Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fpja7qP9Tv1FBVeOFgdWT3LiklM.roa
File: Fpja7qP9Tv1FBVeOFgdWT3LiklM.roa (raw, json)
Hash identifier: f9sntYt1oSciX7zpJgAlY0vyAPKqegU3+8l/Ocfz7x0=
Subject key identifier: 16:98:DA:EE:A3:FD:4E:FD:45:05:57:8E:16:07:56:4F:72:E2:92:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D3485AC2D7FAD288952FFAFA7F5D6E427
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fpja7qP9Tv1FBVeOFgdWT3LiklM.roa
Signing time: Tue 23 Jan 2024 04:13:12 +0000
ROA not before: Tue 23 Jan 2024 04:13:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207445
IP address blocks: 2a0e:b107:444::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 May 2024 02:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:34:85:ac:2d:7f:ad:28:89:52:ff:af:a7:f5:d6:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 04:13:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1698daeea3fd4efd4505578e1607564f72e29253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:d4:87:2b:88:5d:b1:e9:d6:94:fd:f1:f6:
0a:32:83:b3:04:06:7e:ca:c7:74:01:93:65:1a:3f:
b3:78:63:dc:72:de:f7:d1:36:32:86:db:7d:b5:f2:
28:40:86:f0:b3:b4:6f:ba:0c:7a:ff:47:f5:61:9b:
35:e0:fd:3d:6d:f0:62:a2:e9:b4:51:42:08:46:c1:
ea:c2:56:5c:96:3e:a2:95:07:bd:34:c3:5c:f0:e1:
a1:7d:83:a3:29:45:6b:52:1a:67:a5:3e:5d:50:70:
a5:0e:b5:df:70:a2:e1:3a:e4:75:63:a8:32:01:14:
db:5e:ea:da:af:76:51:57:9a:85:28:90:f3:ab:b6:
fa:bb:c1:d8:ed:95:cd:4c:34:32:81:97:62:26:67:
82:93:e0:91:91:06:c5:4c:07:0d:92:d3:ea:2e:ef:
1c:a9:a2:c5:42:b7:2a:26:0f:54:34:2d:12:0c:fe:
25:5d:59:58:ca:62:ae:11:e5:08:de:02:90:ee:41:
05:d1:c4:0a:a1:dd:20:ea:f0:68:3a:a3:35:23:a9:
33:ec:85:67:8d:78:70:79:32:6a:80:27:a6:14:d5:
2e:30:2d:40:b2:75:16:ce:34:12:b4:2d:b0:68:94:
3a:19:e2:89:67:bb:ba:10:5d:da:8e:9e:97:1f:d9:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:DA:EE:A3:FD:4E:FD:45:05:57:8E:16:07:56:4F:72:E2:92:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fpja7qP9Tv1FBVeOFgdWT3LiklM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:444::/48
Signature Algorithm: sha256WithRSAEncryption
65:9b:e1:e5:e5:0e:4d:c8:c5:91:e8:d6:65:98:0f:cb:28:bf:
b6:ad:fc:ca:66:e9:02:9c:d2:2e:48:70:64:0c:54:20:7e:ba:
b2:f2:4c:78:31:d3:d8:0d:a4:45:bc:b4:ff:dc:64:91:76:c9:
f7:f5:e8:ac:e6:bd:c3:fd:05:92:0a:6e:2c:64:e0:5f:ad:21:
cd:4e:d7:8c:55:82:5e:7d:d1:89:d2:e4:27:b5:21:39:98:7f:
ba:40:51:25:c6:c5:df:a1:5b:0c:e2:81:f9:d2:da:3b:64:b0:
9b:e0:c3:23:38:c4:fa:43:9a:47:73:a9:8b:ed:9d:82:f4:8a:
5a:c3:11:7d:ac:6b:e1:32:ed:a6:45:20:71:f6:cb:35:3b:e4:
a6:80:3a:a7:d1:9c:1c:38:08:b3:e2:60:f1:e1:31:4f:e3:c7:
4f:d6:1c:00:e0:d4:f8:2b:8a:ff:d4:01:5e:a9:fd:8e:69:c7:
b9:64:40:7c:4e:d4:f6:38:00:65:41:97:35:2c:10:8f:f6:5b:
28:3a:64:4c:47:e0:44:3d:40:35:62:e8:8a:f9:b1:bf:7b:55:
5a:65:65:bb:86:7f:54:f5:7f:7e:31:0a:2e:43:52:f0:ff:2b:
ac:cc:02:b3:67:83:7e:8a:eb:29:3d:32:d5:85:a0:61:74:f6:
71:6d:7b:aa
-----BEGIN CERTIFICATE-----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Generated at Wed May 1 06:28:08 2024 by rpki-client on console-fra.rpki-client.org