Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/9X5urtVX1z77hDkyBXr7Z9HAG70.roa
File: 9X5urtVX1z77hDkyBXr7Z9HAG70.roa (raw, json)
Hash identifier: 8jcvLokRTRzpQBed8y8/yP9gdmDDhMkmsZZOBtT9HJ0=
Subject key identifier: F5:7E:6E:AE:D5:57:D7:3E:FB:84:39:32:05:7A:FB:67:D1:C0:1B:BD
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 018B8BC836A216F24699D55B246B26A8A2D4
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/9X5urtVX1z77hDkyBXr7Z9HAG70.roa
Signing time: Wed 01 Nov 2023 16:47:16 +0000
ROA not before: Wed 01 Nov 2023 16:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202647
IP address blocks: 2a13:bc2:1::/48 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Nov 2023 17:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:c8:36:a2:16:f2:46:99:d5:5b:24:6b:26:a8:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Nov 1 16:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f57e6eaed557d73efb843932057afb67d1c01bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:97:79:93:b8:e4:36:41:b2:8b:c6:7e:10:
8c:54:f2:9f:e2:20:de:a4:e0:76:a7:11:26:35:cd:
40:82:24:24:30:08:b3:bd:50:df:91:8c:e1:91:d4:
b0:eb:2b:dc:b0:80:87:65:7e:81:9f:a7:a1:02:94:
17:2d:46:18:dc:63:f2:d7:ac:69:6c:b2:9e:ff:e5:
07:54:b8:4a:66:07:19:3c:a0:9a:88:73:19:d4:de:
6c:d1:39:9e:71:d0:e3:b5:6a:5a:2a:24:72:a0:44:
11:80:c7:22:6f:3b:3c:c5:06:ff:26:e6:6e:a8:06:
d1:e7:6b:90:bc:4c:42:6d:58:1c:da:72:06:72:cd:
65:56:92:1b:a7:ae:67:26:43:3d:20:6c:28:f9:92:
c5:28:ad:b1:ca:d6:ed:a6:30:2c:8f:33:54:6c:b5:
34:4a:f8:ff:ad:6e:41:1e:9b:45:bc:4c:bb:18:61:
3a:90:42:d3:51:13:fc:e2:00:59:77:dc:3a:51:d9:
6c:26:1c:74:15:b0:12:6b:a9:2f:ba:f9:d1:5d:1c:
42:07:6c:7a:ec:d7:c3:18:8a:99:ec:98:ca:a5:53:
0b:51:e1:46:63:4f:66:f1:a8:ad:89:0b:05:fb:dc:
da:4c:24:86:f2:d1:81:c3:32:f3:ee:5f:45:d5:69:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:6E:AE:D5:57:D7:3E:FB:84:39:32:05:7A:FB:67:D1:C0:1B:BD
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/9X5urtVX1z77hDkyBXr7Z9HAG70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:1::/48
2a13:bc2:3::/48
Signature Algorithm: sha256WithRSAEncryption
0e:38:60:cd:15:10:8d:83:d9:b6:69:75:64:a4:17:bb:5d:01:
00:eb:c0:b4:45:81:65:d2:f3:07:78:ae:ba:35:65:da:77:d5:
9c:20:75:e3:29:10:b8:ad:78:f4:20:5a:cb:93:2f:93:c0:45:
ec:f6:89:c0:ea:c6:cc:16:b2:57:12:4c:9d:97:8a:2f:10:8c:
0c:86:f0:21:a1:59:4a:0a:09:7d:81:5c:79:d2:69:6d:d4:fb:
a0:35:88:eb:55:f7:3b:bc:4e:9b:45:99:f6:c6:29:9e:65:00:
8f:9c:b5:25:a7:34:c3:a4:48:b4:90:7d:10:d1:a0:c6:3a:bb:
45:45:df:6a:78:de:4e:38:9a:10:e9:60:b7:a0:cc:13:ca:a8:
3a:cb:80:88:29:f5:db:8b:02:72:f7:36:35:55:7d:db:c7:48:
72:2b:8a:93:39:1b:40:60:98:5e:ea:90:15:07:e2:41:7d:57:
bf:f5:ce:dc:cb:0a:b6:63:35:fc:82:ad:ab:1b:c5:29:1d:ae:
74:0c:e4:d4:c7:86:9a:78:19:73:00:70:8a:ce:b6:31:72:53:
07:e7:ae:3a:a8:5d:17:09:65:0c:ac:0b:32:b7:9c:23:5b:2f:
af:d5:71:86:30:99:0c:2a:e2:06:34:be:1f:52:18:cf:5d:aa:
7f:33:1e:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org