Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/1-q6kZTnX1Xszf5WOxn6TKZgZnho.roa
File: 1-q6kZTnX1Xszf5WOxn6TKZgZnho.roa (raw, json)
Hash identifier: m7Zlm0xCYsIgOTK2Rf2ANIX4pAjD6O1V5+KCXhoYAY4=
Subject key identifier: FA:AE:A4:65:39:D7:D5:7B:33:7F:95:8E:C6:7E:93:29:98:19:9E:1A
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 01856CEF18CC363DD36428FCDB011B50D17F
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/1-q6kZTnX1Xszf5WOxn6TKZgZnho.roa
Signing time: Sun 01 Jan 2023 10:44:46 +0000
ROA not before: Sun 01 Jan 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59880
IP address blocks: 2a0f:fdc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:18:cc:36:3d:d3:64:28:fc:db:01:1b:50:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jan 1 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaea46539d7d57b337f958ec67e932998199e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:81:a7:5d:42:bb:a3:35:57:81:bc:64:74:
ad:de:ba:13:2f:d4:aa:0c:7c:ba:58:25:7c:12:10:
15:79:f5:7f:c6:c8:45:1a:cf:9c:d9:2c:a4:ea:28:
46:51:05:70:55:ae:d6:6f:83:46:d6:6f:f9:ad:cb:
b1:06:f1:43:c8:5e:7e:b8:18:3a:76:53:c4:a9:30:
b5:ee:f1:47:9f:8f:de:32:80:6f:cc:86:a2:8a:8f:
e6:cc:3a:de:2b:eb:2b:84:c4:0d:b9:a3:ad:b0:bc:
69:32:b3:62:26:1b:31:03:1e:6f:46:c4:6e:3d:63:
40:17:fd:ea:1c:56:32:19:76:88:a1:42:a4:e2:76:
d7:81:41:0c:f5:c4:0e:d4:9b:92:39:ca:d7:0b:67:
90:d7:17:73:57:83:57:3d:a9:78:96:7c:fa:13:38:
57:c7:5b:c5:67:f9:3b:84:b5:d8:61:8f:72:8b:c7:
96:fd:b0:95:9f:4c:a5:58:3f:e4:0d:fc:e3:86:ce:
59:3a:44:4e:68:f4:61:47:93:18:13:c5:74:ed:27:
09:5f:6b:e8:82:e5:35:73:89:25:46:ae:3f:9e:7b:
2c:7d:4a:5a:bb:24:ba:19:63:41:f1:e7:d6:17:54:
ad:24:12:a5:d8:37:90:aa:4f:ce:5f:5e:10:eb:20:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:A4:65:39:D7:D5:7B:33:7F:95:8E:C6:7E:93:29:98:19:9E:1A
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/1-q6kZTnX1Xszf5WOxn6TKZgZnho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
39:d4:fa:96:7a:ee:97:d2:af:47:78:92:29:89:ed:a0:a8:1f:
76:c4:4b:40:3e:6c:60:49:4a:b5:c5:9b:99:44:8b:d6:0b:c6:
4e:d4:ae:a5:95:99:50:cc:17:a9:57:5c:29:8f:98:ba:0c:8e:
79:cb:1c:d1:18:34:c5:6b:40:d1:31:83:e1:ca:1f:23:8c:4c:
20:d8:60:c4:c4:c2:11:3f:20:ac:5e:dd:f1:d9:02:eb:2e:ac:
25:72:5f:6b:a9:53:f4:56:10:66:9f:84:a4:7c:c8:17:7e:45:
d0:be:85:e6:3c:b0:49:fa:a2:f3:fc:0e:e6:c1:2c:7f:4a:05:
12:e1:09:b4:6e:bc:90:9a:78:ec:3f:78:e2:58:75:7d:53:45:
0f:65:7e:bc:95:24:86:e7:2c:4c:a6:67:28:64:6d:f6:c4:7b:
b1:06:6c:0c:bf:46:64:8a:be:ae:86:66:77:78:aa:9e:73:40:
ca:4d:19:f6:a4:0d:e1:dc:8b:56:42:8a:32:6b:8c:19:75:81:
5b:d1:26:54:97:6a:02:3b:22:6e:86:07:dc:20:6a:94:01:2f:
78:08:06:2c:79:eb:05:ba:c8:b6:85:91:f7:42:e8:e2:78:9b:
f9:74:48:ed:38:7b:0f:46:26:12:c1:67:b3:d0:5c:58:11:3b:
d4:cb:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:02 2024 by rpki-client on console-ams.rpki-client.org