Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/FkMtLNQy_aA_AaCTHERWdGs8zqk.roa
File: FkMtLNQy_aA_AaCTHERWdGs8zqk.roa (raw, json)
Hash identifier: GgOtTbLMKztY76o9UEvc5Da3sHMQFKRN859K6TySeFY=
Subject key identifier: 16:43:2D:2C:D4:32:FD:A0:3F:01:A0:93:1C:44:56:74:6B:3C:CE:A9
Certificate issuer: /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial: 0185720357740D4F3909C725F25D39D88D42
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/FkMtLNQy_aA_AaCTHERWdGs8zqk.roa
Signing time: Mon 02 Jan 2023 10:24:59 +0000
ROA not before: Mon 02 Jan 2023 10:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35684
IP address blocks: 2001:67c:74::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:57:74:0d:4f:39:09:c7:25:f2:5d:39:d8:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Validity
Not Before: Jan 2 10:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16432d2cd432fda03f01a0931c4456746b3ccea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:81:6a:79:e3:53:0c:d4:a4:af:94:8e:bf:1d:
ad:cd:57:f2:6d:a2:7e:ff:78:f2:74:cc:b2:d7:6d:
d6:43:af:0f:d1:0e:6f:59:e5:02:75:3f:1c:86:14:
1d:b8:c4:ce:11:6f:03:d5:8a:dc:d4:99:67:ac:1e:
e5:94:ed:b3:2d:74:e8:74:07:a8:e9:9a:91:26:7a:
55:7d:0f:76:04:6f:6d:49:84:92:2a:2d:25:82:4f:
f6:95:f2:8c:ba:13:fa:88:9c:0a:7f:ef:68:68:b5:
ce:e9:6d:63:a2:fc:77:49:88:08:56:5e:1a:32:fe:
c6:04:8c:11:09:b9:c1:04:7c:36:28:04:e2:d7:7e:
6c:18:12:c7:8b:b3:e1:8e:b6:57:1a:ec:cf:a0:5a:
8a:3d:8b:a8:54:08:3e:65:ca:5d:9d:ae:b4:b7:92:
a6:c4:b2:95:7a:6a:4e:fe:32:5b:20:43:22:1f:e6:
1e:ec:24:6c:38:56:cd:9b:d9:f2:1f:32:02:90:4a:
c3:73:ac:d8:e0:fa:19:66:07:ec:a5:53:89:e9:46:
4c:dc:9f:4f:c9:45:b8:7c:0f:cc:46:b3:20:64:d9:
bb:69:7f:77:5e:27:83:de:c3:a0:e3:67:ea:cc:ec:
31:9a:17:af:9a:0d:bf:e7:f4:6f:d0:ac:2d:a5:37:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:2D:2C:D4:32:FD:A0:3F:01:A0:93:1C:44:56:74:6B:3C:CE:A9
X509v3 Authority Key Identifier:
keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/FkMtLNQy_aA_AaCTHERWdGs8zqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:74::/48
Signature Algorithm: sha256WithRSAEncryption
90:f1:d5:2c:d7:c6:9b:6b:1a:82:88:4a:5f:59:4c:52:2e:ff:
1e:fa:c7:53:4c:74:d0:c5:41:1a:e8:4f:4f:cb:6e:7f:8e:60:
75:b1:53:ea:e5:bb:40:8c:8b:9f:3d:e8:fc:82:31:d0:63:eb:
0d:8e:fd:00:36:e3:76:89:c5:75:d7:cd:8c:1b:28:bf:5f:5b:
4b:cd:b7:0d:ab:1e:3b:51:79:07:68:10:ff:d4:47:9d:7e:c6:
e2:31:a5:95:fe:de:c6:08:ae:ac:1c:31:f5:24:5e:26:cf:33:
a4:de:f5:56:45:9e:39:35:fb:7a:02:ed:8d:a0:14:02:4a:a2:
4e:0f:7a:52:e5:77:33:33:15:90:d1:f2:61:9a:44:04:81:19:
bd:93:a4:9d:1c:d3:fb:99:94:f7:3c:7c:c9:2c:cd:a8:59:0b:
71:77:5a:8d:ff:7d:e5:92:cd:3a:e9:75:b7:d2:9b:9d:a5:8f:
3d:e6:56:34:17:0a:7b:7f:7d:31:1d:9b:ef:bc:62:6d:bc:96:
6f:88:b0:70:6d:ee:02:44:57:5b:3f:e0:67:df:3c:c0:2f:0b:
81:8c:ff:c3:75:c4:79:b6:57:b6:d1:ad:bc:13:60:e1:16:9b:
ed:f7:23:92:df:73:da:1e:2a:22:97:df:de:b3:75:13:f5:52:
41:6d:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org