Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/j8FNbG4BeOKmBhx7rMYMF7yTJGU.roa
File: j8FNbG4BeOKmBhx7rMYMF7yTJGU.roa (raw, json)
Hash identifier: 6h5cFz8z1d+LjaZBiUOeHGcYT7aHDlqbReZDb44gN80=
Subject key identifier: 8F:C1:4D:6C:6E:01:78:E2:A6:06:1C:7B:AC:C6:0C:17:BC:93:24:65
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018571DE791934ED2A6C207CB1AFA7A3DE25
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/j8FNbG4BeOKmBhx7rMYMF7yTJGU.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213045
IP address blocks: 2a13:1c47:ffd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:79:19:34:ed:2a:6c:20:7c:b1:af:a7:a3:de:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc14d6c6e0178e2a6061c7bacc60c17bc932465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:a8:5f:7a:23:14:6a:2c:58:3b:87:d9:6a:
47:26:10:c8:3c:65:8d:09:34:e8:b4:25:e7:d3:92:
8a:83:ab:cd:e2:a4:3b:53:f8:c6:c0:65:4a:a4:b1:
4a:9a:c8:99:ef:22:4e:96:51:59:72:d8:e5:a1:26:
59:0c:f9:a3:09:6e:9a:49:e1:94:9c:07:7d:1b:dc:
29:f0:61:4d:d6:7f:dc:21:20:d1:00:af:d8:a7:9e:
89:f2:ea:71:3b:84:26:af:a6:b3:26:9c:9d:63:5a:
c3:c2:7f:60:8b:af:23:5a:06:10:fe:2d:1a:4c:2c:
c6:c9:d3:c1:a9:1c:6a:8d:63:ec:0f:dd:bf:9e:db:
4f:fb:6d:fe:15:dd:e7:8a:48:2b:77:0c:ea:8c:6b:
0f:a3:40:21:5b:68:3d:77:1d:a6:55:c5:99:9d:b4:
e7:f0:99:3b:15:38:d0:45:25:b7:11:48:e5:1b:9e:
a5:1c:ca:cb:89:be:79:67:35:69:70:4f:86:32:7d:
13:40:8f:a4:ec:61:35:e8:26:dc:68:db:cf:e5:75:
92:08:6f:44:dc:b6:7a:b5:48:a3:f4:53:e1:a8:46:
97:58:3c:d6:87:47:10:f6:ec:71:14:5f:a5:84:46:
3e:8c:38:40:17:64:a0:95:21:9b:9a:6c:41:b7:35:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:4D:6C:6E:01:78:E2:A6:06:1C:7B:AC:C6:0C:17:BC:93:24:65
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/j8FNbG4BeOKmBhx7rMYMF7yTJGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:7f:30:17:f8:bb:2d:1f:81:92:02:8d:fb:c3:15:e0:2b:78:
d1:bb:fe:db:41:35:f7:e0:b6:60:db:c3:2a:c7:61:d9:e0:51:
7d:7c:3e:1e:f2:83:91:97:4c:06:0a:95:0d:b7:d4:d3:c9:cc:
b4:0e:2a:00:4b:61:5b:b3:b2:0f:bf:85:1f:ff:0b:39:f1:89:
67:8d:9b:7c:2d:6f:2a:3b:cc:8d:b0:4f:c6:9f:e9:f6:cc:51:
ce:ce:aa:d2:2b:3d:5d:71:11:52:07:1e:82:fa:f8:d6:ba:ac:
29:b6:2c:a0:f4:44:62:93:1d:6d:0d:71:bc:bf:2a:72:f6:52:
8d:21:3e:c5:19:eb:ae:b5:0c:3d:e7:5a:f2:98:2b:e8:c3:a7:
a6:fb:ef:df:9d:8d:f3:14:32:d7:c3:15:4a:ad:64:e5:6e:27:
5e:14:62:84:12:36:1d:f0:f4:f2:98:c0:9f:17:4a:ce:57:58:
b9:da:28:7a:47:91:7b:66:37:90:b9:07:a1:5b:6d:51:e4:2f:
e3:51:32:b0:a6:69:49:12:97:2a:95:a2:53:80:31:4c:7a:fb:
5e:83:b9:f8:e6:a1:b4:57:65:d6:6a:4c:11:05:84:8a:4a:38:
49:b7:ba:ae:35:d6:9f:8f:e6:3d:7e:a9:a2:b4:ca:94:62:57:
bc:13:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org