Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FdF0eCezrVuUytXUhq40PPdBcGw.roa
File: FdF0eCezrVuUytXUhq40PPdBcGw.roa (raw, json)
Hash identifier: qjMtTBhy80S3SSurDRvTF/8inVa6S4+HQT+c775gXmI=
Subject key identifier: 15:D1:74:78:27:B3:AD:5B:94:CA:D5:D4:86:AE:34:3C:F7:41:70:6C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A9E2D1909D282A169D770B4FC451B9BFB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FdF0eCezrVuUytXUhq40PPdBcGw.roa
Signing time: Sat 16 Sep 2023 13:27:50 +0000
ROA not before: Sat 16 Sep 2023 13:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216311
IP address blocks: 2a12:bec0:500::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:2d:19:09:d2:82:a1:69:d7:70:b4:fc:45:1b:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 16 13:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15d1747827b3ad5b94cad5d486ae343cf741706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:e3:12:30:3c:ed:ec:8a:98:1d:0c:54:50:
11:bd:0f:4b:19:09:a6:11:86:97:78:a9:a7:56:29:
ba:87:9b:b1:29:46:1b:6b:b1:46:66:eb:b0:b1:19:
3b:07:2a:47:36:8e:4e:8e:7c:87:52:1a:63:9d:56:
79:80:ba:f9:96:4d:93:4c:ad:80:09:1b:30:1b:73:
62:81:14:1c:41:d5:a9:a6:b7:59:2e:76:d7:d0:ac:
71:f0:7e:e0:c6:fd:e1:33:93:ea:28:df:7e:02:54:
d7:07:39:b7:ec:60:6e:19:61:cd:cd:fa:d5:c5:49:
9d:7c:b4:cd:76:25:da:02:75:b2:40:60:72:7c:30:
4b:ff:91:95:1a:5f:35:cb:01:02:c9:40:55:08:99:
71:5d:60:bc:6c:2a:4e:aa:bc:2c:6b:26:26:7b:37:
80:9a:b9:cc:1d:ee:e2:ef:e8:82:e2:72:5c:dc:c7:
ad:ad:68:40:fd:39:bd:84:57:f3:9f:56:3f:db:ce:
8e:47:e6:04:87:df:d4:a7:05:fb:43:b4:d2:52:b0:
9c:e2:ce:e9:18:64:e0:47:ea:ec:a3:35:5f:08:f6:
d7:24:21:b4:1b:92:5a:01:f0:e4:7b:9b:59:26:b7:
f9:5f:fc:3b:03:5b:4b:3c:87:0c:fc:df:4b:5d:6f:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:74:78:27:B3:AD:5B:94:CA:D5:D4:86:AE:34:3C:F7:41:70:6C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FdF0eCezrVuUytXUhq40PPdBcGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:500::/44
Signature Algorithm: sha256WithRSAEncryption
57:84:f6:c1:b2:19:b8:cf:bf:4d:5d:64:62:e5:2e:b9:49:0d:
f1:fc:af:83:87:f9:af:bf:e6:b2:9c:2b:c2:83:38:e5:e3:71:
e8:b1:72:65:f2:25:db:d2:9b:43:28:4c:fd:75:ef:b2:ac:f2:
c6:85:73:36:db:74:e9:7f:e9:a8:39:ee:cb:46:e5:8e:1b:fe:
45:77:fd:c6:b0:27:d8:56:d2:b0:a6:bb:1e:60:7c:9a:aa:49:
4b:a8:e6:57:a7:7a:4e:44:92:7e:ba:13:66:70:f7:e0:88:87:
31:81:26:18:6b:0b:b9:83:57:2d:00:84:05:d4:da:c8:aa:e3:
f4:82:41:02:1d:6f:e9:75:12:44:a9:84:90:d2:4b:06:69:ae:
7b:7f:0b:6e:86:0e:21:f5:cf:20:70:e5:fa:70:58:9e:69:f6:
d2:02:85:d1:d9:f3:91:31:ae:ee:79:a3:b4:a1:f2:54:f2:35:
25:7a:87:da:f8:a2:48:cc:37:07:47:4c:18:8b:33:2c:56:c7:
f1:e8:67:5e:34:68:b1:3d:bc:5f:c6:39:ad:b7:3f:ef:6c:40:
66:4f:a4:72:66:24:8b:85:66:21:04:f1:2f:5c:91:66:76:77:
c9:10:72:93:2e:7a:71:8c:95:b0:c6:e2:72:17:4f:76:9e:6f:
59:03:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org