Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FXSj9ilVf3dLwe7mhoUg6cMN6n4.roa
File: FXSj9ilVf3dLwe7mhoUg6cMN6n4.roa (raw, json)
Hash identifier: QmJouaAxVUU/ams71O3YUCsXXpO018o8lP6BmdcUzKA=
Subject key identifier: 15:74:A3:F6:29:55:7F:77:4B:C1:EE:E6:86:85:20:E9:C3:0D:EA:7E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018952D1DBE18F01D1B3E8096D488DB22E8D
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FXSj9ilVf3dLwe7mhoUg6cMN6n4.roa
Signing time: Fri 14 Jul 2023 05:13:52 +0000
ROA not before: Fri 14 Jul 2023 05:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61350
IP address blocks: 2a0e:aa07:e038::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:52:d1:db:e1:8f:01:d1:b3:e8:09:6d:48:8d:b2:2e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jul 14 05:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1574a3f629557f774bc1eee6868520e9c30dea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:0c:a2:c0:cc:d0:12:f7:fa:51:6d:04:ee:
e0:31:40:2f:20:ba:93:96:fb:44:84:93:6a:9d:9f:
87:94:c8:af:02:6c:51:40:08:36:88:a8:8c:6d:c6:
ce:bd:df:bd:f6:29:cf:96:32:82:10:73:4e:a7:e6:
ec:09:c2:a4:ce:53:7b:b0:4f:a3:23:d5:fe:8b:c2:
06:cf:7b:18:23:0b:39:3b:83:5a:19:9f:09:d6:2e:
30:88:fb:23:ab:3b:31:7a:66:8f:4b:0b:bd:74:22:
27:b9:82:d4:2a:cf:a0:f5:48:79:38:c6:08:34:55:
b7:69:04:46:53:8f:34:df:3f:0c:c9:d6:3a:c7:7d:
c9:68:c3:16:98:8e:fb:00:54:5e:97:e7:2d:16:70:
cc:05:7f:82:dc:b6:68:85:53:8c:ed:01:6b:b6:a6:
d0:3f:54:4f:d7:ac:67:e5:4e:f2:ab:29:53:e0:fb:
7e:88:1c:13:07:b0:66:cf:89:5d:9e:34:cb:86:f3:
3a:61:8f:e3:12:e9:94:44:49:82:7f:28:e8:f2:58:
69:71:1b:af:d2:9d:92:68:ba:e0:4c:0b:e3:6b:64:
83:b3:92:32:13:af:03:f5:46:85:de:0c:fa:ba:10:
bc:8f:d5:7e:75:61:cd:8f:3a:e4:52:c9:dd:0a:80:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:A3:F6:29:55:7F:77:4B:C1:EE:E6:86:85:20:E9:C3:0D:EA:7E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/FXSj9ilVf3dLwe7mhoUg6cMN6n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e038::/48
Signature Algorithm: sha256WithRSAEncryption
70:9e:14:7d:07:a2:02:d4:2a:d4:6b:a6:2a:13:17:da:10:14:
55:cd:bd:b9:78:b3:89:90:02:d5:a3:e3:39:39:77:f7:58:48:
a6:a5:de:f2:58:fc:15:d3:72:e4:43:04:97:93:d9:5a:37:b2:
78:7a:8c:8f:51:b5:5e:34:e1:db:8f:f9:8c:8f:0c:ab:63:d8:
0e:f6:33:51:4a:27:ed:a7:bc:e0:ec:84:d4:6f:d2:f5:e9:77:
1e:0f:08:b9:fe:e9:c9:02:d6:3f:2f:56:8c:61:83:59:a2:3a:
28:38:3a:fd:83:81:87:9c:5b:7b:2f:68:03:bb:96:b5:2b:8b:
01:62:9e:83:f1:0e:27:67:3b:57:30:24:03:db:9e:f0:66:83:
1a:ff:bb:a2:0d:3d:28:38:c5:ae:b2:95:4e:8e:7f:b1:c6:f9:
03:db:f8:9e:59:55:47:1e:45:3c:56:a9:e3:43:26:25:bf:f1:
58:3b:53:3c:0c:6c:67:d4:04:a3:49:16:b1:c7:98:2a:d9:38:
a3:a6:15:57:b6:32:5c:22:13:ba:c2:9e:8c:60:6b:96:c3:4f:
00:50:2b:ee:35:3a:db:1a:fa:61:e0:83:c1:3b:9d:a6:3c:7b:
c2:21:15:8e:57:7a:35:01:35:ba:2a:b2:51:98:98:2d:58:ec:
e2:87:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org