Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FMGIrxk8sz3of4PfZbEuTPALVSk.roa
File: FMGIrxk8sz3of4PfZbEuTPALVSk.roa (raw, json)
Hash identifier: gCNFdr88RBvsFef3NJ+cRvcbEE7Pg6ohkiRrE2J3m7w=
Subject key identifier: 14:C1:88:AF:19:3C:B3:3D:E8:7F:83:DF:65:B1:2E:4C:F0:0B:55:29
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F3000CE0CF959F385C0F9106D56702A
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FMGIrxk8sz3of4PfZbEuTPALVSk.roa
Signing time: Sun 01 Jan 2023 21:14:54 +0000
ROA not before: Sun 01 Jan 2023 21:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210384
IP address blocks: 2a0e:aa07:e02b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:00:ce:0c:f9:59:f3:85:c0:f9:10:6d:56:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c188af193cb33de87f83df65b12e4cf00b5529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:d0:a1:1a:ec:b3:3c:26:dd:3d:e1:8b:e8:
09:c2:f2:04:81:4c:40:5c:c4:c1:49:a1:68:c5:5f:
ae:69:5c:b2:72:50:fb:bd:46:37:d0:9f:d6:94:0d:
7a:3e:55:2e:7e:c7:b6:2c:b5:5a:3c:1c:df:31:18:
3c:9a:b5:56:f4:a9:d0:bc:f2:35:98:3c:ea:4e:dd:
97:62:d8:9e:f7:c3:3d:bc:39:ce:05:09:0a:09:68:
91:8c:81:a3:d3:52:ae:8d:18:2d:36:74:ee:eb:1b:
2b:3c:3f:64:19:e7:2b:58:35:d4:ce:0b:9f:60:ce:
42:4d:6c:27:a6:42:f3:62:48:17:6c:9a:f0:1c:b8:
41:67:e7:2f:33:e0:26:92:66:73:cf:3c:e8:81:98:
aa:d2:23:1b:cf:c7:8f:89:50:7e:3d:78:3f:8a:d4:
a3:44:0f:20:c1:f8:18:3a:83:60:3a:ff:4d:91:3a:
4b:d4:97:87:b3:a1:27:37:17:7b:87:5d:08:5f:3f:
64:89:aa:57:67:3a:c1:af:c4:e6:fe:09:8b:4c:56:
ee:ef:c0:21:25:e1:ff:36:1b:fd:8d:7d:33:a4:2d:
9c:38:16:bd:48:09:41:e9:0d:68:3e:77:71:4a:51:
8a:f5:27:f3:46:1d:34:57:a8:71:94:d4:1e:e1:7f:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:88:AF:19:3C:B3:3D:E8:7F:83:DF:65:B1:2E:4C:F0:0B:55:29
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FMGIrxk8sz3of4PfZbEuTPALVSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02b::/48
Signature Algorithm: sha256WithRSAEncryption
c1:34:4d:1e:76:cd:f9:24:28:dd:6d:bf:52:0a:b9:0e:46:5f:
6c:6e:82:7c:5f:37:29:2c:46:1a:40:32:00:fb:6c:fc:4d:1d:
f9:15:c7:ee:31:bd:1d:f3:87:78:c1:9c:0c:8e:5c:fd:84:9d:
c3:fb:a2:fe:66:96:fd:5d:1a:a6:e8:b0:17:fa:40:10:67:90:
3a:68:3e:4c:c4:d3:66:4f:da:a7:54:8b:5c:f3:fa:1d:ba:6d:
34:53:21:65:ac:d4:89:db:11:91:ce:6e:de:19:bb:4a:62:3a:
2d:d5:49:6a:90:6b:53:c4:51:ac:6c:55:3f:36:d4:e7:d8:95:
7b:b9:73:94:92:bb:24:de:c0:2b:a1:26:83:41:bc:c3:2f:c6:
42:d5:3b:95:21:32:e3:64:4d:b1:07:d4:56:71:93:75:4e:1a:
6f:57:bc:25:9a:9f:fd:e2:e0:97:ac:07:11:b8:08:91:0b:56:
d7:9b:2a:70:14:32:83:4f:c4:99:f4:6c:e5:77:92:82:e4:d6:
da:2b:3e:db:69:10:4f:25:23:5d:55:64:2d:79:88:c2:5b:1d:
a9:76:f3:8b:e7:f0:a5:5a:07:b0:90:0e:09:52:83:ad:a8:96:
86:cd:69:11:ed:15:30:06:9d:8c:84:8b:be:fe:eb:fe:c0:3c:
d8:b9:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org