Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/FrkrtYLPPrDGn_Y1iqKBocOtryM.roa
File: FrkrtYLPPrDGn_Y1iqKBocOtryM.roa (raw, json)
Hash identifier: NXgeLph3YG4ti8yI3SdVmhBXiZcEz6tEkLrVrKGFNNQ=
Subject key identifier: 16:B9:2B:B5:82:CF:3E:B0:C6:9F:F6:35:8A:A2:81:A1:C3:AD:AF:23
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 018CC8DE4945C3C872AA8C12A68A9F8E3449
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/FrkrtYLPPrDGn_Y1iqKBocOtryM.roa
Signing time: Tue 02 Jan 2024 06:31:00 +0000
ROA not before: Tue 02 Jan 2024 06:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 2a13:7e80::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 09 Jan 2024 11:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:49:45:c3:c8:72:aa:8c:12:a6:8a:9f:8e:34:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jan 2 06:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b92bb582cf3eb0c69ff6358aa281a1c3adaf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:d5:94:73:27:6b:c1:3f:be:de:29:37:3c:
e9:64:7d:e3:c8:db:a6:81:c8:a9:36:82:3b:22:b6:
dd:fa:64:7a:9c:e9:9b:5d:a3:b5:59:f1:2e:2e:30:
88:8f:aa:a2:3f:2b:a4:b3:92:3f:64:8a:96:ab:a2:
f4:53:21:28:fa:a5:7a:9a:64:09:5f:26:da:60:fc:
cb:3f:24:3a:7e:fd:88:75:22:15:68:89:4a:93:9c:
d2:7a:ac:cd:ba:89:e1:a3:33:f5:cf:b9:0c:31:82:
b9:24:94:f5:d5:b5:84:18:83:d5:ac:18:df:a2:ac:
e1:1c:ac:13:b1:85:b4:12:af:7e:3f:11:8f:95:00:
14:df:32:d9:a5:64:e2:71:77:d0:f6:9a:38:11:d2:
14:4c:11:ff:42:40:14:56:92:38:1d:34:c6:66:00:
61:3d:da:ac:ab:28:10:34:8e:11:ab:01:24:0c:bc:
bf:81:6c:fd:91:e6:86:b1:65:46:84:f2:77:ed:29:
19:73:ae:92:aa:b8:19:c4:ac:85:ca:3d:4c:96:66:
c6:81:1d:5e:a2:a9:0d:91:74:8e:13:80:3c:28:a5:
66:98:42:8e:f4:51:72:03:2b:90:74:5d:27:31:08:
35:94:73:4f:a9:fc:04:3c:93:af:07:97:11:f6:7a:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:2B:B5:82:CF:3E:B0:C6:9F:F6:35:8A:A2:81:A1:C3:AD:AF:23
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/FrkrtYLPPrDGn_Y1iqKBocOtryM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
17:86:a5:61:44:9b:2f:e8:e0:c4:e8:b3:92:1a:fb:2e:cb:9c:
d5:17:1e:9f:87:21:6b:02:a6:1b:7f:21:d6:b1:8b:5a:1f:aa:
ef:e7:29:57:c6:63:4e:fb:6b:0a:55:ae:7e:cb:6f:63:1e:c3:
d7:6b:07:0f:a5:8e:53:b2:41:0c:89:78:c8:82:90:db:14:b3:
78:4d:76:3f:4d:7d:51:59:aa:88:e6:7c:83:92:14:b6:c0:90:
52:15:be:3a:95:7c:e0:3f:3b:9c:58:44:da:d7:d5:0b:39:d7:
6f:da:27:90:7a:a6:63:3f:9b:3c:8d:58:63:e3:0d:28:cc:2a:
f0:8b:7c:66:55:e1:95:ba:f7:69:db:d9:13:0c:ba:c6:60:7f:
d1:27:06:b3:d5:67:a4:d1:39:72:1e:5d:1f:ed:c2:2a:26:8d:
e0:ab:60:13:70:f9:08:b2:d4:a1:44:58:ba:d2:a9:d3:f0:6f:
87:7c:d8:67:6d:a9:8b:70:27:3d:12:67:65:ce:77:28:c3:f7:
6b:64:6d:dc:cc:a8:16:cf:52:00:3c:f2:2d:79:ac:52:c7:8f:
7f:c1:e3:8f:c2:d3:67:46:a8:9c:64:51:4a:06:12:d2:28:36:
1f:df:96:4d:a3:0d:3b:27:99:21:d8:16:6c:75:50:fd:1a:a6:
e4:a3:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:11 2024 by rpki-client on console-fra.rpki-client.org