, json)
Hash identifier: 9fh5VyTbyxCqDfajV8jSepQVeQk17/kueRioWv4as8s=
Subject key identifier: 16:DE:EA:F3:9E:A7:CA:5B:CE:AC:3B:FC:38:E7:43:A7:B8:3A:28:F5
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01856D53CD61C9BB70441CBEA9DA22183899
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa
Signing time: Sun 01 Jan 2023 12:34:46 +0000
ROA not before: Sun 01 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 2001:67c:1928::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:cd:61:c9:bb:70:44:1c:be:a9:da:22:18:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Jan 1 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16deeaf39ea7ca5bceac3bfc38e743a7b83a28f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:bd:0f:ad:6b:3e:94:fa:0d:f2:1c:5e:6a:
47:ed:9f:16:d6:b8:25:3f:53:e5:ea:cb:7a:49:b9:
a6:a1:6e:67:6e:1a:46:56:78:93:58:a6:ca:03:69:
64:b4:1a:b4:e5:5d:e2:5e:a0:00:1d:f9:48:ac:47:
c8:0b:ce:a6:bf:0f:5e:fe:be:05:d1:78:fc:9f:e8:
50:5a:4c:b3:1f:5e:ea:20:ef:e1:28:49:c6:bd:af:
8e:56:99:38:84:d1:ba:15:98:3b:a4:ff:87:7c:43:
29:39:b5:64:bc:89:03:6b:1a:e5:a4:06:aa:cf:03:
8c:ca:e2:6c:92:90:3f:8a:a9:e2:1b:df:84:59:ad:
4a:38:eb:83:c5:6c:90:5f:32:a9:4a:7c:11:5a:1a:
74:18:d3:90:59:8c:8d:a2:78:bd:40:91:b8:59:0c:
a9:9a:00:a4:ed:8b:d6:62:73:00:e7:1e:1c:04:96:
f8:be:c5:aa:d1:83:69:ea:01:a6:59:eb:d3:94:14:
0a:67:48:8d:04:90:dd:95:22:62:ca:68:5f:15:2b:
e1:c2:a0:c7:63:15:7a:db:11:79:bb:54:8b:80:72:
12:4b:83:f2:42:c5:53:81:ae:5e:5b:05:45:2d:d6:
9b:ab:27:d2:87:75:6a:8a:ab:dd:d0:78:ec:fe:9f:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:EA:F3:9E:A7:CA:5B:CE:AC:3B:FC:38:E7:43:A7:B8:3A:28:F5
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/Ft7q856nylvOrDv8OOdDp7g6KPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1928::/48
Signature Algorithm: sha256WithRSAEncryption
20:6d:f8:02:c0:72:50:34:96:73:7a:94:fe:9f:cb:6d:b1:ae:
fa:b6:2a:fd:f4:63:b4:2d:f0:ab:2b:22:95:86:c8:5a:9e:ed:
36:1c:db:21:c9:6b:e2:45:04:bb:fc:a8:ef:37:9e:ec:80:1e:
a9:dd:da:d2:ea:1c:0c:9b:02:ac:39:33:12:2a:fc:72:1d:1b:
91:3a:7f:53:46:cb:c7:12:6e:c6:ad:60:1e:88:a5:52:c2:87:
f5:99:8b:d2:18:41:7a:cc:d3:93:d6:ae:de:f4:c6:a0:31:e8:
19:ba:8e:de:4c:97:36:92:10:23:9f:cb:9e:9b:35:49:4e:4c:
bd:38:6e:63:df:00:55:d6:4d:90:5a:ee:f2:33:6b:0e:30:4a:
17:b1:6c:66:7a:06:27:15:c9:50:ad:8f:a3:22:ab:52:bb:19:
0c:6d:58:ba:74:95:c9:fe:47:5e:50:24:b9:4b:04:5a:7c:44:
6e:2a:91:38:8b:30:b5:16:fb:2d:08:79:cc:71:ab:75:fc:cb:
21:de:ee:f2:19:66:fe:2e:57:13:b2:a6:9d:35:3f:6c:0f:4c:
e3:b7:f8:0e:87:26:0a:a4:83:8b:01:6f:03:27:73:fb:62:59:
66:2f:13:32:9c:18:9b:21:c1:75:01:e6:bd:49:65:d3:a1:55:
f7:d4:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:29 2024 by rpki-client on console-ams.rpki-client.org