Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FcI7DeqKq-7moJWOmxp1VTPTooQ.roa
File: FcI7DeqKq-7moJWOmxp1VTPTooQ.roa (raw, json)
Hash identifier: iJfgxUqb/ae3PO6jFDyjYfZZQxHkkEcuUJY5hrSvDgM=
Subject key identifier: 15:C2:3B:0D:EA:8A:AB:EE:E6:A0:95:8E:9B:1A:75:55:33:D3:A2:84
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01856DDD73D684CE2F83E48DFB46237EC919
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FcI7DeqKq-7moJWOmxp1VTPTooQ.roa
Signing time: Sun 01 Jan 2023 15:05:07 +0000
ROA not before: Sun 01 Jan 2023 15:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202473
IP address blocks: 2a03:5840:310::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:73:d6:84:ce:2f:83:e4:8d:fb:46:23:7e:c9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 15:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c23b0dea8aabeee6a0958e9b1a755533d3a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:b1:b8:8c:43:e7:28:00:8e:6e:d8:81:7c:
86:b7:89:f0:e7:ea:36:fb:44:93:9a:c4:c5:13:35:
c9:b2:f1:6b:37:90:02:bc:43:23:9a:2c:37:a6:d2:
c2:3d:20:bb:95:40:34:ce:fc:9b:5c:19:c1:33:53:
3e:d0:4c:7c:eb:c2:13:70:ba:14:21:4d:d5:87:39:
47:f0:d1:c9:3e:43:ed:87:9c:45:e5:36:c2:7a:19:
78:b5:93:ab:72:bb:65:84:78:8b:ba:01:1d:49:59:
d9:4b:0f:b9:26:1e:45:39:d9:2c:92:f3:1d:95:6c:
ec:dc:21:f5:d4:48:66:84:60:7b:81:8a:6c:43:45:
2e:e9:88:5f:3b:80:57:69:cd:ba:1b:ac:f9:94:66:
14:65:d1:be:f5:06:ec:29:2e:e2:9c:08:09:a9:2c:
60:39:b4:81:90:56:62:2f:db:b2:17:eb:ef:23:53:
f1:16:89:24:38:26:0f:0f:7f:40:a3:b1:70:95:b4:
28:98:ef:f5:33:fd:c4:58:51:c8:12:4a:3a:17:4f:
02:03:7c:06:a7:b3:37:6c:43:0c:0d:72:05:83:16:
c0:08:ea:5e:4e:df:27:0b:fe:d9:2d:52:cd:58:d4:
e1:2e:05:91:51:f8:4b:c1:76:4b:27:c1:9a:dc:b9:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C2:3B:0D:EA:8A:AB:EE:E6:A0:95:8E:9B:1A:75:55:33:D3:A2:84
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/FcI7DeqKq-7moJWOmxp1VTPTooQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:310::/44
Signature Algorithm: sha256WithRSAEncryption
89:1f:50:37:23:0b:ce:e4:e9:95:79:63:a1:9b:64:bd:2b:fb:
fb:f4:0f:5d:51:33:41:f9:6b:b8:c5:07:4d:81:57:1c:35:81:
47:c2:99:1a:55:17:90:6b:3f:23:60:83:1f:ce:48:67:fc:db:
9c:bd:59:f6:5a:08:15:1c:33:0c:e3:1f:79:33:83:73:aa:eb:
04:bb:e9:2e:c5:2e:75:82:29:7c:10:7b:49:a3:98:8a:2e:6f:
b8:cc:3b:c7:b4:67:5a:18:3f:32:6c:b6:3d:38:06:10:55:34:
6e:a9:28:85:e9:c0:40:82:89:36:a4:48:7d:3b:b2:e6:61:25:
09:47:3f:85:28:ab:1f:65:e1:c6:3a:d2:8f:e2:3a:7a:3d:7e:
01:11:ae:48:8a:3f:58:c9:20:7f:f3:1e:d9:6c:31:8f:86:d1:
de:de:56:8d:61:57:1a:9d:38:3a:09:e1:88:41:a0:d4:f2:25:
d2:c5:45:38:91:7f:31:9e:0d:85:2a:ee:ed:e6:e5:a0:6c:88:
66:11:d7:41:c5:03:8f:37:c0:31:65:29:96:d4:3f:b7:90:53:
98:08:7c:94:d0:07:3f:05:b4:f9:b0:af:6e:99:3d:91:0b:6e:
66:ca:d1:a7:d6:a2:7d:f9:b3:47:80:5a:5c:75:ee:db:bc:a2:
b4:3d:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:06 2024 by rpki-client on console-ams.rpki-client.org