Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa
File: FFEE5FNYgIn8xj56OzZJAOBuxrw.roa (raw, json)
Hash identifier: 9prBMG3Zt3gNBvvLN9tit8fbN3hfVYyW7H5HeHlni+8=
Subject key identifier: 14:51:04:E4:53:58:80:89:FC:C6:3E:7A:3B:36:49:00:E0:6E:C6:BC
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018A93BCAC0649695C82B88C22784D009E3B
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa
Signing time: Thu 14 Sep 2023 12:48:50 +0000
ROA not before: Thu 14 Sep 2023 12:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198376
IP address blocks: 2a13:a5c6:6000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:bc:ac:06:49:69:5c:82:b8:8c:22:78:4d:00:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Sep 14 12:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=145104e453588089fcc63e7a3b364900e06ec6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:10:ff:09:f1:3f:05:55:2b:0f:18:d9:78:
84:93:6c:51:a7:a9:8b:17:5b:fd:33:c5:ee:6a:a1:
36:55:82:3c:44:0a:7d:12:d1:39:c0:f0:a8:54:c3:
ca:6b:6c:c6:22:ac:84:4a:61:aa:1a:54:07:a9:33:
0d:b4:1b:8b:81:2a:57:fb:18:4f:88:f8:27:4d:f0:
5e:90:da:db:ea:86:61:33:6b:bc:0a:1f:51:7d:74:
64:7c:48:bb:e0:8e:8f:2e:04:c2:ea:e8:45:30:ab:
77:1a:0a:97:41:ea:79:fd:a1:3f:45:11:3f:d9:d9:
a2:bf:f3:a2:cc:1b:e1:92:16:12:41:33:f0:80:50:
47:ef:f0:d4:1a:4e:ae:27:6c:ed:57:2a:eb:c0:11:
99:a8:52:0e:ad:b1:ac:d6:96:7e:6d:3b:98:39:a3:
bb:08:e7:8d:f0:a1:3f:de:22:06:ee:db:5c:b7:56:
9a:31:e8:3c:84:a6:9e:d6:8c:47:ed:18:92:78:c2:
d7:ba:8a:34:a4:79:c9:f5:db:9b:a0:4b:53:4a:8d:
bf:18:9d:f7:d7:40:33:1d:ff:9b:91:b6:39:52:c0:
0f:e4:f8:65:91:22:38:7e:c6:db:8e:fe:97:bb:99:
64:62:d3:32:47:31:e1:93:dd:51:16:8f:d7:ec:fb:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:04:E4:53:58:80:89:FC:C6:3E:7A:3B:36:49:00:E0:6E:C6:BC
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/FFEE5FNYgIn8xj56OzZJAOBuxrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c6:6000::/36
Signature Algorithm: sha256WithRSAEncryption
31:7d:a8:07:90:22:86:b2:f4:c8:9f:ab:e4:d7:7b:a2:f2:c0:
d0:ad:4a:11:98:b1:d5:f8:2e:03:a5:6d:6c:fe:9b:55:49:13:
32:db:74:09:7f:25:6b:c7:ca:14:f6:08:9b:3a:e9:54:1b:32:
3f:f1:ca:0a:0d:35:40:7b:5e:08:48:ca:3e:2d:4e:d3:05:28:
bd:0b:e8:42:d2:03:d5:23:a4:b2:78:c1:30:36:c7:7c:46:25:
fd:6b:da:2f:3e:f6:02:6a:e2:53:70:a5:ec:5f:66:79:3d:b9:
d4:22:5e:6f:99:7e:ac:ff:29:a1:5e:7e:fa:a0:30:cb:00:30:
ae:3b:1a:69:7e:2e:6c:7f:6a:88:15:e4:e0:95:aa:66:8c:61:
05:96:87:44:07:61:07:d5:36:fa:f6:94:68:5d:10:cb:3a:63:
59:24:77:3f:8f:e5:1e:fb:2d:0e:57:fa:8d:b1:6b:4d:1a:6b:
4c:54:f4:e5:a5:78:9f:ba:98:93:d4:75:fa:46:63:ae:a5:d9:
91:ac:72:eb:bc:9d:90:71:35:f9:d2:7e:ce:dd:d2:ec:bb:14:
c6:d6:61:c4:65:c3:2d:b8:0b:29:1e:e1:8b:6e:07:d3:ba:a6:
0d:57:24:fe:c9:c0:e6:ec:a6:38:4e:cb:e3:ed:7f:99:12:ad:
09:65:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org