Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/JfRqE_z6468SPjybQuyjz4YSLA4.roa
File: JfRqE_z6468SPjybQuyjz4YSLA4.roa (raw, json)
Hash identifier: i6kgm7joxt1qut2uNIlLj5f6bC5iptE5EzxMppvUP7Y=
Subject key identifier: 25:F4:6A:13:FC:FA:E3:AF:12:3E:3C:9B:42:EC:A3:CF:86:12:2C:0E
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 0185730CCC98F22A7F483DAD11CD86EA5288
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/JfRqE_z6468SPjybQuyjz4YSLA4.roa
Signing time: Mon 02 Jan 2023 15:14:56 +0000
ROA not before: Mon 02 Jan 2023 15:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213100
IP address blocks: 2001:678:d68::/48 maxlen: 48
2001:678:d6c::/48 maxlen: 48
2001:67c:2848::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:cc:98:f2:2a:7f:48:3d:ad:11:cd:86:ea:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Jan 2 15:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f46a13fcfae3af123e3c9b42eca3cf86122c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:28:04:85:fa:78:54:64:b8:3b:96:ff:80:
0b:a8:dc:13:07:66:0c:be:f8:b9:87:a5:b9:78:a2:
c4:e6:ae:c4:69:f6:a5:3a:6a:cc:08:dd:07:c5:67:
65:19:2f:96:b1:c0:17:48:19:95:c4:8c:54:5e:b5:
11:5e:f0:a6:9d:69:a2:c2:0c:6c:76:a2:2b:2f:c5:
9a:24:f3:23:31:d6:7b:60:43:f7:0e:21:d5:38:dd:
d2:2c:b6:fe:e8:8e:48:14:3b:8a:bf:84:bb:f4:13:
ed:ae:cf:73:6d:ef:e9:be:84:5e:c8:92:08:13:31:
a6:54:e1:1a:e1:7e:71:24:20:d8:9a:5d:90:cd:c2:
54:1e:b9:5f:50:a3:fd:1e:5f:ab:16:b2:9b:06:07:
29:8c:1b:d3:4a:94:ab:42:33:e5:af:45:59:07:8b:
d6:c8:11:dc:65:25:7e:7c:39:d5:3e:c4:b1:32:9a:
1f:b7:a1:78:28:17:7b:b6:e8:9a:0c:1e:9b:32:82:
ec:d5:ad:17:09:72:16:0e:70:03:0e:9e:a7:32:50:
fe:5b:88:53:69:d1:bd:84:59:ce:1c:7b:22:6a:69:
50:27:83:ac:ea:62:bf:68:f0:b1:24:0e:05:ca:05:
14:9a:a6:4a:b8:9b:05:27:c0:a8:22:cd:44:d3:d1:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F4:6A:13:FC:FA:E3:AF:12:3E:3C:9B:42:EC:A3:CF:86:12:2C:0E
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/JfRqE_z6468SPjybQuyjz4YSLA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d68::/48
2001:678:d6c::/48
2001:67c:2848::/48
Signature Algorithm: sha256WithRSAEncryption
7e:da:d6:f3:0e:4f:74:98:bb:57:a5:9b:f5:8d:e6:37:10:98:
f6:e9:09:f8:9f:26:25:6d:bc:f2:87:d6:8a:e8:47:96:55:24:
53:49:12:0f:e7:ff:11:f1:7c:d1:40:60:8a:05:34:b1:3e:6b:
53:8f:c4:05:ba:92:57:13:49:b2:1a:39:fd:a8:94:63:26:af:
0d:8a:7a:95:c9:c9:2e:ba:db:6e:f0:3c:4e:33:0d:05:80:99:
53:3d:a8:3a:af:20:a7:a8:e6:fd:1e:ad:20:73:8d:e0:2c:8e:
5e:7d:7c:dc:e4:06:71:e5:95:11:8a:0b:24:8e:5b:c8:a3:f3:
74:c6:63:a9:9f:45:91:9d:5c:91:dd:f9:0e:f5:3a:8b:0c:f6:
51:c8:66:95:29:f9:21:87:08:0c:b6:e8:17:28:b4:43:59:76:
e3:cd:b1:ed:91:45:74:b0:d3:99:0d:01:04:e3:56:a4:16:4a:
3d:0a:77:44:74:4d:a2:7f:51:1e:af:c7:89:79:52:6e:f8:f6:
d6:0f:c8:aa:f2:8d:09:36:f3:a6:c8:b9:e0:c2:2d:36:ee:40:
4f:7d:5a:a3:ef:e8:dc:83:01:2e:d6:3f:f5:35:9b:17:ce:a3:
90:7a:60:fb:ee:87:13:6c:ad:1f:7b:2b:f5:1d:a7:ce:8f:87:
24:55:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:03 2024 by rpki-client on console-fra.rpki-client.org