Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fiwXYf2_runABkJRLYodHFaysp4.roa
File: fiwXYf2_runABkJRLYodHFaysp4.roa (raw, json)
Hash identifier: 3S6gy/EaKdVa5XDj9I5qsqaXwMXXuc5m8sT28O8xoVY=
Subject key identifier: 7E:2C:17:61:FD:BF:AE:E9:C0:06:42:51:2D:8A:1D:1C:56:B2:B2:9E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F9CCB107522B47E714978138114332BA5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fiwXYf2_runABkJRLYodHFaysp4.roa
Signing time: Tue 21 May 2024 20:15:04 +0000
ROA not before: Tue 21 May 2024 20:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216392
IP address blocks: 2a0d:6f80:2304::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Sep 2024 10:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:cb:10:75:22:b4:7e:71:49:78:13:81:14:33:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 21 20:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e2c1761fdbfaee9c00642512d8a1d1c56b2b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:dc:fb:eb:dc:29:0e:24:01:f6:d7:45:5f:
72:2c:b1:cd:06:24:98:1c:4a:ba:28:15:ee:9a:57:
bb:01:87:59:27:65:9f:f4:a5:b1:ce:f3:e1:ba:c6:
2e:09:6d:55:26:10:e3:89:f1:c0:1c:5e:3a:58:7f:
b8:0a:2d:c4:ac:6b:d8:b7:57:a8:e0:25:ac:af:88:
cb:c0:70:ff:67:aa:4e:fc:5d:7e:2c:8f:07:21:8e:
71:f7:05:f2:52:a6:45:27:d7:83:ac:b6:95:98:61:
28:0b:91:35:4d:2f:59:bf:15:9c:d1:bd:19:68:6d:
47:72:2a:07:60:22:92:37:a7:9f:32:cd:3d:f1:80:
36:03:a0:b0:da:80:40:b0:6a:a0:48:60:89:a6:84:
f6:24:7e:4c:40:04:15:b6:95:53:84:f5:4a:01:27:
fa:03:6f:d5:e6:5a:ea:8d:3a:d5:5a:f7:47:25:7a:
27:c8:82:81:79:79:30:05:c9:08:94:e9:9c:32:ed:
20:49:3e:73:c1:68:86:fa:c5:c2:e1:45:67:16:c6:
6b:f9:74:d5:87:db:b8:ba:c2:23:ae:75:45:03:95:
5b:02:0d:9f:e6:0e:68:4b:d3:61:d6:68:1d:8f:08:
3b:89:4c:6e:02:18:ef:3a:2f:2c:41:66:a3:c6:a5:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:17:61:FD:BF:AE:E9:C0:06:42:51:2D:8A:1D:1C:56:B2:B2:9E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/fiwXYf2_runABkJRLYodHFaysp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2304::/48
Signature Algorithm: sha256WithRSAEncryption
d8:80:b1:ce:a8:72:c1:e1:f7:65:d6:9b:44:88:1c:f7:ba:dc:
c9:c6:03:f2:6a:cd:a3:75:0f:5a:70:d8:68:57:20:4b:6a:8f:
90:2d:8f:53:c1:2e:c5:67:fe:74:95:2b:81:3a:56:52:fc:79:
73:44:e3:46:58:55:ef:82:9a:14:75:15:69:0a:c7:63:dc:c0:
4d:52:3b:01:8e:61:a9:75:cd:b0:2f:e9:d7:70:e4:5d:fe:29:
c6:57:8b:fc:e1:c7:d6:49:d3:f9:20:ee:1e:1f:03:09:85:47:
61:c6:16:c5:bc:2b:5d:ba:7d:06:db:dd:53:86:82:94:59:04:
3e:56:8c:44:95:8d:c0:82:12:3a:f2:73:1d:b3:a0:96:a3:22:
28:1a:71:51:40:f6:94:f6:15:90:ac:cb:d7:72:7d:39:b9:16:
8a:5d:9b:e9:a0:1d:47:1f:30:00:11:6f:8c:76:56:a8:ae:85:
50:ed:7d:c9:74:f5:09:18:87:30:35:c9:0d:79:18:2a:dc:f9:
19:90:bc:df:71:1a:b8:38:27:c5:af:f6:32:82:d3:b5:25:08:
7a:fb:73:55:97:cf:48:ee:44:6f:85:8c:20:08:d4:5e:96:5c:
6b:6d:5c:61:93:c2:52:8e:be:c6:34:2a:7c:08:c3:61:14:20:
37:e9:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 1 12:23:05 2024 by rpki-client on console-ams.rpki-client.org