Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/FaMbZ4Nb_C3g7lQq1Kk7t6VxzTQ.roa
File: FaMbZ4Nb_C3g7lQq1Kk7t6VxzTQ.roa (raw, json)
Hash identifier: r1/a2L0JeoN/751gq8xFUxMVQPHnfHfYwttu2B3jTt4=
Subject key identifier: 15:A3:1B:67:83:5B:FC:2D:E0:EE:54:2A:D4:A9:3B:B7:A5:71:CD:34
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 018CC64AF5213B06FA26A4028D542F986033
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/FaMbZ4Nb_C3g7lQq1Kk7t6VxzTQ.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44471
IP address blocks: 2001:678:e00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f5:21:3b:06:fa:26:a4:02:8d:54:2f:98:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15a31b67835bfc2de0ee542ad4a93bb7a571cd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:3e:8d:37:52:29:a0:a7:58:88:bd:2e:a4:
55:af:ad:54:d3:11:4a:af:3f:e1:9c:c0:e2:1b:5f:
a7:cc:48:ff:b0:a8:2d:66:7a:aa:26:ce:ac:e1:53:
dd:c6:48:eb:d0:25:75:4c:b2:e8:1b:9d:87:dc:3c:
e9:8b:0c:90:42:14:19:a1:1f:a5:91:d1:a7:98:62:
34:6a:04:36:e7:e8:00:cc:64:f2:0e:9b:61:5b:9f:
05:a8:7c:a6:cf:0b:02:bb:b5:ea:68:c3:76:54:a1:
6f:fe:13:f0:22:55:35:28:f2:6d:95:3a:57:e7:52:
23:61:88:e1:05:c7:b8:b1:5b:fe:45:b2:29:72:fc:
0e:15:eb:5e:89:05:78:4e:ab:b5:e8:98:b2:91:23:
6d:b3:09:7b:a9:f7:43:96:13:d0:b7:b3:4a:03:34:
ed:65:3a:64:58:f4:eb:e2:d9:40:ed:95:4c:48:28:
c2:de:f6:c1:af:4b:30:46:ee:7a:da:de:f9:db:65:
2f:11:04:16:6b:ad:fd:12:c4:0d:1e:4a:e2:71:fa:
72:a2:8d:d5:d0:14:89:29:1a:d9:f3:ed:7e:43:32:
2c:38:ee:7e:7c:6d:75:dd:ba:db:d0:88:eb:84:13:
b1:0e:fa:74:cc:70:2f:b8:45:1d:08:59:39:05:c2:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:1B:67:83:5B:FC:2D:E0:EE:54:2A:D4:A9:3B:B7:A5:71:CD:34
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/FaMbZ4Nb_C3g7lQq1Kk7t6VxzTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e00::/48
Signature Algorithm: sha256WithRSAEncryption
63:d3:fd:7b:57:fb:99:26:67:74:4d:08:3f:95:3c:b3:e7:ca:
6e:dd:4b:19:44:7c:dd:d9:d3:43:cd:7e:60:f4:12:ff:89:f6:
3a:6f:ec:ea:6c:85:ee:2d:95:46:d6:f6:12:cc:d5:9a:78:66:
3f:49:77:cc:a9:43:73:db:9e:02:65:95:a9:3a:64:f3:18:16:
66:b8:27:a9:fd:73:ea:37:66:be:13:4f:33:33:5c:d4:ec:58:
2c:c0:28:db:80:11:5e:cf:df:df:ac:c3:94:80:b4:0c:16:0a:
7a:b3:d9:46:9f:e2:8f:a8:33:69:29:f0:54:cc:98:50:91:37:
3f:05:6f:fd:17:de:2e:fc:63:6a:8e:ac:f1:05:3d:6e:af:e9:
7f:30:97:1a:1c:be:c9:f3:d7:f9:61:66:6f:72:45:0d:5a:54:
ca:49:86:5b:fb:a4:5c:d9:6f:22:1a:41:5e:79:8a:05:e2:f5:
c9:b5:bf:94:f4:0c:02:4c:12:00:e4:e1:1c:94:49:64:6f:12:
5c:29:ea:4d:00:7a:3a:73:50:be:78:cd:3c:79:60:37:73:36:
e0:57:78:3a:45:4e:e2:dc:1d:ef:56:1a:63:9b:63:0e:a5:42:
bf:16:51:53:00:2e:bb:b6:b8:7f:b7:9e:e0:de:33:4f:7e:8c:
9c:8e:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:33 2025 by rpki-client