Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/FvXE79oWrTdfDXWtTdYt35R9__o.roa
File: FvXE79oWrTdfDXWtTdYt35R9__o.roa (raw, json)
Hash identifier: w7kxt2LQUIaQ6B85rV9PZauqz0AKwx6nYSCS0oyvdeU=
Subject key identifier: 16:F5:C4:EF:DA:16:AD:37:5F:0D:75:AD:4D:D6:2D:DF:94:7D:FF:FA
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 01865986365FFFE5B0BE5C99B07A92B235D4
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/FvXE79oWrTdfDXWtTdYt35R9__o.roa
Signing time: Thu 16 Feb 2023 09:20:13 +0000
ROA not before: Thu 16 Feb 2023 09:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2a0c:b6c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 03 Sep 2023 09:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:86:36:5f:ff:e5:b0:be:5c:99:b0:7a:92:b2:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Feb 16 09:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f5c4efda16ad375f0d75ad4dd62ddf947dfffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:3c:94:fb:e8:4a:d3:62:40:67:05:35:4e:
c2:bd:be:24:03:b9:90:33:d4:80:36:e7:f8:ca:be:
11:6a:f7:5e:f9:53:e7:11:55:2c:b3:5a:45:49:21:
f2:cd:0f:10:ea:1b:fa:ec:f8:e3:7c:8a:28:92:7a:
c6:49:b2:28:5a:5e:25:02:1b:f3:40:c5:ce:df:3e:
96:ab:5d:31:15:c4:ef:f4:cb:ab:8a:6c:7a:98:b4:
d8:4d:0b:d6:9a:e5:44:83:4d:22:93:f3:37:86:8a:
a1:de:ae:6a:21:e9:4f:e0:46:f3:30:8e:d6:fe:0f:
9a:1f:bc:79:4b:58:cc:a9:94:d2:80:6f:ea:1d:db:
71:b1:3a:f4:51:2d:00:c1:96:0a:f4:c4:b2:fd:28:
ae:ad:8c:70:f3:13:45:6c:66:1b:39:6e:97:53:6f:
19:28:95:7a:a4:e3:f0:73:ff:26:1b:3a:a0:6c:5c:
68:81:c6:44:82:9b:72:61:4c:47:a4:73:68:fb:07:
9b:ec:1f:57:d0:3f:56:c8:36:7d:2d:ce:52:5b:c3:
a2:52:81:c1:63:c3:ac:dc:20:c2:01:e6:53:90:99:
e5:3c:35:ef:59:03:6f:1d:c1:3e:7b:0e:d7:ca:76:
3e:8a:df:9e:ec:fb:17:8c:45:63:41:45:fb:6b:27:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:C4:EF:DA:16:AD:37:5F:0D:75:AD:4D:D6:2D:DF:94:7D:FF:FA
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/FvXE79oWrTdfDXWtTdYt35R9__o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c1::/32
Signature Algorithm: sha256WithRSAEncryption
38:a2:22:e5:3d:83:4d:99:6b:6c:f9:8c:6d:9d:a8:b3:c6:68:
50:12:14:18:30:0a:93:6c:f4:0e:9a:cf:50:88:30:d1:87:c2:
b8:b7:80:e4:42:79:77:20:00:a1:33:dd:98:17:8c:74:cb:b0:
29:9d:0a:bc:21:3d:87:70:db:9e:00:82:12:a0:0c:30:3e:bb:
1a:96:b7:7d:e1:ad:df:a7:4d:8e:69:fc:ec:3d:9f:32:ec:e1:
5f:ac:db:17:34:28:a4:53:67:5e:b3:4d:7b:32:0f:e7:b0:0a:
46:fe:b3:2d:7c:0a:fe:15:c6:dd:bb:3d:b8:c2:d5:b8:16:cb:
99:c9:44:44:31:d4:17:c9:b7:f1:61:4c:8a:d1:31:3c:5f:bf:
67:6a:25:1b:bd:39:d8:ad:02:ba:41:25:cd:23:64:69:67:29:
0f:d4:1a:9e:95:ff:33:69:57:c1:30:7d:34:e3:56:81:68:21:
f7:df:8c:89:c7:26:db:fa:50:58:9a:ba:e0:df:2b:69:f6:b9:
84:73:ed:1f:bc:dd:be:45:14:0d:5d:e4:71:80:8a:c9:38:7b:
14:54:9c:c8:77:78:66:64:c5:8e:9c:2b:76:37:3d:60:84:7a:
25:d7:92:3e:f3:8a:b2:52:06:fb:fe:af:9e:df:ad:75:72:b2:
ea:61:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:15 2024 by rpki-client on console-fra.rpki-client.org