Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/FoSq3IE-zC2stPmOUyLXSHS5PVs.roa
File: FoSq3IE-zC2stPmOUyLXSHS5PVs.roa (raw, json)
Hash identifier: xMXRCmXs4UaJgxgYUFaWBNOlLVRwuZEnVGRJgzvxolQ=
Subject key identifier: 16:84:AA:DC:81:3E:CC:2D:AC:B4:F9:8E:53:22:D7:48:74:B9:3D:5B
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 0190171F2214F23955C626E2F6BE0AC38965
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/FoSq3IE-zC2stPmOUyLXSHS5PVs.roa
Signing time: Fri 14 Jun 2024 14:20:34 +0000
ROA not before: Fri 14 Jun 2024 14:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:27c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 15:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:1f:22:14:f2:39:55:c6:26:e2:f6:be:0a:c3:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Jun 14 14:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1684aadc813ecc2dacb4f98e5322d74874b93d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:7e:32:00:fc:59:1f:73:d1:5d:b3:c0:5d:
ef:92:08:25:69:13:0a:a2:e3:1b:13:cd:86:eb:50:
09:4d:51:56:35:dd:1b:7d:d4:47:34:ea:50:7b:ae:
3f:24:23:d2:e1:d3:a5:c5:69:14:7a:c4:a3:63:db:
45:28:6c:b8:f3:21:40:f2:35:0e:ae:52:96:8f:b9:
59:65:7c:12:7e:d8:e3:94:f1:fc:d5:21:48:41:ca:
ff:4a:11:c0:6a:28:17:8e:28:f2:6c:bf:0b:e9:b9:
42:9b:29:11:fb:c4:d6:df:a4:4b:15:bc:a9:43:65:
88:b5:9b:14:4a:08:b2:fa:92:d5:19:71:85:58:84:
2f:b5:8b:c7:b0:95:82:e9:e2:1d:e7:32:21:a1:9b:
d4:e6:4a:c9:d4:c0:de:fc:e2:c0:0a:b1:c9:80:50:
eb:7a:6a:59:9c:df:25:5d:64:e2:d3:f3:3c:25:db:
75:0e:4c:ff:21:84:c5:4b:f1:0b:27:ca:16:8d:60:
b7:f2:96:65:66:9b:5c:db:7e:fa:be:ae:cd:ef:4a:
24:61:73:43:a6:20:0b:c7:bb:0e:f6:c1:81:0a:6a:
1b:fb:7d:6d:66:7e:ac:4b:4f:b2:d6:ee:3b:e0:70:
95:b5:fd:3b:18:d9:08:13:63:4b:61:99:ce:20:ec:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:AA:DC:81:3E:CC:2D:AC:B4:F9:8E:53:22:D7:48:74:B9:3D:5B
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/FoSq3IE-zC2stPmOUyLXSHS5PVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:06:cf:13:c8:72:c1:21:8b:f1:09:af:72:48:33:45:90:9f:
3b:01:34:8f:64:0b:9d:98:a2:19:35:90:90:b1:b1:f4:31:0a:
fc:2d:0f:8c:ae:b4:88:40:08:77:42:40:b1:78:7c:5b:1d:54:
92:90:7c:82:02:50:ae:f5:8f:c9:eb:d6:8b:84:55:80:e3:6e:
8b:18:86:03:ba:68:ff:35:0e:25:26:27:50:72:fd:92:be:34:
b0:f6:1a:60:7a:9a:33:55:09:e7:c1:8e:7d:7b:67:c3:18:1e:
62:c8:2a:71:ea:3f:fd:c7:70:2a:63:4d:b8:88:d1:94:82:c6:
25:a0:70:0a:18:c2:ab:5a:aa:b4:2b:92:c4:1a:be:7c:71:8c:
6a:66:9f:11:33:e6:22:d9:d5:bc:25:dc:1d:f0:a3:9d:26:c2:
a8:b3:d3:af:e7:c0:78:86:3d:2d:16:fb:97:98:62:f6:07:6b:
48:42:7e:6d:34:e5:a0:da:54:1c:89:c6:a6:63:ac:29:cf:1a:
3c:f8:1b:26:0e:1b:05:d1:8d:3a:e8:8f:d5:57:12:74:8f:90:
3a:93:14:56:16:f6:33:97:0d:f3:b3:09:a9:5d:b4:27:03:4d:
d5:df:55:ab:66:c2:ce:a7:46:be:3c:4f:c1:94:92:02:8c:a3:
90:1b:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:33:00 2024 by rpki-client on console-ams.rpki-client.org