Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/vFueIr499m8L-pgnlq6MDiSUJF8.roa
File: vFueIr499m8L-pgnlq6MDiSUJF8.roa (raw, json)
Hash identifier: eDyfqoXUHI0yBVX/fXFzUObrF4udzqKOLdKM/zUx9Ys=
Subject key identifier: BC:5B:9E:22:BE:3D:F6:6F:0B:FA:98:27:96:AE:8C:0E:24:94:24:5F
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 018B8C058D21787549A1AA68A0F68675348B
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/vFueIr499m8L-pgnlq6MDiSUJF8.roa
Signing time: Wed 01 Nov 2023 17:54:15 +0000
ROA not before: Wed 01 Nov 2023 17:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202647
IP address blocks: 2a13:bc2:1::/48 maxlen: 48
2a13:bc2:1000::/36 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:05:8d:21:78:75:49:a1:aa:68:a0:f6:86:75:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Nov 1 17:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc5b9e22be3df66f0bfa982796ae8c0e2494245f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:b3:90:58:0f:f7:0f:28:3a:4e:17:72:3d:
9e:18:4a:c9:75:26:12:4a:96:0a:c9:0b:ed:b9:25:
0e:c9:92:14:95:9a:b6:fd:d7:61:27:c3:f8:f2:84:
03:a6:7c:cb:af:63:2f:42:1b:d0:2a:6c:8a:b0:f9:
5b:c1:60:2e:89:92:92:79:f8:16:8d:3d:99:3b:d9:
e3:92:af:e2:32:76:bd:c9:5a:9e:19:52:45:07:f3:
15:e9:57:8f:08:64:fd:a5:d1:c6:7d:0d:29:b8:09:
56:5f:a1:3c:83:7d:09:fc:bd:58:a8:da:a0:df:f0:
c5:37:43:1b:89:82:39:d8:3c:a2:30:07:58:ff:26:
bc:98:f3:bf:90:a3:0d:b7:49:12:a8:4c:95:9b:7b:
2f:25:c1:47:e4:51:af:8a:49:ed:83:99:86:fc:ed:
af:ff:21:53:95:49:6f:e6:30:0f:df:79:1b:43:03:
ff:12:46:3f:5e:ce:2c:31:20:d1:80:8a:5f:3d:49:
97:31:92:c1:59:1d:89:27:c4:51:5e:47:fc:1e:56:
01:5a:a5:be:17:5c:d7:d1:1e:a7:d8:d5:41:81:49:
a6:1c:95:a3:d6:9c:47:f7:1c:d6:51:1f:e5:d9:de:
97:c1:92:04:9a:16:34:f4:7b:eb:3d:a3:1e:96:b7:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:9E:22:BE:3D:F6:6F:0B:FA:98:27:96:AE:8C:0E:24:94:24:5F
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/vFueIr499m8L-pgnlq6MDiSUJF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:1::/48
2a13:bc2:3::/48
2a13:bc2:1000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:33:1e:bb:3d:0b:3f:6d:4d:34:ac:5d:47:79:39:94:58:79:
0b:c2:cb:00:bc:00:bb:b4:b2:6c:4f:23:5f:92:e6:3f:75:36:
f3:df:e2:7f:91:82:78:11:42:27:a2:67:5f:18:aa:97:a3:e1:
e8:8c:41:89:bd:3f:fc:c4:c1:c7:f0:05:c2:b8:07:62:90:52:
d9:f5:e3:5f:16:eb:c6:3d:a9:7a:a5:82:30:f1:e0:5a:85:2b:
22:22:6f:5b:14:0b:65:10:1e:41:b6:24:d5:85:b0:9a:d0:09:
2a:c3:35:b5:c8:b4:af:c0:46:94:22:b9:06:07:07:d0:9d:ee:
64:f8:b5:77:2f:5c:1c:04:bd:eb:51:c6:b3:71:56:2e:07:91:
c4:0f:40:42:15:57:31:19:d2:a7:44:5c:28:13:c3:79:a1:3a:
13:cf:39:84:32:54:e3:19:37:84:62:d1:ee:33:b2:20:85:c2:
62:ef:b1:97:2a:4f:cd:91:01:b6:90:81:35:b8:26:02:ae:49:
45:14:44:aa:13:d7:5e:6e:ea:ff:16:ed:a1:aa:f6:8f:77:11:
a3:a0:73:b8:c0:eb:9c:ef:68:91:74:85:f9:ea:12:79:79:4d:
4a:7b:92:57:03:f7:08:7d:1c:b8:c0:66:a4:8c:04:00:db:eb:
0e:8a:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org