Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/fz-q7ZRpxLp12NuYn7E6Th1aCBU.roa
File: fz-q7ZRpxLp12NuYn7E6Th1aCBU.roa (raw, json)
Hash identifier: /wD8kSduJKl5XweiEoH2sjrDx5vRb7EDQ5pJGCcasdU=
Subject key identifier: 7F:3F:AA:ED:94:69:C4:BA:75:D8:DB:98:9F:B1:3A:4E:1D:5A:08:15
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 018CC3B6B40020CBF8182FB8CF1C12797CB6
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/fz-q7ZRpxLp12NuYn7E6Th1aCBU.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202647
IP address blocks: 2a13:bc2:1::/48 maxlen: 48
2a13:bc2:1000::/36 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Aug 2024 14:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b4:00:20:cb:f8:18:2f:b8:cf:1c:12:79:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f3faaed9469c4ba75d8db989fb13a4e1d5a0815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:64:61:cc:ef:cb:29:eb:d0:2d:8e:04:5a:
e4:03:e6:e7:8f:ef:93:39:76:d9:3f:39:3d:63:22:
3e:77:82:0b:c3:15:db:36:53:13:8f:b5:f1:ff:0d:
f1:ed:4d:73:7a:f4:ab:a7:f5:4a:54:12:51:6c:a2:
d7:51:72:3c:c0:de:b2:90:91:24:bd:5a:71:c8:f3:
eb:ce:05:6a:f4:65:20:ed:9c:13:ab:a7:e3:f6:4f:
ec:41:d4:35:9c:dd:10:ba:b6:46:7a:45:09:d9:e9:
b5:73:90:42:84:21:a1:82:79:3c:5b:4b:4a:e3:a5:
27:1b:34:a8:7d:83:65:01:bd:b1:8c:eb:a7:3b:fc:
a4:ca:0f:44:1b:ff:4b:ce:c6:79:66:1a:ec:72:8a:
cd:28:0c:e0:78:a9:07:35:80:47:cb:8f:dc:72:68:
7f:6a:2f:84:04:13:5a:6f:c3:83:67:63:d6:a2:42:
4c:ce:32:d9:b7:c3:91:de:bd:78:62:3d:3d:80:01:
fc:2a:a8:56:a2:fc:9d:45:42:ca:39:98:9e:e1:7a:
48:f0:7e:cc:4d:4e:ac:9e:a8:b8:78:cb:89:71:bf:
c1:97:d4:34:f6:11:a3:af:47:cf:ca:c7:52:52:13:
a7:d8:d5:54:9f:f5:62:8e:8a:37:eb:0e:0f:14:63:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:AA:ED:94:69:C4:BA:75:D8:DB:98:9F:B1:3A:4E:1D:5A:08:15
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/fz-q7ZRpxLp12NuYn7E6Th1aCBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:1::/48
2a13:bc2:3::/48
2a13:bc2:1000::/36
Signature Algorithm: sha256WithRSAEncryption
72:c7:b5:a7:49:9d:4d:c4:b2:31:78:1b:3c:b1:88:3e:d0:b7:
8e:dd:9a:ec:ea:16:85:91:5b:07:a9:67:34:31:29:a3:35:2c:
da:8b:07:a6:ca:17:d2:cb:cf:e7:b6:78:ec:ed:be:a2:5c:28:
2e:fd:d7:60:61:03:c7:1d:1f:a3:05:2e:6d:24:d0:c8:d3:78:
a9:7d:e1:ce:65:7d:40:7b:cf:14:8b:6d:b2:1e:c1:57:ab:55:
24:5e:0d:28:f5:e6:0b:8a:62:c0:6f:f7:a6:20:a1:8e:e6:34:
3f:e0:0d:2a:fc:11:ea:ea:92:7a:a5:8e:2b:09:5a:a4:76:3a:
83:cc:e9:7d:20:7e:a7:55:6e:68:06:eb:52:66:a8:6b:eb:b9:
f9:8d:65:88:be:dc:fd:a4:87:5c:63:67:32:03:f2:c0:d5:41:
e2:13:cc:0e:21:8e:ff:e4:a5:00:83:03:24:32:b1:71:35:ff:
28:89:41:8e:35:3d:a3:27:e3:84:22:4c:07:39:6c:32:df:d3:
a3:73:48:cf:7a:bc:15:f7:ba:a1:6d:a5:6b:6b:7f:7e:56:6f:
e3:83:c8:37:70:37:c6:5e:7f:de:6f:9e:50:d4:f5:61:5f:63:
ae:6e:99:a2:89:28:8f:c6:a7:39:10:14:80:93:68:73:1b:3c:
7b:c3:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:36:34 2024 by rpki-client on console-ams.rpki-client.org