Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/sFFjM1h-Y0XrTn3IwWZf-1ZoR9o.roa
File: sFFjM1h-Y0XrTn3IwWZf-1ZoR9o.roa (raw, json)
Hash identifier: 9TfdtTb1nD9Znd/p/mjgMLGXGymMehStX8XOZKBjiVA=
Subject key identifier: B0:51:63:33:58:7E:63:45:EB:4E:7D:C8:C1:66:5F:FB:56:68:47:DA
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF87F577BF7BA83D3EC94355452CA1D
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/sFFjM1h-Y0XrTn3IwWZf-1ZoR9o.roa
Signing time: Sun 01 Jan 2023 10:55:02 +0000
ROA not before: Sun 01 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212856
IP address blocks: 2a07:22c1:11::/48 maxlen: 48
2a07:22c1:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7f:57:7b:f7:ba:83:d3:ec:94:35:54:52:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0516333587e6345eb4e7dc8c1665ffb566847da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:1b:3f:6e:56:56:ce:f7:5e:ca:5c:c5:77:
88:b1:9c:44:c0:06:b1:ff:e5:2c:8b:5c:71:23:42:
f3:61:fc:af:a5:06:64:58:eb:f7:bc:ea:35:84:ca:
37:cb:11:90:42:eb:34:56:e5:b2:e9:67:cd:d2:68:
ab:da:af:22:2c:fa:e4:76:ca:fa:10:56:9f:92:dd:
63:01:a5:56:dd:27:66:29:ba:43:7f:d1:97:c7:90:
ec:53:63:3e:4f:bd:a7:ec:07:5d:98:fc:be:11:75:
8c:31:c7:f4:5a:35:5e:2c:0c:b2:52:89:11:43:69:
d2:a0:4b:f8:1e:a7:28:5b:2d:63:31:5b:4f:9a:5f:
15:32:16:8b:94:5c:ec:9a:b1:0a:2a:94:9d:c0:56:
af:83:59:02:92:e9:63:47:f9:9b:0a:81:bd:c5:1d:
44:77:2d:1a:c3:d5:ce:05:97:bd:5a:15:00:6a:ab:
05:aa:09:78:d9:5f:88:fe:b7:a4:71:9f:1f:0f:cb:
f0:45:3a:7c:a0:b1:c1:11:ec:35:7e:36:52:1c:e6:
8b:a1:f3:df:b0:14:19:1f:e5:8a:89:00:ec:62:33:
16:63:55:27:61:72:19:62:55:21:e1:58:d6:a0:21:
cb:8b:22:46:80:c9:ad:91:00:65:b5:2e:11:e3:d4:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:63:33:58:7E:63:45:EB:4E:7D:C8:C1:66:5F:FB:56:68:47:DA
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/sFFjM1h-Y0XrTn3IwWZf-1ZoR9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:10::/47
Signature Algorithm: sha256WithRSAEncryption
20:c3:19:7b:26:a6:d3:55:fe:1a:ed:59:14:0f:71:ec:9e:0b:
cc:31:38:e5:c4:44:e9:1e:d5:ae:1e:0e:6e:16:71:43:bb:14:
46:f5:76:50:3d:3f:40:1c:c8:0a:9a:ad:7c:63:bc:c5:28:23:
fb:21:8c:8d:6d:25:09:4b:20:61:a1:ec:6d:7f:90:4f:dc:9a:
e6:9c:79:b4:b8:d5:2b:d2:c2:57:a0:72:5a:3d:16:91:ca:82:
e3:ab:7f:ea:27:37:db:fc:d8:d0:f2:72:41:22:86:a6:2b:c9:
e3:9a:bf:df:e7:ba:20:df:a4:7e:0d:86:71:0e:15:a9:98:d7:
87:f3:50:cd:84:ea:82:74:4b:cc:9e:6f:9c:4e:fe:e9:14:e2:
1c:cf:0e:e3:67:e0:34:8d:bb:9a:18:84:b7:26:84:46:22:ce:
c4:fa:4a:bd:2b:b8:07:01:44:22:85:f3:a5:6e:45:c9:6b:3c:
04:f8:c5:e8:58:e0:78:b5:7e:90:76:4d:b6:90:a0:a1:e4:dd:
2f:38:58:1d:a4:fd:4d:57:6c:e7:02:17:5d:62:8d:fd:96:2f:
11:b5:f0:b3:e4:dd:36:d0:a5:48:15:90:4b:70:f2:fd:f6:ae:
5e:2b:34:0e:c1:d0:6e:27:18:92:2f:9c:da:2f:55:59:ee:1b:
92:1f:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org