Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/F6kIpLVT-g4wLft0KoWNYuaHKt0.roa
File: F6kIpLVT-g4wLft0KoWNYuaHKt0.roa (raw, json)
Hash identifier: 4kpzAJwcCorAtWJY8H5wO6QKwMeqMkk7IxKYLpWnUuM=
Subject key identifier: 17:A9:08:A4:B5:53:FA:0E:30:2D:FB:74:2A:85:8D:62:E6:87:2A:DD
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF88157422831C7E0B5B8E9C0EA12CD
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/F6kIpLVT-g4wLft0KoWNYuaHKt0.roa
Signing time: Sun 01 Jan 2023 10:55:03 +0000
ROA not before: Sun 01 Jan 2023 10:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213189
IP address blocks: 2a07:22c0:c000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:81:57:42:28:31:c7:e0:b5:b8:e9:c0:ea:12:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17a908a4b553fa0e302dfb742a858d62e6872add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:70:47:28:9f:3b:2f:ed:40:e2:a0:2a:90:
81:56:84:e1:24:9a:59:a9:8d:b7:d3:af:9d:bf:24:
9f:f0:17:d6:46:9e:bd:88:23:b7:a3:5b:06:c1:5f:
f6:a4:79:54:c7:0c:b3:30:f0:f1:02:4d:9e:af:84:
9e:f9:74:0b:e9:9e:c8:d8:c7:08:73:6b:25:8b:08:
c1:66:79:cd:5f:05:f4:29:d7:7f:86:9f:84:04:10:
58:75:a4:02:06:e0:8b:34:da:7c:bf:1a:83:d2:69:
01:51:f5:ba:e3:d2:f5:fd:cc:73:e3:5e:d5:1d:20:
16:ca:9f:44:bd:43:e7:c4:7c:bb:f6:bf:38:0d:25:
b2:ed:65:a5:3f:f2:b3:2b:55:cb:95:fd:ec:cd:c2:
1a:66:06:b5:f5:d5:49:ba:63:0f:ae:69:7a:d6:fb:
43:e0:ff:d4:dd:ce:c9:1a:35:82:85:72:19:40:f1:
9e:d6:6e:86:48:95:a9:f4:57:3e:42:21:f4:e8:33:
c5:fe:08:95:12:43:c1:26:3f:a6:ce:f3:e8:76:52:
71:c7:9a:96:1c:1c:2f:da:fd:09:5b:e1:f6:80:fc:
37:1a:76:f6:03:e4:e6:bc:a5:a4:a3:46:71:04:a5:
33:e5:f9:bf:9e:0c:f0:62:6c:b2:56:bc:76:56:18:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:08:A4:B5:53:FA:0E:30:2D:FB:74:2A:85:8D:62:E6:87:2A:DD
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/F6kIpLVT-g4wLft0KoWNYuaHKt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:c000::/40
Signature Algorithm: sha256WithRSAEncryption
70:45:0e:90:20:08:11:87:f6:8b:af:d9:28:17:ad:ee:d9:63:
43:bb:7f:03:d5:83:aa:3d:a0:f9:55:84:e7:ac:d0:6b:34:81:
2d:b0:09:9d:03:af:8a:39:d5:2d:36:28:2f:f8:51:c2:fa:02:
88:c8:6d:27:c2:ad:5c:db:9f:35:d4:04:55:b7:c7:fe:e0:ae:
1b:3c:6a:86:eb:32:a6:3d:5b:cc:62:2a:6d:d6:dc:01:5d:8b:
b2:85:df:fd:ce:b9:b3:19:7a:c7:56:4b:c7:6c:3a:64:27:34:
11:01:ad:a8:64:3c:b0:82:a6:e6:05:a8:c2:e3:24:b8:ac:2d:
a4:7b:19:0e:6c:a2:e9:09:40:4b:81:9d:15:f6:4b:f4:0e:37:
78:3c:c4:e6:b0:94:dc:b6:fb:9f:e5:c9:eb:50:59:69:9e:90:
9e:ab:bc:34:36:f7:7f:2d:bd:85:e8:0d:ed:68:73:c0:65:93:
34:1f:16:8f:3d:19:0f:a7:03:3c:11:9b:cb:fb:2b:5c:4d:0c:
19:f8:77:19:bf:ee:8c:44:ed:c3:ee:83:2c:f2:da:3e:71:db:
96:21:88:89:76:49:b2:17:26:00:d5:18:7f:f4:5b:45:d5:39:
93:87:18:2a:27:e0:97:76:08:c7:44:2b:f3:b5:3d:41:fd:80:
01:a4:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org