Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/f4J-JxIPZ50TqhUTLpieNGEQTCs.roa
File: f4J-JxIPZ50TqhUTLpieNGEQTCs.roa (raw, json)
Hash identifier: e6u2KejqlxCDI1V9xh+uFKyo3Dg7dAxEhVCzlJTSr38=
Subject key identifier: 7F:82:7E:27:12:0F:67:9D:13:AA:15:13:2E:98:9E:34:61:10:4C:2B
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0188FDC79C714C731F78ADD9EE7AA0A0A3E8
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/f4J-JxIPZ50TqhUTLpieNGEQTCs.roa
Signing time: Tue 27 Jun 2023 16:54:57 +0000
ROA not before: Tue 27 Jun 2023 16:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a01:7e00::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:c7:9c:71:4c:73:1f:78:ad:d9:ee:7a:a0:a0:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Jun 27 16:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f827e27120f679d13aa15132e989e3461104c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:75:5b:61:03:14:52:12:cf:5f:cb:82:0d:2e:
6e:a3:3e:86:63:96:53:3b:72:b8:f7:9d:78:64:d5:
1d:30:a8:87:f4:b1:9c:37:8f:54:5f:e3:dd:21:3f:
69:4a:1a:65:9c:0c:55:90:ab:9c:f2:64:b9:06:27:
19:19:45:b4:e0:7a:61:16:97:56:7e:81:22:c6:76:
e0:a7:64:b9:63:a4:aa:55:0c:4c:d5:9e:7d:85:fc:
73:fb:4e:82:1a:e9:48:a0:3a:c8:73:a7:f3:26:dd:
3c:73:7e:5f:21:22:8f:f6:32:64:ed:42:b7:53:7f:
61:3c:89:58:e4:6a:f0:84:01:34:d1:f6:5a:a5:5d:
2e:75:81:43:e5:03:a2:fc:54:32:c9:ec:d3:3b:67:
4b:77:d3:4c:b6:d2:17:6d:ab:4f:83:bb:28:ec:eb:
d2:9a:10:40:68:87:13:d9:a5:8a:d4:7f:3d:52:c6:
4f:73:bc:32:24:e4:49:3b:80:5c:44:71:eb:f5:ad:
45:7f:b8:9e:df:ef:0c:de:ef:99:77:84:c4:9e:f1:
42:9a:99:c0:2e:3b:5f:dc:2f:fc:c3:76:0a:28:9f:
4e:67:c5:54:98:e7:0d:66:a3:a4:44:3b:80:39:40:
cc:08:a4:f7:61:29:19:40:0e:fa:25:47:cb:2f:1e:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:82:7E:27:12:0F:67:9D:13:AA:15:13:2E:98:9E:34:61:10:4C:2B
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/f4J-JxIPZ50TqhUTLpieNGEQTCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
38:22:dc:9e:9b:0a:a3:ad:0b:55:71:a4:a9:5e:99:5b:f2:01:
d3:41:1f:9a:a4:b9:0f:d6:0d:ed:52:81:2b:63:0a:f3:ca:71:
84:d1:c7:66:a3:4b:61:2e:73:75:34:60:5e:a9:62:52:dc:2a:
45:28:03:ae:d6:1d:69:48:61:79:6b:84:a1:40:a9:64:54:af:
ff:56:3d:cc:39:b6:ba:c1:6c:10:d3:6d:23:6b:d2:f4:d7:f8:
5c:14:69:bb:7b:cb:c6:cf:1b:e5:e5:ce:43:e7:b4:44:db:3a:
cc:79:28:44:b0:66:df:ff:9c:c5:8a:94:c8:6b:76:76:69:89:
da:6b:c8:ad:ba:fa:c8:ce:be:67:8c:5c:1d:59:7d:2c:9d:9f:
8d:73:4a:e7:95:b1:39:6c:28:38:ba:4e:a1:69:9a:13:75:d0:
f5:72:a4:15:e1:52:9f:14:f2:17:f9:04:8e:b1:35:e9:14:94:
8f:1c:51:71:79:ba:33:0e:94:e6:15:d4:51:f4:4e:52:e6:89:
e7:63:fe:a5:4e:22:94:ef:6e:9e:eb:fc:ab:48:3a:f9:95:4f:
72:93:9c:2c:94:e9:e1:7f:f0:18:19:de:36:23:54:6f:26:92:
3e:dd:50:49:32:81:bf:71:80:66:08:b7:63:cd:ea:12:fd:b0:
78:ce:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:53 2024 by rpki-client on console-fra.rpki-client.org