Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/F4P1_Zfyq4s_ECGAv8Cv6gL802E.roa
File: F4P1_Zfyq4s_ECGAv8Cv6gL802E.roa (raw, json)
Hash identifier: A3GD6yzajM+RiauYNynrg/8fkvRl7zMfgrH31V2jlo4=
Subject key identifier: 17:83:F5:FD:97:F2:AB:8B:3F:10:21:80:BF:C0:AF:EA:02:FC:D3:61
Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial: 0187DB8F219FB845258988133C2585C82582
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/F4P1_Zfyq4s_ECGAv8Cv6gL802E.roa
Signing time: Tue 02 May 2023 08:23:23 +0000
ROA not before: Tue 02 May 2023 08:23:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a01:bb22:8000::/33 maxlen: 33
2a01:bb22::/33 maxlen: 33
2a01:bb20::/29 maxlen: 29
2a01:bb23::/33 maxlen: 33
2a01:bb23:8000::/33 maxlen: 33
2a01:bb24::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 May 2023 08:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:8f:21:9f:b8:45:25:89:88:13:3c:25:85:c8:25:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Validity
Not Before: May 2 08:23:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1783f5fd97f2ab8b3f102180bfc0afea02fcd361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:27:c3:ca:13:dd:19:9f:59:d4:41:b9:86:fa:
07:dd:d4:35:18:5a:a2:9a:18:d8:62:73:5f:50:3b:
16:9c:75:14:fc:fc:7b:61:ab:0f:ec:5b:31:b3:13:
77:9e:5b:f5:2f:3f:3a:45:19:c9:dd:3b:b0:c9:77:
09:a6:e8:09:17:04:f5:1b:52:27:de:27:ce:b6:2b:
e7:ac:a8:ab:d4:d3:1d:21:e9:0c:1d:fc:95:c9:e4:
ae:de:1e:0f:04:1c:76:0c:05:bb:65:f6:4e:22:11:
4b:db:19:be:01:01:48:6e:f2:54:55:87:ae:10:da:
de:59:71:1f:14:8d:9d:41:69:04:fc:77:e1:c8:a7:
79:f3:24:07:eb:48:c8:75:67:d9:d7:67:65:56:7b:
ff:b4:02:43:27:83:43:23:a0:73:8d:c4:34:8e:06:
72:c3:76:97:07:d0:12:84:3e:8d:bd:58:d9:32:31:
10:76:ce:3a:0d:92:50:9c:ec:28:50:b8:a5:fb:39:
cd:1c:a0:e8:2b:35:90:14:2d:4a:60:e9:99:3e:b7:
06:02:1e:45:6c:85:f3:fc:8b:3a:62:97:3b:2a:80:
b0:c7:2e:d8:7d:e3:67:c8:f2:64:79:63:19:2a:60:
5f:c7:1c:43:ff:7b:59:ad:56:7c:3a:71:7d:23:1b:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:F5:FD:97:F2:AB:8B:3F:10:21:80:BF:C0:AF:EA:02:FC:D3:61
X509v3 Authority Key Identifier:
keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/F4P1_Zfyq4s_ECGAv8Cv6gL802E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bb20::/29
Signature Algorithm: sha256WithRSAEncryption
5a:71:16:7d:4d:07:f6:87:e4:e4:cb:00:c2:6a:88:0b:08:c0:
e1:29:97:b0:8e:cc:a7:10:00:06:3d:fe:31:8c:cb:e9:55:f3:
d1:58:8d:b0:0e:a2:77:78:a1:02:fc:12:3c:47:08:76:8f:c1:
d3:59:15:81:76:d7:b8:74:6c:f7:40:14:71:94:11:e8:d0:d1:
1b:2f:7a:f9:4e:9b:4c:e0:18:fe:fc:eb:da:5e:ac:66:2d:92:
56:32:26:6e:03:4e:41:f4:b0:fe:00:f4:39:2c:89:85:70:29:
0a:b4:d3:86:00:6b:dd:ed:0e:bf:4b:2c:b6:26:3e:dd:e5:a1:
f0:5f:91:ac:53:e6:d1:42:08:82:1e:58:a1:b1:e1:4a:29:94:
65:36:4b:ad:77:96:fb:31:7c:79:58:e4:2f:8a:fd:41:66:95:
ca:93:ba:1b:f5:78:ac:4e:d0:19:73:e7:bb:59:0f:79:d7:b2:
55:e8:e8:b8:e7:2d:38:d5:46:61:cb:04:c0:87:c9:ab:db:76:
70:dd:2b:13:55:03:bb:e6:b4:e8:19:e3:df:da:c8:e5:1d:50:
60:42:53:72:9a:f8:b3:2f:c8:95:61:6e:61:be:83:89:83:ba:
19:e1:7c:94:f2:6e:5f:be:e2:1d:b7:ca:3f:76:57:53:73:fe:
19:d2:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:32 2024 by rpki-client on console-ams.rpki-client.org