Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa
File: FDPla-xCL_DNCcz1uPkg6aLegKE.roa (raw, json)
Hash identifier: DDo0maWvLfj1koeJcAUT4FWgWSbHlMdyZ3Ob6MLLlnc=
Subject key identifier: 14:33:E5:6B:EC:42:2F:F0:CD:09:CC:F5:B8:F9:20:E9:A2:DE:80:A1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E798DC76C2947667A193B908D9D3F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa
Signing time: Mon 02 Jan 2023 05:15:04 +0000
ROA not before: Mon 02 Jan 2023 05:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142438
IP address blocks: 2a0e:b107:da0::/44 maxlen: 48
2a0e:b107:14a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:98:dc:76:c2:94:76:67:a1:93:b9:08:d9:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1433e56bec422ff0cd09ccf5b8f920e9a2de80a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:f6:1f:03:52:62:91:60:ad:42:17:98:2a:
f9:30:d8:d4:3d:40:00:bd:3a:7a:e0:e9:e1:15:7c:
f5:49:62:5a:54:1f:0b:e7:58:f9:ff:eb:87:d5:9f:
80:2e:d7:55:0d:0f:a8:66:0d:9d:02:fd:60:67:0b:
e0:b2:aa:12:a9:47:d9:f4:c3:4f:ea:34:47:f7:74:
94:a1:b7:8b:b4:e7:93:0d:42:64:16:97:33:5a:4e:
b1:fa:3d:98:c3:75:47:ac:0b:a3:17:21:b0:58:f2:
45:27:dc:ff:f4:8c:fd:89:77:52:25:06:ba:f0:7c:
84:d5:ca:dc:6b:07:c1:81:34:66:d4:67:b2:3e:e2:
e8:47:a8:09:92:1a:19:ea:77:a7:2b:4d:00:a7:a1:
b7:fc:9f:c2:41:c2:f9:4e:78:da:08:91:e6:d7:d1:
5d:49:34:bd:93:78:be:4d:cc:c2:09:d3:49:24:25:
ea:2e:62:20:cf:30:c9:e2:6a:91:2b:28:54:ca:db:
6d:a9:59:e2:75:f7:92:07:39:b2:45:c9:5c:b1:89:
c2:7e:1c:aa:f7:36:e6:1e:db:65:b7:72:ce:3c:9b:
89:d0:05:8e:cc:19:3c:a3:f3:f6:9d:4d:5b:c9:51:
45:be:d8:b1:3f:c1:80:bb:58:df:3c:1e:9b:23:4a:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:E5:6B:EC:42:2F:F0:CD:09:CC:F5:B8:F9:20:E9:A2:DE:80:A1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FDPla-xCL_DNCcz1uPkg6aLegKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:da0::/44
2a0e:b107:14a0::/44
Signature Algorithm: sha256WithRSAEncryption
75:48:3c:ac:68:0a:b5:3a:0a:31:a3:d3:7a:0e:68:47:53:2f:
5d:4d:bc:7e:e1:76:22:7e:0f:59:8f:1f:88:51:f7:01:77:e4:
99:38:29:30:25:c0:4c:b8:39:d7:4f:48:6a:bb:84:34:f8:84:
c6:db:d9:24:3d:64:23:28:58:27:37:65:0c:68:74:90:dd:b7:
78:2a:fa:54:e8:da:49:88:17:cd:30:c9:f9:4f:bd:d9:b1:5d:
b6:a9:3e:11:c7:b2:6b:35:f7:d5:fe:24:2b:93:d8:ca:17:14:
e2:05:2a:63:95:9c:f6:c9:db:89:41:5e:8b:0f:d5:54:6b:c5:
53:85:2c:b2:14:5f:43:c8:2a:d2:9a:56:fd:bd:a0:7e:99:4c:
da:dd:a6:76:9e:f5:cc:a0:c1:74:f7:5b:22:2f:aa:02:e6:21:
39:24:cc:52:a6:60:95:ff:f4:83:a8:8a:07:b8:37:05:c7:9d:
fb:56:ee:63:c8:82:7d:e4:7c:8c:b4:6a:22:19:79:32:c9:50:
06:ed:da:4f:4e:3b:ca:db:63:ae:48:74:f1:76:37:00:7e:0e:
aa:a1:d4:9c:fd:47:1f:c0:9a:64:7f:e7:e3:16:12:7e:d4:65:
80:0d:db:75:8a:4a:8f:10:e5:63:83:77:09:bd:b5:6e:13:34:
a8:2e:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org