Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CFUC37L7zTxLmfRGgvGdRfDdoNs.roa
File: CFUC37L7zTxLmfRGgvGdRfDdoNs.roa (raw, json)
Hash identifier: NJqMFo07DOWiNr8E+vqj+k95ZMsnDIjs9mZ4YhzkPFs=
Subject key identifier: 08:55:02:DF:B2:FB:CD:3C:4B:99:F4:46:82:F1:9D:45:F0:DD:A0:DB
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0186505BB618088D1D3351BBCA24A1822A66
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CFUC37L7zTxLmfRGgvGdRfDdoNs.roa
Signing time: Tue 14 Feb 2023 14:37:12 +0000
ROA not before: Tue 14 Feb 2023 14:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199897
IP address blocks: 2a03:5840:f2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:5b:b6:18:08:8d:1d:33:51:bb:ca:24:a1:82:2a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Feb 14 14:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085502dfb2fbcd3c4b99f44682f19d45f0dda0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:5e:a0:39:61:ef:48:f3:c3:11:63:9d:77:
b7:7e:d0:4b:5b:55:f5:97:9c:29:3d:44:e6:7f:9c:
a6:1a:de:f1:52:71:3f:c8:77:12:56:53:dd:72:97:
41:d9:60:6d:b2:e1:88:b8:87:ba:58:cd:49:9e:10:
4c:f5:4c:00:99:4f:d5:99:d2:b0:4c:06:4a:4d:3c:
2b:3a:18:4f:bb:27:c9:c0:09:30:1c:22:8f:93:7e:
8f:cb:35:2a:c4:89:6c:ee:cf:30:89:4d:5a:a3:aa:
3b:c3:66:19:3c:8a:b5:b0:f1:fb:c9:5f:ab:55:5f:
64:e3:2f:b0:b8:de:f6:8c:46:0f:ae:0a:07:1d:3f:
7e:60:b9:95:04:89:2f:8f:99:0b:1b:b0:a2:79:18:
37:08:35:9e:d6:1c:4a:b6:db:bc:b0:5a:14:70:96:
64:c3:e1:bf:ae:35:f2:73:82:ae:2a:bc:4e:a4:9d:
7a:dd:34:bd:3a:0d:d6:7a:b3:6f:be:9d:44:34:ad:
2d:a5:eb:c0:ba:5e:06:10:5b:32:d8:c5:02:83:e2:
e8:ea:ed:6c:26:62:c2:a1:1f:e6:84:b4:00:8e:03:
26:94:0b:43:e7:42:a7:3d:40:ca:64:dd:da:ba:da:
ac:ee:a4:31:da:32:fa:53:ae:be:e3:cc:61:b1:2a:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:55:02:DF:B2:FB:CD:3C:4B:99:F4:46:82:F1:9D:45:F0:DD:A0:DB
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/CFUC37L7zTxLmfRGgvGdRfDdoNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f2::/48
Signature Algorithm: sha256WithRSAEncryption
82:c9:00:02:3c:4f:04:c0:58:9c:5e:38:d6:d4:9d:ab:9d:20:
fb:0c:55:f8:9b:7b:90:a9:c8:a2:ee:ac:cc:37:d4:31:78:7f:
c9:95:f4:db:f9:45:b8:62:80:33:1b:03:d0:53:28:56:02:fe:
32:11:d2:ed:56:7c:da:bf:2d:6c:42:66:cf:a5:6a:8f:2d:06:
7f:9d:20:d3:ad:0d:2e:d8:8d:e6:4a:52:25:a8:3f:5e:ec:df:
a5:15:ca:24:70:d6:5a:aa:da:68:a2:a0:6f:84:9c:37:df:ca:
77:ab:bb:31:67:96:c0:8f:49:76:76:e8:e5:1c:fb:c5:43:9b:
40:fc:62:9c:16:c8:5f:be:ff:5e:74:58:15:09:e1:3a:ef:93:
b6:9b:d4:25:87:5a:ba:ce:4c:00:27:2c:40:1c:65:27:3e:88:
54:86:16:43:3b:a2:09:0c:38:ae:37:29:ed:f5:35:78:ba:7e:
f8:5a:18:d9:e7:53:b4:de:9a:7e:62:28:78:dd:f8:e5:5e:7a:
09:0a:93:1b:8f:18:53:cf:19:a3:c6:91:68:cf:4e:77:e0:9f:
c0:7a:f5:c9:fd:bc:af:92:bd:2e:2c:da:29:fe:ee:6c:cd:09:
c9:94:47:ba:95:2a:fe:e6:48:24:e8:90:8f:f6:f7:2f:50:34:
98:6b:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org