Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fpQpzHul9Ah1wWBzW5H-WrL3wWk.roa
File: fpQpzHul9Ah1wWBzW5H-WrL3wWk.roa (raw, json)
Hash identifier: PXZxJ1RCR+vY2bu6pK3P64lWcjDX2eO7xUirViAnA+A=
Subject key identifier: 7E:94:29:CC:7B:A5:F4:08:75:C1:60:73:5B:91:FE:5A:B2:F7:C1:69
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D0A237BC9C079B8DB71DDD8916426
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fpQpzHul9Ah1wWBzW5H-WrL3wWk.roa
Signing time: Tue 02 Jan 2024 08:31:58 +0000
ROA not before: Tue 02 Jan 2024 08:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203323
IP address blocks: 2a0a:280:1600::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:0a:23:7b:c9:c0:79:b8:db:71:dd:d8:91:64:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9429cc7ba5f40875c160735b91fe5ab2f7c169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:b9:2a:6d:07:b7:e7:01:cf:5c:a0:d4:0b:
0b:2d:d2:b1:9c:57:4d:26:70:d2:f7:60:5a:9d:61:
83:5a:b8:a1:45:6c:f3:a2:42:60:b6:a3:76:8e:49:
4b:15:f1:40:ba:f4:2e:ee:2b:4b:a7:ff:f5:93:6a:
90:a5:a4:79:e5:4b:f3:ac:66:d9:90:53:f4:5f:67:
70:78:0b:d3:31:38:f0:26:4a:2d:ef:53:93:36:d6:
1d:6c:23:0b:41:0b:7b:a9:0c:d3:a6:dd:42:da:5d:
36:ad:7b:a2:71:ff:a8:fb:0e:ea:c3:38:ce:ed:e2:
24:d9:88:b2:fd:eb:aa:d7:5d:e7:1c:57:e4:33:0e:
27:65:b9:70:ca:0a:1a:cc:19:e6:2a:7b:97:df:61:
ad:ba:a3:e3:32:ab:96:f3:a6:52:4f:2c:ab:56:89:
50:b2:a8:95:f2:b0:d2:08:02:f4:ce:d5:52:de:04:
ef:59:d8:7e:3d:fd:15:73:6a:66:74:91:04:de:75:
ce:32:f3:9e:3b:3d:65:92:72:b2:b7:73:6d:bd:f8:
13:c1:c3:d0:6c:98:63:34:06:01:57:07:53:cd:ce:
31:75:c8:d4:00:5a:03:88:9e:fa:ee:9f:5b:9e:4d:
e4:7e:14:41:14:d9:a9:af:cb:e5:a7:18:51:02:84:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:29:CC:7B:A5:F4:08:75:C1:60:73:5B:91:FE:5A:B2:F7:C1:69
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fpQpzHul9Ah1wWBzW5H-WrL3wWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1600::/40
Signature Algorithm: sha256WithRSAEncryption
a7:b1:ba:be:0f:9c:3e:17:06:04:09:d6:ad:0b:f0:37:09:16:
8a:52:1b:4e:c3:dd:21:b9:0f:cc:17:f2:15:45:74:78:93:63:
53:80:bc:46:ec:2e:91:3f:ea:48:04:e0:fb:d4:e1:82:cb:85:
de:4f:77:5e:6b:2b:59:dc:2d:71:85:7c:f0:d8:c7:77:92:5c:
fb:f7:f2:2c:f2:77:32:ab:e9:90:81:68:4f:4c:96:6f:46:ac:
35:33:8e:4d:6d:87:6a:7f:10:8c:46:10:6d:c6:00:08:62:d0:
1c:11:fd:58:65:6b:76:45:d0:f8:72:2c:ad:7c:8f:90:2f:89:
76:f9:42:99:5e:69:16:5f:be:ca:31:89:7c:4b:81:47:f5:74:
9b:df:20:e0:56:51:5b:52:41:eb:b6:2c:05:b8:bb:f6:26:f8:
4c:4e:f7:da:63:1d:a5:c3:c3:bd:07:3f:e9:9c:93:48:09:9f:
79:e9:1f:37:af:82:50:cd:70:34:45:a4:02:0d:78:b9:76:3a:
d6:f7:fa:0e:1b:38:b7:cb:52:85:6a:52:c9:dd:ac:df:df:3d:
3f:71:ee:21:95:c8:41:62:9e:05:f7:76:58:74:1b:c6:ad:80:
bb:b5:93:38:44:2f:62:4a:96:4d:61:90:73:f6:d1:a8:21:74:
fe:d8:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:05:53 2024 by rpki-client on console-fra.rpki-client.org