Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/776wST5F-dJMigHW2YEr0TAKHY4.roa
File: 776wST5F-dJMigHW2YEr0TAKHY4.roa (raw, json)
Hash identifier: Zdz9nW3r1oCgcTzZF6z++qM9pOWhfeGdighDPqdeOnI=
Subject key identifier: EF:BE:B0:49:3E:45:F9:D2:4C:8A:01:D6:D9:81:2B:D1:30:0A:1D:8E
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 018572F129C92A85307DBDBC879739CF6295
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/776wST5F-dJMigHW2YEr0TAKHY4.roa
Signing time: Mon 02 Jan 2023 14:44:45 +0000
ROA not before: Mon 02 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5401
IP address blocks: 2001:1440:201::/48 maxlen: 48
2001:1440:202::/48 maxlen: 48
2001:1440:202::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:29:c9:2a:85:30:7d:bd:bc:87:97:39:cf:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Jan 2 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efbeb0493e45f9d24c8a01d6d9812bd1300a1d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:d0:01:4b:86:1a:67:4c:91:b8:cc:15:b0:
1d:6f:b1:36:75:5a:30:07:a0:83:e2:a6:7e:b2:47:
09:15:d3:9b:8c:4a:3e:91:0d:91:b9:5c:75:f3:e3:
75:f0:10:e1:fe:af:4a:b3:30:47:ed:8d:6b:90:58:
d1:7a:60:b3:a3:58:27:16:45:fa:c2:78:a0:10:7c:
c9:f9:91:66:0e:1e:2b:f4:e6:d7:f5:4b:e3:cf:f8:
14:d3:b7:b2:bb:ef:77:5c:57:bf:d5:b6:a7:95:f0:
25:07:c7:ac:90:5b:de:9a:28:7c:4f:24:e8:ed:1b:
c6:6d:42:ff:22:ed:f1:a7:a3:e6:cd:47:51:11:8a:
e5:e5:31:01:52:f5:04:9c:1d:e5:30:07:3a:7e:8e:
95:a7:08:f9:13:40:7e:7f:42:b5:1c:a2:81:67:c8:
ab:e7:e9:fd:3c:ef:68:0f:3b:03:ec:ab:0c:ae:4b:
5c:74:a1:ae:57:cd:b7:84:f9:ca:d8:7a:20:53:d2:
6f:ad:15:38:78:c0:0b:a4:c2:59:41:5a:5d:20:1b:
87:cd:c4:f6:9a:7b:3d:d2:78:4c:6d:2a:b8:f6:fa:
45:b8:b9:78:63:40:4e:8f:a5:0c:54:9e:ee:47:a3:
da:af:03:20:f9:db:cb:0e:1c:65:09:86:58:6a:d7:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:B0:49:3E:45:F9:D2:4C:8A:01:D6:D9:81:2B:D1:30:0A:1D:8E
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/776wST5F-dJMigHW2YEr0TAKHY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1440:201::-2001:1440:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
89:6a:b4:a1:83:2a:7f:d8:36:74:ec:9b:08:c9:45:ea:b1:d7:
e1:bc:b7:8b:5a:0e:9f:72:fb:0f:49:ee:79:53:99:84:e3:4c:
c7:25:fc:3a:1d:c4:87:4f:bb:c1:2a:41:83:fa:b8:1d:93:c6:
46:e3:5b:f5:a9:d5:b1:b3:8b:51:d1:0f:fe:e7:55:ab:bb:2d:
f8:36:a9:f0:24:8e:35:c4:2e:de:94:b3:05:ac:d6:0f:ed:ed:
2c:1a:82:93:a4:e6:21:15:f0:cb:5f:26:43:13:2d:ce:22:d4:
5d:a6:1d:b3:be:fd:90:e8:f5:00:f7:16:05:ff:ab:b1:da:50:
24:9a:26:6c:07:05:f1:5d:ae:da:55:c3:47:87:f7:6d:00:da:
a3:d5:b8:99:08:1d:21:43:c3:6d:f7:0b:e5:6e:8b:50:74:1f:
59:0f:36:4c:9a:ce:48:b3:a4:c3:6f:88:a5:73:c7:bc:5e:56:
d1:ef:c0:ed:41:95:db:69:3e:36:a8:89:f4:75:bb:3d:92:e7:
8c:86:87:b6:2b:b9:5d:00:d7:f4:57:99:4d:e3:38:d2:a0:67:
33:d1:1c:79:35:ad:59:4d:ff:50:58:48:ff:d4:79:ad:30:12:
61:c4:07:27:ff:9b:2e:c7:1e:0b:98:64:3d:23:6e:51:8e:d0:
98:be:7e:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org