Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-fjimxT0wTWIgbtKTHaJiJzLZ2g.roa
File: 1-fjimxT0wTWIgbtKTHaJiJzLZ2g.roa (raw, json)
Hash identifier: BMddRgdFOLPHOSmGZ2O5tTf80sxDI9nov1D6SPOespk=
Subject key identifier: F9:F8:E2:9B:14:F4:C1:35:88:81:BB:4A:4C:76:89:88:9C:CB:67:68
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 01856C13847D95540FFFB21B4D5CDBCB35DC
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-fjimxT0wTWIgbtKTHaJiJzLZ2g.roa
Signing time: Sun 01 Jan 2023 06:44:56 +0000
ROA not before: Sun 01 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202647
IP address blocks: 2a13:bc2:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Nov 2023 16:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:84:7d:95:54:0f:ff:b2:1b:4d:5c:db:cb:35:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 1 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f8e29b14f4c1358881bb4a4c7689889ccb6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3e:8c:ae:f4:f9:64:9b:1b:c7:46:bf:13:55:
c7:43:ed:0d:2b:c1:64:a2:9f:39:f9:f5:2d:41:c0:
b8:d4:e3:82:07:5e:57:5f:3d:bf:53:0c:e8:2f:16:
0a:4e:32:00:15:32:13:f7:eb:9d:f7:93:d0:84:53:
38:ad:9a:c6:b7:66:f2:72:53:60:11:9a:3b:05:e5:
46:85:fa:66:4b:12:8b:fc:df:0d:7b:52:d7:76:ba:
18:9f:10:ad:13:8d:90:45:b7:3c:6b:2b:9c:a1:fa:
a9:57:22:a7:2e:d7:f6:d2:5b:d3:a3:1e:a3:a1:5b:
11:d0:95:ea:a0:24:bc:68:ca:29:20:c1:b7:1f:67:
47:98:5b:ae:20:b3:5c:8e:bb:4a:00:0e:e6:2a:8e:
ee:b0:46:43:e1:29:a1:fc:2b:f7:eb:af:00:93:4e:
ec:94:7c:59:c2:8a:e2:1a:7b:7f:39:f4:c0:31:bf:
86:bb:ca:63:0d:95:16:9e:37:1d:3c:f5:5f:b8:73:
88:96:16:1d:8e:64:8d:27:1e:91:54:81:53:1c:91:
99:b9:66:2b:08:ba:6a:d6:2e:f6:69:ee:3d:15:4b:
1c:d9:71:45:16:af:e5:9e:1b:19:51:9a:82:48:31:
fb:0d:5b:69:d8:87:09:fe:e4:6c:1e:5e:b3:78:eb:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:E2:9B:14:F4:C1:35:88:81:BB:4A:4C:76:89:88:9C:CB:67:68
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-fjimxT0wTWIgbtKTHaJiJzLZ2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:22:40:da:71:7f:93:0b:e9:74:78:bb:2f:df:c5:0c:76:54:
f3:18:36:ff:07:d5:c9:64:e5:88:1d:ad:19:9d:e9:19:e8:c9:
1a:97:b8:1f:0c:98:37:af:89:27:c5:12:d1:50:2a:19:e8:0e:
c6:ff:2d:ae:90:83:70:a5:56:ea:89:84:a7:c4:46:e6:21:24:
e3:b6:a5:e6:f8:82:c0:5c:48:69:8c:71:a4:2f:59:ed:31:b4:
ab:5c:6f:6a:92:4b:37:5b:32:a9:c5:61:45:71:c5:a7:be:25:
1b:37:9e:43:bd:9a:36:da:50:a1:3c:0d:89:b4:ab:80:57:0f:
5a:b0:ee:13:e2:c8:bb:58:09:b8:68:63:d4:91:b0:09:6e:e8:
ba:a5:3d:53:01:b3:3d:06:fc:85:65:d9:1d:7a:20:bb:95:a0:
a8:9b:04:2b:74:21:27:31:64:60:c9:1b:f4:56:af:f7:9e:69:
32:4f:07:1e:a6:a4:5a:84:22:b1:4b:ca:6a:5a:6e:c0:6e:16:
aa:35:91:5e:42:ee:26:44:8f:6a:f1:d5:bb:4b:d8:89:a5:c4:
1a:bc:2e:46:8b:bb:b0:ee:56:02:5d:60:35:36:8f:f2:e9:e4:
96:a0:4f:26:2a:98:b3:cb:16:1d:cc:86:a5:6e:36:48:18:b8:
e3:5c:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org