Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/FA9m53Jd7asZiJ-Q1fDDnSWVuSY.roa
File: FA9m53Jd7asZiJ-Q1fDDnSWVuSY.roa (raw, json)
Hash identifier: 8Wq4st4sKvs9lVcAPlMltEKEZi3/Of+4DvuGLt/7i18=
Subject key identifier: 14:0F:66:E7:72:5D:ED:AB:19:88:9F:90:D5:F0:C3:9D:25:95:B9:26
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0189B0C2B7B640E62F1B7B29105A72BB6E1A
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/FA9m53Jd7asZiJ-Q1fDDnSWVuSY.roa
Signing time: Tue 01 Aug 2023 11:01:38 +0000
ROA not before: Tue 01 Aug 2023 11:01:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197445
IP address blocks: 2a13:9ec0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:c2:b7:b6:40:e6:2f:1b:7b:29:10:5a:72:bb:6e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Aug 1 11:01:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=140f66e7725dedab19889f90d5f0c39d2595b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:15:1d:c2:22:e9:44:f7:6c:b7:12:a9:61:f2:
ed:58:e3:91:4c:4c:5f:b7:17:a9:c4:39:0f:d1:15:
eb:e9:24:07:d1:8f:eb:9a:5b:0f:45:b6:2f:65:ef:
09:5d:42:b1:04:c0:f5:47:81:d4:23:db:02:b0:59:
89:c6:0c:f0:29:5b:46:55:e1:26:36:b7:d7:71:bb:
a9:27:3a:57:f4:21:37:d7:ae:39:cf:10:bf:bd:9b:
7e:68:3a:5c:bf:b4:30:99:58:02:aa:69:6c:b7:fa:
16:1d:57:f4:8d:66:e1:0d:39:a7:27:34:07:45:a4:
06:3e:b7:47:3d:30:bf:f4:f7:d6:a1:d4:83:fa:dc:
d2:94:6d:fb:1d:d2:78:f7:83:2d:bf:43:23:2f:2e:
94:0f:f7:b9:35:43:c2:8c:59:d6:0b:da:e9:45:62:
81:63:06:ab:8f:9d:3a:08:84:36:14:d4:c4:01:d8:
46:07:80:c2:fb:00:4d:ed:f5:86:cf:b2:ca:40:94:
c6:80:69:c2:41:9f:12:c0:83:8e:93:46:25:c3:85:
0e:ec:d3:87:05:c9:f2:df:1f:60:c6:25:b4:f0:90:
02:b2:3f:25:2d:5f:d5:d0:1e:79:b1:3d:59:4e:1f:
41:cd:c4:c7:fa:42:1c:28:60:fa:97:46:e3:f9:c9:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:66:E7:72:5D:ED:AB:19:88:9F:90:D5:F0:C3:9D:25:95:B9:26
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/FA9m53Jd7asZiJ-Q1fDDnSWVuSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ec0::/29
Signature Algorithm: sha256WithRSAEncryption
ea:2d:36:2b:44:50:86:f7:81:cc:09:2a:91:8c:37:b6:8f:a5:
2b:6a:7e:c0:97:f2:22:64:eb:34:1c:0d:f4:9f:4f:12:a9:8e:
e2:60:b7:85:89:33:75:28:c3:5c:ca:aa:7e:4d:72:c3:28:ea:
07:be:6a:c9:68:8d:5f:1d:ee:76:ce:c9:0a:a6:75:ad:84:7f:
0c:b5:eb:66:a4:70:24:4c:28:79:70:41:54:9c:e3:c1:e8:f0:
17:69:c0:d3:50:7a:f2:1c:84:53:71:90:99:5d:70:8a:07:c1:
9e:15:4e:34:47:92:c8:14:9e:a1:36:21:a0:67:f4:c3:c5:b5:
0c:e6:fe:db:13:0a:4c:b2:27:68:66:78:6a:a8:7b:20:0e:2f:
59:8a:36:0c:54:71:c7:d0:a6:55:b8:ee:50:af:6d:d8:2b:ef:
b6:ca:c2:33:b9:87:a0:57:3c:ed:14:db:1b:84:09:35:b7:da:
84:a8:84:cd:6a:a0:d2:c0:67:d8:bf:cb:2a:6f:44:38:ce:c8:
fa:8c:23:73:46:f6:b2:b4:50:c7:6a:b7:de:8a:10:80:02:86:
00:04:f3:92:b2:fd:eb:b0:36:7a:5b:e5:3b:fe:f4:85:c4:a1:
33:59:36:cf:8b:9e:f8:15:07:5e:b8:71:fb:7a:92:96:43:3e:
33:55:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:20 2024 by rpki-client on console-fra.rpki-client.org