Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-vNtlp-6sI08jXkL5wzX-QDfyeQ.roa
File: 1-vNtlp-6sI08jXkL5wzX-QDfyeQ.roa (raw, json)
Hash identifier: CcfLJOXIrmGwIy2xUn2Ey4cu6BDPuTzvmkZgrI9njw4=
Subject key identifier: FA:F3:6D:96:9F:BA:B0:8D:3C:8D:79:0B:E7:0C:D7:F9:00:DF:C9:E4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D1313153CB10F33169BE07AA721EEA1F0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-vNtlp-6sI08jXkL5wzX-QDfyeQ.roa
Signing time: Tue 16 Jan 2024 16:20:34 +0000
ROA not before: Tue 16 Jan 2024 16:20:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 07:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:13:15:3c:b1:0f:33:16:9b:e0:7a:a7:21:ee:a1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 16 16:20:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf36d969fbab08d3c8d790be70cd7f900dfc9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:d8:54:11:f7:ac:01:1b:88:35:35:2b:67:
2b:bb:18:44:92:21:3e:e4:ce:94:68:8b:cc:9b:ec:
a9:14:80:86:13:81:2e:14:ef:83:99:87:01:d2:96:
33:cb:d3:2f:ac:eb:bf:3c:c8:91:d3:09:c6:28:55:
a2:eb:09:44:7b:22:42:69:8e:9a:26:b3:94:d9:f5:
14:e5:30:74:8b:5f:1c:9f:92:bd:2e:c4:9e:bc:ed:
d4:a4:d5:65:55:51:ed:63:2f:47:3f:6d:76:21:d6:
68:fb:d9:f3:6a:f8:de:97:c3:f4:64:c1:0a:ab:17:
b5:b4:fc:b7:3f:cd:75:03:bd:80:0c:f1:5a:dd:1a:
4a:f8:2e:d1:9c:71:9d:5c:85:d3:0f:8b:c7:45:5a:
2f:89:8d:09:e6:34:4e:9d:ea:4f:48:16:84:e0:4a:
e1:ec:29:2a:e9:69:28:1d:9b:0f:53:32:f8:b5:3f:
4a:e0:a3:01:ad:d9:91:c9:d7:cb:03:43:e5:f5:e8:
4b:e5:c5:2c:01:eb:d4:ab:5e:78:7c:26:15:1b:5e:
94:cb:06:4a:b5:d6:35:16:e9:60:32:df:7f:be:97:
01:86:ee:eb:bb:7f:a1:21:5d:6f:cb:e2:1a:04:60:
3c:ca:5b:77:7e:b1:1b:1d:ae:53:e4:d1:db:bb:29:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:6D:96:9F:BA:B0:8D:3C:8D:79:0B:E7:0C:D7:F9:00:DF:C9:E4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1-vNtlp-6sI08jXkL5wzX-QDfyeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e6:9f:31:e8:b0:40:1b:ba:a8:c4:20:8a:14:89:24:90:a2:
27:af:cd:fc:ad:dc:05:bd:6e:87:ab:d6:96:a8:54:71:e2:a8:
2d:fb:de:7b:5d:56:9b:d3:d8:08:40:92:f2:8d:e8:d0:4b:5c:
00:9b:b8:b1:b6:ac:79:e6:82:09:fd:ff:6c:6e:f0:f9:c6:e5:
78:15:c0:50:be:e8:85:46:74:f5:08:5d:16:fc:16:d7:e7:58:
d3:f1:9c:87:c7:68:d6:c2:29:10:b9:9c:d9:ae:53:b5:62:9a:
d5:1b:ea:b2:8f:8d:d5:41:01:d8:57:85:09:be:bf:6e:74:b5:
b9:c4:63:b3:d8:95:d0:2b:d5:36:24:e8:d2:2f:ef:89:3b:fb:
3b:b5:94:4c:77:df:be:89:2c:eb:c7:32:c1:01:fe:7c:19:c4:
21:56:12:c6:20:3b:1c:0d:00:0b:84:3a:fd:c8:2e:40:cd:30:
d9:b5:be:9f:89:c9:c1:de:36:d1:6f:e3:d3:30:1f:99:f3:5a:
38:db:5b:4a:63:88:07:f7:b9:7d:96:5b:1f:e1:c1:e0:f1:77:
08:de:cc:59:4c:2e:35:eb:40:9e:b7:3a:6a:42:e5:0b:90:fb:
b2:80:a8:7d:3c:21:2f:e6:4a:1b:4f:d4:60:17:1e:7f:84:83:
b1:da:49:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org