Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FD-irP-f2PsW6Zh1FzdKfz0FvyQ.roa
File: FD-irP-f2PsW6Zh1FzdKfz0FvyQ.roa (raw, json)
Hash identifier: 2ikg5fJzwdInqD+6yOARFI56sIdw8V9qVD/4qrBJRmI=
Subject key identifier: 14:3F:A2:AC:FF:9F:D8:FB:16:E9:98:75:17:37:4A:7F:3D:05:BF:24
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01871B290CA686022B9531440853E7993055
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FD-irP-f2PsW6Zh1FzdKfz0FvyQ.roa
Signing time: Sat 25 Mar 2023 23:44:47 +0000
ROA not before: Sat 25 Mar 2023 23:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212121
IP address blocks: 2a0e:b107:1130::/48 maxlen: 48
2a0e:b107:1130::/44 maxlen: 48
2a0e:b107:1132::/48 maxlen: 48
2a0e:b107:1131::/48 maxlen: 48
2a0e:b107:113e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1b:29:0c:a6:86:02:2b:95:31:44:08:53:e7:99:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 25 23:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143fa2acff9fd8fb16e9987517374a7f3d05bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:57:be:d0:25:49:ee:cb:f8:61:9a:50:ed:e9:
33:65:9b:b4:21:09:89:6c:b7:8b:62:af:e2:67:a1:
31:c6:ed:a3:3e:9b:aa:0a:20:98:6a:07:dd:3f:1a:
ac:29:95:04:b8:28:ed:64:21:b8:31:f9:59:75:03:
ac:b8:07:17:1a:d3:c1:a6:4d:ab:c5:b7:ac:81:c5:
6b:40:eb:a2:c4:dd:71:20:b0:68:d6:3c:61:90:1a:
b5:3f:bd:66:fe:2b:ee:93:e1:e3:3c:d6:7a:ad:c4:
e6:8d:40:93:92:97:82:24:8b:37:47:01:38:2a:e0:
8b:d7:a4:22:ab:41:e1:2f:a7:50:6e:db:41:3c:76:
88:53:8b:4f:7e:91:b1:86:d5:17:1b:4b:c5:9c:19:
db:31:e1:e5:93:d8:35:8c:f8:7b:e6:4f:bc:50:46:
b7:09:93:f3:76:c8:49:46:6a:7b:b6:f9:4f:5f:71:
8e:84:cc:6d:74:6d:06:34:9a:a5:f8:03:9a:a3:46:
72:be:91:9f:3b:b8:31:99:2e:9d:53:bf:99:b8:8f:
af:ad:ee:c0:9a:61:ea:0b:3f:60:58:21:58:96:ae:
f8:25:89:a8:f4:ab:2c:79:2c:6f:f9:da:ce:a0:aa:
a2:21:68:f2:8b:2e:1d:65:c5:a6:59:f6:7c:dd:aa:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:A2:AC:FF:9F:D8:FB:16:E9:98:75:17:37:4A:7F:3D:05:BF:24
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FD-irP-f2PsW6Zh1FzdKfz0FvyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1130::/44
Signature Algorithm: sha256WithRSAEncryption
27:68:b8:04:03:5c:8c:12:fe:75:54:0c:12:f2:eb:a8:00:67:
b7:f7:09:f7:a5:9c:c8:d6:da:ec:58:48:b8:48:b7:c6:3b:6a:
e2:e6:f0:48:b7:20:53:fd:6b:8f:9a:93:3c:49:c2:a4:72:4a:
20:9c:23:ba:4f:41:ec:17:03:bd:46:19:4b:cb:32:2c:77:64:
74:c2:3a:e3:8f:c2:7a:b7:a5:35:67:7d:17:7a:0b:d6:80:db:
fe:d0:53:c3:f5:50:30:b8:d8:00:58:39:92:a8:ac:01:be:7b:
52:6e:f7:d6:1e:da:b7:3a:16:e9:f8:db:cc:ee:5b:60:6e:56:
78:70:72:57:54:bb:f1:5d:02:91:a3:df:c3:2c:d4:fa:fc:86:
6b:2f:87:4f:60:02:a2:e7:81:da:81:20:7f:db:20:46:8a:65:
97:c1:3d:1c:d2:27:c5:b4:c2:98:24:4f:69:6e:69:1e:94:34:
7f:92:0a:e3:0b:7e:6c:aa:e6:2f:7c:25:c8:be:2c:d6:e4:57:
05:35:6f:cd:1d:b0:92:28:a5:fd:d9:83:17:42:a9:b3:41:dc:
c9:23:83:7c:71:81:48:1a:c7:37:30:21:c6:b1:c9:49:68:7d:
5d:86:89:d4:43:3b:b7:8f:5d:28:60:43:f3:91:28:2b:d7:de:
68:61:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org