Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FJTF1ln2CXfKk67Gjm-ud35uUF4.roa
File: FJTF1ln2CXfKk67Gjm-ud35uUF4.roa (raw, json)
Hash identifier: 48LCsgsIDyD+Kx0r4kEKCDATx3bbsU8Dm6rdfuAbaXg=
Subject key identifier: 14:94:C5:D6:59:F6:09:77:CA:93:AE:C6:8E:6F:AE:77:7E:6E:50:5E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B00BABC996B4AC73ABF27BC15D633
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FJTF1ln2CXfKk67Gjm-ud35uUF4.roa
Signing time: Tue 24 Jan 2023 16:09:53 +0000
ROA not before: Tue 24 Jan 2023 16:09:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212173
IP address blocks: 2a0e:b107:1d40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:00:ba:bc:99:6b:4a:c7:3a:bf:27:bc:15:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1494c5d659f60977ca93aec68e6fae777e6e505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:53:33:dc:0d:8a:ae:e5:1b:21:cf:ce:00:
62:13:76:2c:e6:d8:6a:c3:ae:48:af:60:5a:0a:86:
f0:49:78:c9:95:36:55:b0:7a:56:70:ba:9c:11:d0:
4d:b1:0a:8f:18:e0:17:f7:f9:f8:08:67:4b:8f:aa:
a4:0a:a0:ff:51:40:89:79:6a:12:b2:ef:ef:22:8a:
31:8a:f9:4b:3a:01:fd:47:ee:1f:c8:7b:5a:17:40:
74:f1:fb:a2:01:95:c1:7a:3e:7c:6b:d8:f4:35:f3:
ac:43:b7:0a:e6:b2:37:9d:1f:e9:27:29:af:44:81:
13:b1:51:23:89:0d:19:ea:5c:eb:9c:67:e2:0f:07:
13:f9:b6:f3:08:f8:7e:b7:de:37:13:86:92:16:70:
f7:68:a0:8d:ac:70:58:c6:f2:88:5d:32:12:48:6e:
57:d3:04:ae:fa:dd:3c:e3:6f:fd:ff:d1:f4:aa:b3:
d4:26:ab:8f:09:4a:15:1f:59:d7:00:77:86:40:77:
03:e0:bf:6e:93:e4:cb:a3:49:6a:04:a6:ca:3a:c8:
de:c2:6c:2c:6f:26:9e:25:e7:c9:84:f5:50:0b:11:
ee:fb:e3:fa:77:e7:5c:7b:2a:1a:28:34:f1:41:c8:
ef:e6:13:cd:2a:38:08:21:4f:b7:96:fb:d7:a4:79:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:C5:D6:59:F6:09:77:CA:93:AE:C6:8E:6F:AE:77:7E:6E:50:5E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FJTF1ln2CXfKk67Gjm-ud35uUF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
7a:aa:e5:80:77:8b:7c:f2:96:68:a5:b0:6f:f4:44:cc:38:1a:
b3:6b:b0:fb:72:36:72:d1:7e:b1:1e:44:7f:a2:36:49:66:a6:
33:fb:b4:e9:91:d3:00:63:c2:4b:76:88:9c:07:2e:96:d3:29:
5d:71:64:80:f0:05:a8:4b:96:60:57:89:69:cb:f7:32:f7:87:
53:26:84:c4:a0:af:4f:5c:2c:85:59:52:5d:4e:96:3a:51:8e:
60:d7:28:9c:56:4c:70:e1:e1:69:d5:e7:2f:29:99:ca:28:2b:
7f:d9:35:a7:cd:49:ab:a9:37:bb:7c:ac:c0:c8:01:1a:21:8c:
c4:72:23:83:55:8e:34:21:24:7c:2d:66:80:ce:43:90:64:16:
fb:fc:f0:f6:cf:66:52:fc:ab:fe:c1:16:fe:c5:98:57:ef:53:
53:6e:dd:3a:47:70:75:33:08:5c:69:cf:90:4c:27:64:a3:2e:
72:b1:21:03:b3:d5:e7:07:a5:2e:0f:96:aa:fe:b5:a7:d7:ea:
37:f7:4a:ca:7b:ad:cc:86:75:47:ed:a6:da:90:fe:44:16:69:
d8:41:38:1b:ae:db:d9:49:05:96:d3:8b:ca:70:fa:95:3b:e6:
e3:fd:3f:ed:c7:41:e1:d2:2c:36:e9:df:e5:33:38:1a:02:ad:
45:83:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org