Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/FVuw40Mjj6Ypwm5HQjj_jjbBjUM.roa
File: FVuw40Mjj6Ypwm5HQjj_jjbBjUM.roa (raw, json)
Hash identifier: 3w9q/f1VipUQTAw8SFg7/5mAdYrJ6J7BogxcMGjVyY8=
Subject key identifier: 15:5B:B0:E3:43:23:8F:A6:29:C2:6E:47:42:38:FF:8E:36:C1:8D:43
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 01856FDDC0B7F26A3C3639B55A1216E5FABE
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/FVuw40Mjj6Ypwm5HQjj_jjbBjUM.roa
Signing time: Mon 02 Jan 2023 00:24:41 +0000
ROA not before: Mon 02 Jan 2023 00:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12540
IP address blocks: 212.64.160.0/19 maxlen: 24
2a0d:fc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Jul 2023 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c0:b7:f2:6a:3c:36:39:b5:5a:12:16:e5:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jan 2 00:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155bb0e343238fa629c26e474238ff8e36c18d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:4d:a5:6a:59:f3:e1:f2:9b:42:09:09:21:
41:36:bd:10:05:c1:b0:a0:91:2f:76:a4:a1:f5:43:
d8:86:23:b8:27:94:6a:37:ca:78:f8:78:06:ea:ae:
ad:c9:6e:be:21:af:0c:9d:fb:59:d8:66:d0:19:68:
70:c1:a9:22:33:8f:32:46:d4:85:34:64:14:92:6f:
b7:13:68:ae:c7:67:f6:eb:e0:8f:d6:6b:6f:56:db:
6a:4a:be:21:95:a9:99:a5:0d:5a:22:a1:29:a3:66:
4e:19:ff:26:54:06:c7:1a:51:b1:f1:f1:35:38:ed:
48:df:6c:de:a9:8b:81:ea:3f:e8:7f:bf:cc:5a:4d:
e0:e1:76:35:cd:27:cd:d8:74:6b:4d:3e:6b:0b:be:
d5:4d:23:97:d1:b9:09:67:4b:7b:ed:c3:5a:e6:de:
24:62:4b:84:5a:22:9c:47:0a:f5:c6:9f:6e:50:c7:
c4:64:fe:ec:b5:3c:bb:72:ab:42:2c:38:99:05:49:
e0:43:ed:0f:db:bb:c6:3f:81:f1:fb:f0:89:75:13:
c4:ff:70:1e:f4:f6:4d:9a:e6:09:cb:23:54:8b:83:
4b:e3:64:06:27:0f:f9:b1:30:91:13:32:7b:49:fe:
5c:6e:e1:ae:65:bf:f5:48:19:ee:5f:20:33:ec:a4:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:B0:E3:43:23:8F:A6:29:C2:6E:47:42:38:FF:8E:36:C1:8D:43
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/FVuw40Mjj6Ypwm5HQjj_jjbBjUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.160.0/19
IPv6:
2a0d:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:5e:35:dd:b3:33:55:2a:da:ad:80:73:3f:86:9b:fd:9e:8e:
51:ae:ae:b6:a4:9d:90:49:0e:05:71:10:56:37:46:e5:6d:ed:
bd:dd:39:8a:46:22:06:0f:76:4a:1a:b4:fc:48:fe:bd:d3:a0:
5b:43:7e:4f:43:f3:3e:23:83:be:6b:14:bd:4b:9b:6a:72:96:
b6:7e:e7:75:6f:78:b6:d6:3e:9d:2d:25:8f:ba:72:67:85:c9:
af:73:30:94:0c:57:c2:fa:89:bc:cf:e1:75:c5:57:3c:d8:b2:
2b:ae:87:84:81:c1:cb:8e:e1:72:de:98:83:8e:2d:8a:d4:2f:
29:c4:44:02:32:1c:fa:79:64:4d:50:6d:f4:23:2f:83:be:8d:
e4:fa:6c:1a:88:0d:bb:a3:00:14:64:da:76:75:e7:09:38:be:
9a:c0:dd:38:6c:0c:20:b0:38:33:6d:1d:3f:8d:40:7a:a6:12:
03:84:44:45:60:60:32:e6:e2:83:47:3a:2e:f4:19:6b:74:47:
51:f1:d1:da:36:3a:5c:45:f1:fe:f4:e4:2c:1d:e0:04:61:09:
30:15:52:7d:a6:02:67:b8:8b:6b:2c:03:ee:89:a9:23:d2:3d:
72:2b:f4:27:6f:d3:94:4d:e4:7c:6e:b8:fb:40:89:3a:58:c8:
b5:53:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org