Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/FZtcSChZa6MsEUCUdXWy-K2F6lw.roa
File: FZtcSChZa6MsEUCUdXWy-K2F6lw.roa (raw, json)
Hash identifier: l91GeQ77+FrsYfr/NNPVDrlvYtEL3ZFOF3VTuEXlHTk=
Subject key identifier: 15:9B:5C:48:28:59:6B:A3:2C:11:40:94:75:75:B2:F8:AD:85:EA:5C
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01856FD5280D15AB563AE7C54E7922DB09E4
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/FZtcSChZa6MsEUCUdXWy-K2F6lw.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50926
IP address blocks: 2a0b:8f80:202::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:28:0d:15:ab:56:3a:e7:c5:4e:79:22:db:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=159b5c4828596ba32c1140947575b2f8ad85ea5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:ea:86:f6:d7:33:0a:ce:b8:8e:d7:1d:fc:
e4:24:74:f6:40:c2:91:a0:2a:70:bb:9c:ef:85:48:
a2:85:72:ca:e3:79:e7:c3:e2:90:19:9c:06:e9:7a:
4f:17:3b:99:b3:01:29:f6:62:3d:66:aa:a8:6b:fa:
a3:92:49:f5:2f:d5:32:d7:19:1b:11:be:46:af:1b:
1e:79:7d:e6:02:4b:ad:89:18:97:7d:85:8e:2c:6a:
52:06:8d:8a:61:cc:f5:d6:56:4c:fa:a3:cb:2f:51:
27:bc:86:76:b9:e9:9d:da:1b:5a:b5:c5:30:75:98:
f4:b5:a4:93:3c:e0:fb:54:88:20:6a:3f:29:ab:c4:
38:df:5c:07:c2:b4:d7:2d:e1:17:81:52:ec:85:b5:
2c:ad:b5:64:c3:d4:ab:28:8c:20:dd:a6:8e:ed:58:
14:73:25:87:db:7f:cb:a6:0a:c5:cf:17:02:34:8e:
29:68:cf:2f:a4:5a:d6:dd:02:f1:ad:79:33:13:08:
33:41:55:8b:d5:16:cd:1b:ff:9c:06:04:32:6f:88:
4e:bb:bc:19:76:19:7e:77:fb:30:22:82:70:5d:fa:
9b:47:f0:d2:82:91:6f:b6:e9:2c:ce:e6:09:cb:4a:
1d:ec:f6:f0:d6:ba:3a:4e:f6:82:0e:b7:6a:8c:85:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9B:5C:48:28:59:6B:A3:2C:11:40:94:75:75:B2:F8:AD:85:EA:5C
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/FZtcSChZa6MsEUCUdXWy-K2F6lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:8f80:202::/48
Signature Algorithm: sha256WithRSAEncryption
6c:cc:90:7c:af:19:c3:73:eb:d0:fa:8b:65:66:10:8c:13:d2:
96:9d:44:47:10:04:3b:5e:ce:b0:59:5c:91:2f:6c:69:27:e6:
13:04:48:e1:fa:38:ae:63:3f:66:db:b9:a9:eb:bc:29:e9:33:
6f:6a:81:3d:96:53:a6:d4:37:ac:55:30:84:6d:27:1d:1d:70:
77:59:8b:6d:2a:87:b3:79:e2:f9:92:bd:bd:58:fb:10:88:5c:
a5:8a:0d:e5:0d:f9:20:30:ab:76:db:6f:a2:46:75:98:49:2f:
2b:3a:23:fd:92:55:b0:7e:82:f8:61:ac:1c:ea:74:b7:7f:d1:
b0:ad:71:f8:5f:0f:51:89:a3:f1:e9:42:6c:d5:0b:99:d5:f9:
91:0f:d1:34:c7:d8:be:5e:9e:ee:25:07:55:20:15:a8:97:50:
f8:12:18:84:d6:72:86:52:07:41:80:e3:a2:b3:c7:a2:a4:58:
27:c8:0b:7a:04:f3:e0:7d:f4:e9:dd:c0:92:a2:14:68:15:8a:
3e:57:cf:89:96:58:4a:33:41:c2:b2:95:dc:46:3c:a2:40:82:
88:7f:5b:ec:17:d3:a3:0d:e9:6f:8c:c9:f4:55:6f:0a:23:8a:
59:28:2f:0a:5b:99:ea:32:78:56:bb:05:bf:b8:7c:36:43:16:
1a:7d:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org