Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/gF9K6QRsSZoRG-14h1O6CXVSIxM.roa
File: gF9K6QRsSZoRG-14h1O6CXVSIxM.roa (raw, json)
Hash identifier: fm/dk5sCF3fdW+qbf8kcGEhbcD3Kj2400fDlbcr0Tc0=
Subject key identifier: 80:5F:4A:E9:04:6C:49:9A:11:1B:ED:78:87:53:BA:09:75:52:23:13
Certificate issuer: /CN=f167e7ee93676629dda44b57f33ad3e1ada60a55
Certificate serial: 01896866676D1E51ED03C875DEE981DD5C1B
Authority key identifier: F1:67:E7:EE:93:67:66:29:DD:A4:4B:57:F3:3A:D3:E1:AD:A6:0A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Wfn7pNnZindpEtX8zrT4a2mClU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/gF9K6QRsSZoRG-14h1O6CXVSIxM.roa
Signing time: Tue 18 Jul 2023 09:48:08 +0000
ROA not before: Tue 18 Jul 2023 09:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197749
IP address blocks: 2001:678:c84::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:66:67:6d:1e:51:ed:03:c8:75:de:e9:81:dd:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f167e7ee93676629dda44b57f33ad3e1ada60a55
Validity
Not Before: Jul 18 09:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=805f4ae9046c499a111bed788753ba0975522313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9c:fd:cb:9f:0a:55:be:fd:4a:39:f3:9e:7b:
51:b1:05:44:eb:19:44:e0:6a:da:48:9d:d6:76:0d:
27:5d:64:b3:3f:0f:17:d7:94:a8:0d:88:14:55:38:
68:d8:76:19:57:fc:07:38:58:ee:e7:64:42:37:57:
68:3b:50:d7:15:a7:67:65:82:eb:04:cf:d8:7c:63:
fd:e0:f9:b9:48:f8:22:bb:e0:e3:79:86:79:6b:38:
16:f6:b0:d9:10:c2:1a:60:7b:87:4b:c9:14:7c:5c:
65:45:28:84:74:ac:ef:74:e3:fe:54:d8:36:f6:a7:
45:f4:b2:d3:24:c9:04:2e:63:e3:85:11:27:d0:e1:
7c:ea:02:e3:75:e9:e9:51:96:b9:03:81:25:33:69:
42:12:15:1b:a6:c3:ca:8d:43:e1:ff:0c:de:5e:a8:
5f:eb:18:4d:c2:5c:f2:05:d7:ac:41:2a:30:5e:7a:
36:07:7e:6e:5f:3a:0a:51:7c:3a:03:5e:4d:9e:14:
88:17:03:2c:0a:56:0f:c9:f6:cf:b6:70:0d:09:ba:
54:3b:96:a7:6c:ef:0e:05:9d:c3:39:55:87:c0:57:
dc:96:1f:34:d8:f8:2d:4e:4c:7d:50:31:6e:95:24:
3d:aa:98:16:71:cb:2a:c9:9f:2d:64:72:94:ac:62:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:4A:E9:04:6C:49:9A:11:1B:ED:78:87:53:BA:09:75:52:23:13
X509v3 Authority Key Identifier:
keyid:F1:67:E7:EE:93:67:66:29:DD:A4:4B:57:F3:3A:D3:E1:AD:A6:0A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Wfn7pNnZindpEtX8zrT4a2mClU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/gF9K6QRsSZoRG-14h1O6CXVSIxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd79a4-a483-49eb-adce-478e6aaad8bc/1/8Wfn7pNnZindpEtX8zrT4a2mClU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c84::/48
Signature Algorithm: sha256WithRSAEncryption
bd:89:02:8c:75:6f:7d:b8:15:15:13:8f:b2:72:70:d5:05:f9:
13:dc:af:d3:c9:b3:d4:1d:90:c3:0b:70:35:52:a4:fa:a4:f3:
57:a5:4c:42:fb:3d:d5:94:4e:a8:6a:6c:9d:e2:c9:98:7b:d7:
52:a3:46:06:13:54:79:50:13:43:e9:54:8b:89:3d:32:34:47:
81:ae:1f:e2:28:8a:c7:87:1c:84:6a:55:99:e1:9c:23:3e:7d:
bd:b8:06:b6:83:f4:cb:b5:2b:88:80:3e:35:02:d9:8c:c2:5a:
ba:74:0c:13:2b:4c:c7:65:e7:94:59:3b:44:9f:ec:d3:35:d8:
27:01:1e:a3:8a:23:18:50:fe:f7:bf:5f:51:ec:62:18:61:18:
e2:c8:40:0f:49:75:c6:c9:2f:ff:3f:a9:45:5f:99:1c:d7:a2:
fa:dc:d8:dd:f9:9c:89:18:bc:1a:2a:21:a2:99:4f:bf:cd:e4:
78:10:f7:3d:92:91:14:37:ab:d7:93:42:04:79:2b:90:f0:58:
1f:a1:7f:39:b0:5f:bc:45:c4:05:ed:fd:3b:3b:fb:2a:52:80:
71:58:c6:15:34:f6:0c:a4:67:26:6c:46:7b:69:49:0f:81:a7:
c9:a6:5b:a1:e7:d6:8b:78:fd:64:82:a2:5a:a0:a9:2c:c5:81:
84:f9:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org