Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/fk1-XF8fFCczRHUso0nLWCjZErk.roa
File: fk1-XF8fFCczRHUso0nLWCjZErk.roa (raw, json)
Hash identifier: 1icEwmABCIA7SPtJQ5PNo92BMf/+j7Cq7DCAZVG/w9U=
Subject key identifier: 7E:4D:7E:5C:5F:1F:14:27:33:44:75:2C:A3:49:CB:58:28:D9:12:B9
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 01949B6D6A56AF1DBD6EA8E963CC6538071F
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/fk1-XF8fFCczRHUso0nLWCjZErk.roa
Signing time: Sat 25 Jan 2025 03:07:06 +0000
ROA not before: Sat 25 Jan 2025 03:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 2a14:47c0::/32 maxlen: 32
2a14:47c0:e::/48 maxlen: 48
2a14:47c0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 Jan 2025 14:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9b:6d:6a:56:af:1d:bd:6e:a8:e9:63:cc:65:38:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Jan 25 03:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4d7e5c5f1f14273344752ca349cb5828d912b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:00:5a:90:8a:25:ac:0e:bf:78:ea:60:27:
b0:a5:a2:77:ff:49:66:07:3f:1e:6c:3c:53:19:fe:
e7:8d:92:29:7a:ce:74:b0:9d:f0:bb:92:a8:68:a1:
62:68:f2:db:a2:73:90:6a:af:93:2f:d6:95:67:85:
a5:a9:2a:3a:e5:53:16:65:24:1b:6b:b1:b6:63:1d:
ed:cd:b7:83:7e:51:27:39:00:dc:a9:c3:a1:53:ff:
5c:0c:53:97:91:c8:11:97:4b:d6:4a:c3:76:8b:a2:
5a:47:6d:d6:c0:73:e6:57:e1:cd:55:3a:a1:9f:fe:
5f:44:72:51:76:3b:39:e0:06:91:73:24:1a:b9:48:
64:06:ec:21:1d:48:80:14:09:c2:70:48:65:8f:3b:
02:be:2a:5f:33:ba:56:cf:ac:4e:e9:38:d8:21:8a:
16:0e:86:b1:83:51:e3:5b:ba:bc:86:3a:d3:f8:bd:
26:6d:d9:df:65:b9:21:c7:4d:63:2f:61:29:52:34:
cd:ce:a1:f7:4b:1d:5b:9d:15:c3:ef:7a:54:b1:ea:
dc:01:60:0a:5e:35:d0:da:26:16:6f:e1:6c:b4:9d:
f8:7e:26:0c:62:18:ec:92:43:00:79:a4:79:a3:0a:
08:68:7a:c5:b9:c6:1c:e4:15:d5:5b:b3:73:28:8a:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:7E:5C:5F:1F:14:27:33:44:75:2C:A3:49:CB:58:28:D9:12:B9
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/fk1-XF8fFCczRHUso0nLWCjZErk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:a1:c8:43:18:95:d3:a7:2a:e2:d0:aa:ed:cc:49:88:3c:4a:
47:57:f2:d2:ed:e7:ae:1a:92:1c:81:8a:8a:ec:cf:77:36:9b:
f1:7b:1d:28:ab:58:8a:91:58:3f:64:fe:61:6f:9c:96:e2:a5:
af:a0:f9:d0:40:03:fd:88:c1:74:69:4e:32:e2:f5:4b:55:6f:
c8:0d:f5:01:d0:ab:f3:ec:06:d6:82:d6:54:1e:cb:04:73:4a:
22:c7:a5:50:1e:c5:90:4f:1b:70:85:32:28:e1:e3:0b:10:c4:
3a:f7:22:59:50:ac:a7:06:74:b6:2e:a4:e4:83:52:40:d5:bc:
80:11:a0:dd:4e:bd:9b:dc:03:cd:86:da:e4:9c:c3:06:a6:09:
93:a2:ab:73:a4:e5:d2:70:15:60:a6:fd:84:65:44:b8:82:5b:
18:e7:f7:c9:5d:9b:79:f8:58:b2:6c:92:04:6a:9a:43:f5:77:
26:26:75:64:84:ce:99:82:75:53:75:2b:19:8f:5f:84:94:9a:
ba:e3:3e:45:46:ae:14:52:9b:17:23:73:ad:c3:fd:3c:dd:35:
9a:cc:68:fb:c8:0d:6a:cc:8a:66:ee:97:3c:03:2e:a4:59:b5:
08:7d:bc:39:27:98:ae:50:35:c6:cd:e3:a4:44:80:f4:48:90:
49:29:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:44 2025 by rpki-client