Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/fbMj_hU-oSBSNmKZ55G27sOA5EI.roa
File: fbMj_hU-oSBSNmKZ55G27sOA5EI.roa (raw, json)
Hash identifier: sH/dudyPdgZi/OYt8Z7mMmvxCLER+Ye605fpQAzm00o=
Subject key identifier: 7D:B3:23:FE:15:3E:A1:20:52:36:62:99:E7:91:B6:EE:C3:80:E4:42
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 018C43A3264B20FF646C52A46B2307B254AC
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/fbMj_hU-oSBSNmKZ55G27sOA5EI.roa
Signing time: Thu 07 Dec 2023 09:36:54 +0000
ROA not before: Thu 07 Dec 2023 09:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33988
IP address blocks: 2001:67c:14c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:a3:26:4b:20:ff:64:6c:52:a4:6b:23:07:b2:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Dec 7 09:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7db323fe153ea12052366299e791b6eec380e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:37:fa:bf:23:ea:5e:d4:b5:60:89:84:b2:
e7:8a:db:27:9d:0e:5b:8b:ef:ce:e8:04:6b:35:bb:
5a:d7:bb:fe:7c:a3:72:4c:c8:a3:5d:b0:65:42:54:
4d:ae:b4:f3:d0:fe:64:40:66:f1:30:72:37:21:37:
06:c3:46:d8:25:69:0f:85:a0:14:4d:c8:c8:fd:e4:
5b:3c:03:84:a7:15:17:72:a1:a0:13:6d:e8:f0:4e:
e1:76:78:7b:35:c4:78:8d:cb:f4:38:6b:57:6d:28:
f9:5e:e4:3e:17:69:20:83:c3:97:e8:c1:a2:9e:91:
49:38:22:49:97:dc:9d:16:52:ca:8e:f3:2c:4c:be:
41:31:6f:98:1d:ed:8b:7d:f1:70:01:e6:b4:93:15:
53:e5:47:53:f6:87:e9:30:08:82:25:98:84:24:c2:
2d:f6:8f:40:83:83:3f:9c:f1:f1:3e:54:85:e4:38:
f7:7f:d3:16:b7:63:26:e5:aa:34:ab:1f:c0:47:d8:
21:e8:16:28:d1:05:30:b6:ee:7e:94:b1:42:ef:37:
be:e2:6e:76:3a:e1:17:49:2c:8e:7c:e5:cd:21:75:
64:89:a9:b0:b6:5d:9c:f2:08:d6:63:9d:0e:90:78:
7e:67:cd:8c:fe:a6:a9:78:5a:89:f2:70:87:9c:e3:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:23:FE:15:3E:A1:20:52:36:62:99:E7:91:B6:EE:C3:80:E4:42
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/fbMj_hU-oSBSNmKZ55G27sOA5EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:14c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b1:a1:e8:fe:ed:8b:88:17:57:f1:ad:f8:c5:02:fb:b1:a1:
3c:64:d2:75:53:5a:77:ef:3f:67:7f:b5:ba:49:5c:fa:74:3c:
af:32:3f:be:ea:c5:25:c6:3a:52:3d:9b:d7:67:0f:fb:0d:5d:
71:51:68:a5:ce:a5:1a:81:b6:6a:2d:b8:0c:f7:d5:36:22:81:
7e:92:4c:2c:ee:fd:c2:cf:6b:1f:de:56:ba:c4:b6:5e:a7:34:
57:23:a4:d6:2e:8c:bd:c3:e3:85:0c:05:10:21:01:55:18:ea:
7f:56:05:1c:2f:96:de:79:25:bc:5c:26:16:6f:3f:95:78:18:
d1:3f:29:02:49:09:db:96:7a:3d:db:e0:77:40:9b:89:20:18:
32:b1:02:55:87:54:46:f9:8e:57:09:83:a0:45:2f:13:39:19:
b3:df:dd:d8:ca:0a:b3:9d:79:6f:5a:b5:c3:71:00:c4:85:5d:
d6:ef:7f:ab:ad:34:8f:da:90:dd:e7:3a:ea:bb:2f:b5:ae:18:
de:0d:30:c7:4e:6e:51:b5:37:3a:bb:94:58:66:86:89:8a:c8:
c3:fd:42:db:29:c9:b9:0d:19:8c:31:75:17:42:d5:53:77:60:
10:23:ef:db:56:3f:77:5e:54:e8:3b:a3:a9:d3:7b:a1:04:43:
77:35:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:24 2024 by rpki-client on console-fra.rpki-client.org