Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F2KwbmTt2HnzAQL-gtL6FMVjb3I.roa
File: F2KwbmTt2HnzAQL-gtL6FMVjb3I.roa (raw, json)
Hash identifier: fPXq6uQW6FH/O/dnTmF4MIKlyigt1kDCw4377+wUKPc=
Subject key identifier: 17:62:B0:6E:64:ED:D8:79:F3:01:02:FE:82:D2:FA:14:C5:63:6F:72
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 0185715560D24659EFAB3E7576DAB82EC445
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F2KwbmTt2HnzAQL-gtL6FMVjb3I.roa
Signing time: Mon 02 Jan 2023 07:14:58 +0000
ROA not before: Mon 02 Jan 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20559
IP address blocks: 213.249.72.0/24 maxlen: 24
2a01:448:72::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:60:d2:46:59:ef:ab:3e:75:76:da:b8:2e:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1762b06e64edd879f30102fe82d2fa14c5636f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:dc:12:7d:80:69:2e:e7:3f:13:b4:7f:2e:
e6:75:b0:5c:32:be:81:63:92:8c:5a:e8:8b:1b:ec:
9e:88:05:5e:9c:34:fa:cd:8c:f8:ce:76:31:c9:5b:
92:a7:1f:f7:95:84:4f:87:85:5c:e3:70:ad:07:5b:
de:4f:31:1a:05:48:70:55:88:1d:80:06:37:ae:55:
21:fb:95:40:ad:91:61:0e:69:e7:fb:c8:e2:08:67:
a0:8b:7c:93:d5:b2:5c:2b:f9:98:1f:24:d5:20:56:
3c:dd:05:c1:ed:76:73:40:ec:11:e8:17:66:64:9b:
5c:db:7c:d2:68:68:10:7d:c4:67:2e:2f:bb:9d:38:
cd:81:2c:24:77:94:22:1a:ee:0a:3d:90:99:08:f3:
98:4f:ed:2e:71:dc:23:f2:a6:7d:4a:8e:2a:93:f2:
81:40:1e:69:69:fe:de:d2:8f:93:37:43:20:18:e0:
fc:b5:9c:b1:aa:ea:69:8c:d2:19:97:f6:b3:50:c7:
d1:4e:40:89:0b:66:4c:ed:1e:69:28:0e:04:26:ba:
1b:34:3a:ac:db:b5:75:74:12:a5:04:f4:e4:4b:c6:
05:c8:89:87:93:e1:b3:8b:4b:b8:32:3b:59:1d:b1:
53:ff:99:1d:ae:21:99:f0:74:de:7f:67:c6:89:77:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:B0:6E:64:ED:D8:79:F3:01:02:FE:82:D2:FA:14:C5:63:6F:72
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/F2KwbmTt2HnzAQL-gtL6FMVjb3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.72.0/24
IPv6:
2a01:448:72::/48
Signature Algorithm: sha256WithRSAEncryption
78:72:53:f8:67:9b:22:80:a2:13:55:ed:ca:9b:aa:1a:bd:6e:
5d:3b:46:ed:a6:0d:e9:fc:10:79:fe:8b:83:f1:6a:2f:84:1d:
7d:5a:c0:04:53:0d:08:e0:56:ac:cc:45:d5:90:8c:13:9c:c0:
ab:07:5b:e8:d2:a4:37:cd:ec:05:84:03:b8:54:bc:03:87:54:
42:62:4f:f2:c9:25:98:19:b6:06:04:c5:fa:e1:db:27:1a:3f:
d1:f1:4b:fd:bd:9b:01:d4:25:2e:34:1b:b9:59:a7:1c:87:0a:
5d:44:8b:28:87:14:4f:3d:e1:e0:32:2d:69:75:7b:df:b9:a0:
12:90:3d:42:7e:38:78:0a:b6:71:b1:d2:12:20:cc:93:d8:d9:
3b:d0:b1:9b:95:8e:16:12:df:f8:da:5e:fb:2a:ef:f8:7a:2c:
94:00:dc:fc:ef:32:91:6c:92:53:98:32:8d:cf:7a:10:9f:cd:
ab:95:2c:df:13:c8:ce:16:be:2d:ac:20:7d:21:11:1b:f6:63:
99:df:ff:ee:f4:4d:24:ce:1a:35:83:6f:92:ea:d1:ee:05:94:
0b:40:e7:13:4f:99:b9:ab:e6:07:59:60:8a:b3:0d:31:63:5e:
5a:60:57:2a:8a:7c:94:d4:b7:b6:a2:a0:99:28:b3:10:cf:8c:
50:56:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:58 2024 by rpki-client on console-ams.rpki-client.org