Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fjF_pdnq-OJCfxqZG04kA3BQyRI.roa
File: fjF_pdnq-OJCfxqZG04kA3BQyRI.roa (raw, json)
Hash identifier: I593zs+u6x8YIrK6Cr7ZZOW29Z7Nt7R6W+jhPFssKpA=
Subject key identifier: 7E:31:7F:A5:D9:EA:F8:E2:42:7F:1A:99:1B:4E:24:03:70:50:C9:12
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018ABDC3C0C2D6589985BAB5FEE143F0BEC2
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fjF_pdnq-OJCfxqZG04kA3BQyRI.roa
Signing time: Fri 22 Sep 2023 16:40:37 +0000
ROA not before: Fri 22 Sep 2023 16:40:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139317
IP address blocks: 2a13:b487:4200::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:c3:c0:c2:d6:58:99:85:ba:b5:fe:e1:43:f0:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Sep 22 16:40:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e317fa5d9eaf8e2427f1a991b4e24037050c912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:ee:65:a5:ea:fc:84:14:5a:09:7e:49:07:
fc:b1:26:7e:38:f8:53:b3:86:88:de:39:a8:15:51:
54:b1:06:9c:c3:61:70:cc:cd:f3:03:da:54:c2:9d:
55:28:20:44:57:b5:e3:26:77:83:75:62:5d:66:27:
20:db:0e:cb:33:a8:63:4a:e5:ee:65:10:90:e9:b9:
6b:5b:63:83:30:a1:4c:cf:8a:4b:22:dd:2b:e6:43:
1a:aa:e2:11:33:14:ac:0b:23:89:1d:5e:bd:ee:2a:
11:c0:a9:a4:73:3f:ff:84:7d:2b:f1:2f:f1:84:22:
9a:c4:03:10:5c:c9:e7:d1:a3:47:97:35:df:dd:27:
e4:a4:ca:f4:56:4d:26:cb:9c:aa:61:01:dd:cf:fd:
c3:a8:a3:85:9a:a5:d8:b4:19:c6:72:e6:af:e4:0c:
86:92:b2:3a:c2:74:13:68:61:c2:d6:c4:4d:60:95:
b5:fd:56:07:f5:7b:3c:d4:79:03:8a:87:c2:43:cd:
11:c8:ea:0c:4c:97:4f:c2:ae:68:9f:20:5b:36:0a:
1d:94:68:98:64:88:fe:d4:55:7a:11:8c:12:a7:5d:
af:cb:b9:03:e8:60:a3:24:ba:30:1f:d2:50:7d:0b:
22:61:86:6c:77:bd:5f:ac:89:eb:8f:92:52:71:95:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:7F:A5:D9:EA:F8:E2:42:7F:1A:99:1B:4E:24:03:70:50:C9:12
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/fjF_pdnq-OJCfxqZG04kA3BQyRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4200::/40
Signature Algorithm: sha256WithRSAEncryption
03:ab:d3:70:bb:5e:1a:93:ee:a3:a1:6e:a2:e5:e0:dd:3d:96:
a5:db:c3:5e:4d:05:79:30:bc:57:28:8f:61:0a:b5:df:09:14:
e0:3e:36:e1:8b:17:37:80:ab:6d:27:9f:b4:39:10:93:00:74:
73:b3:5c:01:50:6b:6d:e1:6e:33:1e:64:48:5b:1a:07:97:18:
cb:dc:99:18:4c:de:75:7c:0d:f6:4d:54:6b:d4:1b:4f:9d:25:
c2:58:01:d3:dc:73:a5:b9:a1:c8:a2:68:35:7d:a6:76:9f:7c:
1e:86:97:a5:54:88:74:7b:63:1b:1a:57:90:d2:17:32:cf:3b:
81:f3:1b:54:58:7d:dc:f8:1b:96:29:ec:a3:c7:2c:db:da:9d:
e2:e7:5f:c0:4b:eb:4b:ab:70:9f:b4:71:69:c6:1e:57:d6:d6:
e0:91:e2:8f:8a:ca:f1:4b:0b:87:26:e8:9c:8c:ab:15:e1:8e:
18:e7:6f:6e:4e:40:bd:34:f6:e7:ea:ec:61:64:c2:73:32:1a:
90:d7:e5:6e:44:bf:cf:70:37:71:86:2e:d9:51:ee:d6:c1:88:
fc:bf:4e:f7:bf:8a:e7:00:c6:93:ef:74:e1:fe:69:a2:7d:28:
9c:b4:fd:fc:63:87:c2:51:04:34:66:0e:84:bc:02:53:a1:91:
de:55:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org