Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/fxtLg29hg0oKv_saMl0pG3q_Q_I.roa
File: fxtLg29hg0oKv_saMl0pG3q_Q_I.roa (raw, json)
Hash identifier: nbS+usB0bCzZHevDblWtnnWaD2C1kC6Q9bcXA7VvH/A=
Subject key identifier: 7F:1B:4B:83:6F:61:83:4A:0A:BF:FB:1A:32:5D:29:1B:7A:BF:43:F2
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 01856DC1B3817F14ABE1A0586AD9A63F6588
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/fxtLg29hg0oKv_saMl0pG3q_Q_I.roa
Signing time: Sun 01 Jan 2023 14:34:48 +0000
ROA not before: Sun 01 Jan 2023 14:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47869
IP address blocks: 2001:678:730::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:b3:81:7f:14:ab:e1:a0:58:6a:d9:a6:3f:65:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jan 1 14:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1b4b836f61834a0abffb1a325d291b7abf43f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:e1:9d:71:d7:6f:93:e1:ff:5b:fa:81:22:
5a:be:4c:00:6d:dc:ad:fa:69:45:09:8b:65:2f:97:
ce:10:12:b6:59:d6:fa:4d:2d:e7:e4:9a:be:fd:17:
45:1f:c3:bf:4b:ac:d9:c5:3a:87:0d:f2:33:62:b2:
89:04:de:98:b7:90:4f:71:50:7c:af:bf:86:39:8b:
28:07:58:b4:84:be:10:01:f4:70:a8:5a:1e:fd:a6:
c7:f6:40:da:4b:be:3e:98:62:f4:10:87:4b:2e:11:
6d:31:21:d5:62:23:1a:2a:2d:c3:36:e9:f9:5a:35:
05:f4:9e:fc:e9:ad:76:2e:10:34:38:9a:c3:30:ea:
66:6a:63:f3:35:1c:8d:ac:a0:8b:15:6c:80:24:f4:
b5:b6:d2:30:06:50:86:16:c9:af:fd:74:dd:74:5e:
8d:37:7d:ad:2b:5f:11:fc:42:c7:18:84:01:72:f4:
9d:e9:65:09:d8:52:94:9b:90:90:49:24:b8:3b:e4:
91:55:34:d8:a9:67:c4:eb:8f:bb:01:7f:69:88:3f:
cb:a6:1d:df:15:d2:4d:22:af:06:4d:be:11:a5:8a:
e4:f7:af:9e:b8:e7:a4:9c:e5:3d:aa:21:6d:9d:e6:
65:6f:8f:13:04:24:ab:cf:a7:3d:6d:04:65:53:c1:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:4B:83:6F:61:83:4A:0A:BF:FB:1A:32:5D:29:1B:7A:BF:43:F2
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/fxtLg29hg0oKv_saMl0pG3q_Q_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:730::/48
Signature Algorithm: sha256WithRSAEncryption
0e:c3:fb:4d:69:8f:38:3e:54:10:15:07:27:ea:96:e5:69:07:
83:79:19:b9:05:79:3f:26:c3:f4:54:81:b4:ec:ff:b1:ff:ce:
93:9c:9f:52:4e:51:54:66:6d:d1:a5:7d:e1:79:d5:89:77:ea:
54:d5:6c:b6:c4:e9:36:36:9b:51:f8:ba:6c:59:bc:2b:50:c9:
44:24:ce:0f:74:e8:86:5f:ba:b8:84:9d:b0:6f:c7:d6:61:33:
13:b8:c8:9a:9c:64:b0:e1:8d:79:59:7d:37:65:ad:ca:18:78:
15:d3:16:d3:f8:ce:02:89:b8:69:10:e9:22:76:18:6b:b6:5d:
65:34:1e:82:f2:b0:04:b8:37:a2:88:66:fb:be:ec:7c:85:5c:
91:4b:a4:15:e3:d6:bb:82:9b:7a:41:9b:a9:f0:a7:8c:23:2f:
97:e2:19:db:f6:24:6e:cd:c5:c3:7a:76:6d:92:dc:ab:5e:c6:
c9:de:e1:c2:c4:7d:06:d0:6b:27:f9:b0:05:cc:3d:e1:aa:ac:
1c:93:c7:56:5a:06:bb:e7:f5:2d:c9:f5:4b:8e:f7:8e:3f:ad:
9f:a7:81:bf:3b:43:f1:57:95:8e:8b:12:58:cb:70:27:92:5f:
62:30:76:f3:c6:3e:b6:b6:ee:2d:74:1f:c1:92:cb:77:c1:6e:
77:61:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:14 2024 by rpki-client on console-fra.rpki-client.org