Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/fwZENjk2ptHJjWYOdRwL-AT_pDs.roa
File: fwZENjk2ptHJjWYOdRwL-AT_pDs.roa (raw, json)
Hash identifier: 4lEpptbgAKanZK3JdXdzeZH9YVqBxHvONcYJ+MjYNC8=
Subject key identifier: 7F:06:44:36:39:36:A6:D1:C9:8D:66:0E:75:1C:0B:F8:04:FF:A4:3B
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018C3905DD7B71A2E54004A50F0CF37C3008
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/fwZENjk2ptHJjWYOdRwL-AT_pDs.roa
Signing time: Tue 05 Dec 2023 08:08:54 +0000
ROA not before: Tue 05 Dec 2023 08:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212008
IP address blocks: 2a05:1082::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:05:dd:7b:71:a2:e5:40:04:a5:0f:0c:f3:7c:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Dec 5 08:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0644363936a6d1c98d660e751c0bf804ffa43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:39:d5:c5:df:8c:85:8e:35:9e:58:a5:2e:
02:4d:79:66:50:f7:09:0d:c4:c8:7a:33:b7:8c:ac:
e2:bd:f3:20:51:68:6b:cd:4d:5a:15:1c:8e:36:ff:
bd:e0:20:66:57:da:9c:01:a6:1b:55:e6:37:d5:5c:
f2:e2:b5:fc:71:78:1b:c8:85:64:1d:8d:4c:ec:42:
fb:b9:cd:55:4a:5f:ab:66:29:c1:c6:36:03:43:01:
c6:6e:6c:39:49:c5:3c:47:6a:4a:78:56:f7:34:8a:
61:9f:08:e8:2f:f6:ae:62:bc:c6:85:6c:c1:e4:9b:
95:a7:23:96:a2:40:90:8d:aa:6e:b3:1a:47:82:a7:
12:a2:9d:cf:ce:6d:8c:71:16:f3:29:3f:d1:bc:63:
71:bc:67:6b:81:a7:5b:cf:e0:15:10:3c:51:12:8f:
43:ef:c8:7e:f3:f5:aa:31:4e:aa:4e:e7:de:24:8a:
7a:51:e0:11:39:4b:53:6e:24:82:79:fd:ff:f7:c5:
75:cb:48:98:2f:4c:12:2c:29:71:98:f3:cc:7e:cd:
50:c9:d6:e4:69:77:ba:7d:50:3d:7b:fc:38:cc:cb:
e3:3b:95:44:71:89:05:45:d9:a5:5c:58:89:8a:6f:
c7:b2:f6:ba:be:35:4b:d9:c7:3a:dc:93:22:dc:9c:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:06:44:36:39:36:A6:D1:C9:8D:66:0E:75:1C:0B:F8:04:FF:A4:3B
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/fwZENjk2ptHJjWYOdRwL-AT_pDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082::/32
Signature Algorithm: sha256WithRSAEncryption
bb:5a:dc:ad:fd:7e:8e:77:42:db:0f:0e:68:a6:29:ab:d4:86:
52:91:b3:b1:88:2a:85:b5:ff:c8:73:f7:34:ef:b8:23:62:a9:
6f:99:9b:5e:da:7c:9e:15:41:4e:36:22:95:93:53:b0:b5:d3:
70:e0:a3:3f:08:55:c9:c0:73:1e:5e:53:ed:a5:ae:4b:48:f0:
ae:2d:af:ad:93:63:f8:e6:01:c7:38:9a:98:50:3e:af:17:29:
ec:ac:05:87:19:4d:32:a1:28:f8:49:9c:6d:2e:c0:0c:bd:0b:
c4:75:7f:e5:64:4f:78:40:67:04:3a:db:0f:e8:4b:03:a0:56:
88:c3:93:0c:fa:aa:04:f4:74:fa:9c:99:64:4e:33:52:a7:34:
73:a7:d4:d1:9c:30:91:c0:5c:c4:7b:ed:eb:e3:50:46:86:65:
98:6c:a9:29:de:74:fa:1f:29:e0:1d:4c:0f:39:82:0c:a0:f4:
b3:ae:dd:4b:f8:09:5a:c0:dc:67:93:d4:ab:b8:db:ed:f7:4b:
01:51:1a:49:c9:e5:d7:01:62:f2:66:af:2e:68:5a:b3:64:a2:
a1:07:ed:cd:a2:f3:c5:40:e3:9e:46:7e:b1:ca:9e:75:61:bc:
f2:c0:39:c9:03:c8:20:3e:75:35:f0:92:3a:b9:6b:57:01:37:
62:12:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org