Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa
File: FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa (raw, json)
Hash identifier: mluKOgjMptlAIXvqcFfIPpZBZMlgyaOSuHfAonU29AE=
Subject key identifier: 15:27:58:A2:D8:94:1C:70:16:AB:1F:58:9F:73:57:9F:B2:DF:4A:91
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018EF643DB14B7B0507C81B493781788C44B
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa
Signing time: Fri 19 Apr 2024 12:10:25 +0000
ROA not before: Fri 19 Apr 2024 12:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216164
IP address blocks: 2a05:4142::/32 maxlen: 32
2a05:4143::/32 maxlen: 32
2a05:4144::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Apr 2024 22:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:43:db:14:b7:b0:50:7c:81:b4:93:78:17:88:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Apr 19 12:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152758a2d8941c7016ab1f589f73579fb2df4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:36:7a:6a:4e:b1:7f:68:27:69:2b:d3:87:
80:17:c6:26:35:80:bb:a1:78:0e:e0:5d:e0:b0:85:
29:57:18:6a:a8:3a:99:1c:45:cd:e5:fc:f6:b3:33:
21:b2:03:99:3a:25:71:80:e2:0f:0f:9c:cb:fe:25:
4c:a7:61:48:5e:74:73:59:ad:85:8b:28:0d:71:f9:
70:d4:a3:ba:3a:f2:d5:cb:49:8d:70:46:5b:2f:88:
eb:51:f6:45:ad:67:22:46:a3:08:53:59:e7:99:13:
9f:d1:39:38:48:ab:7f:b5:43:3c:83:cf:2f:72:5d:
4b:8f:de:8c:0d:a6:32:80:22:b7:86:a2:00:3e:e0:
da:f9:ac:84:eb:77:d3:d5:14:43:04:3d:6c:2a:93:
5c:26:47:7c:eb:0b:b7:d3:e2:4c:c4:cd:00:f3:89:
5d:43:4c:c9:e1:e7:54:05:f6:16:d8:7c:a9:e3:bc:
64:23:50:21:a0:de:35:fe:76:69:6d:6d:4b:0a:f5:
ea:a0:ba:8f:2e:ef:cd:04:63:41:ce:e7:db:e7:77:
94:4a:b4:d6:6a:cc:fa:81:de:3c:63:e8:3f:cb:d0:
2b:e6:09:0c:47:c0:2d:a8:7f:a8:3a:1e:c5:47:13:
35:80:12:cc:6a:85:0c:a2:01:ea:81:7c:1e:5e:4c:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:58:A2:D8:94:1C:70:16:AB:1F:58:9F:73:57:9F:B2:DF:4A:91
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FSdYotiUHHAWqx9Yn3NXn7LfSpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4142::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:44:f7:78:58:35:c5:46:b5:0e:45:96:1c:28:da:b3:94:3f:
83:d5:78:83:20:18:9b:84:0e:d6:5d:52:4b:19:14:01:e6:55:
13:ee:69:19:50:7a:81:03:b2:03:c0:a7:5b:90:8c:b0:51:94:
5e:87:12:9a:9a:63:69:5d:50:cc:aa:3a:47:11:90:68:36:da:
2a:07:e2:1e:87:c6:06:12:37:cc:b9:1a:bc:af:74:b6:ab:ff:
98:16:60:7b:22:58:f6:af:11:e5:71:de:0f:35:bb:f1:61:b7:
23:28:d3:2f:cf:1d:22:27:69:c8:fc:cc:b8:90:c1:64:ac:14:
0f:e8:17:79:96:75:b6:a3:a9:d6:af:d7:9d:f7:1d:57:f3:64:
b3:08:ff:6d:dd:2f:6e:d4:b4:3d:33:7c:ad:f9:1b:93:58:30:
6c:5e:bd:be:0e:91:cf:b3:28:56:a3:f5:f8:21:c3:ac:dc:7d:
28:79:9c:cb:3e:08:97:73:aa:1c:5c:79:fa:d3:ad:a5:ce:6c:
21:8b:33:24:e3:1f:04:60:2b:2d:5c:eb:2a:38:f6:93:3f:ce:
ef:94:61:ab:34:3c:c3:0d:fe:44:3a:55:33:90:f6:40:88:be:
59:f7:af:78:e0:53:b1:dd:c2:67:13:bc:4d:6e:e9:e6:a9:53:
2f:d0:53:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org