Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_ArIy2UA_FixsVVzwsb1XHVMx0c.roa
File: _ArIy2UA_FixsVVzwsb1XHVMx0c.roa (raw, json)
Hash identifier: Akro2ihByXl+rQRfiJERHRf9UCOS83B19xEqGlME6QU=
Subject key identifier: FC:0A:C8:CB:65:00:FC:58:B1:B1:55:73:C2:C6:F5:5C:75:4C:C7:47
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018EC2BC20324EBCA7CC899FC11D7B3C477C
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_ArIy2UA_FixsVVzwsb1XHVMx0c.roa
Signing time: Tue 09 Apr 2024 12:01:32 +0000
ROA not before: Tue 09 Apr 2024 12:01:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:d200::/29 maxlen: 29
2a12:54c0::/29 maxlen: 29
2a13:f080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 20:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:bc:20:32:4e:bc:a7:cc:89:9f:c1:1d:7b:3c:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 9 12:01:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc0ac8cb6500fc58b1b15573c2c6f55c754cc747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:35:ce:f1:16:4d:24:38:40:74:22:13:4c:
bf:77:3b:8b:4c:5d:a0:4e:32:e8:8e:da:e8:ea:ab:
9b:5b:08:ee:8f:8e:d0:04:52:3d:83:2d:19:6d:e8:
8e:11:97:c6:af:55:34:53:28:65:e3:9f:bc:b7:28:
63:ef:96:65:fd:c4:8d:6a:df:5f:dc:8d:3f:7a:ec:
f9:37:6c:46:ff:3b:a4:34:63:c2:32:fc:a5:88:05:
84:0b:bf:95:35:64:d5:08:bd:ab:5c:64:f8:8b:10:
3e:53:d2:b5:37:56:fe:d8:18:5c:f6:61:38:c0:66:
2d:f2:c5:43:24:11:94:40:29:f0:52:b9:8c:46:d9:
09:43:f3:06:da:5a:0d:f2:28:30:5c:83:7b:53:1e:
f7:b6:f8:ab:58:5c:64:80:53:31:ff:36:cc:0a:fb:
62:69:0f:7f:06:3d:98:8d:50:fa:1a:5b:61:b7:57:
83:71:9d:f3:ed:8f:52:d1:fe:b7:37:cf:06:7c:ef:
d4:ba:5c:e1:8b:cc:90:a3:b8:28:71:60:5e:3e:13:
03:bf:da:3b:24:28:79:4d:5f:20:ed:7d:9b:9d:82:
c2:c7:cf:48:7e:90:c4:d5:76:1e:c4:d7:08:21:b3:
45:da:12:bd:97:24:7d:75:94:6f:ad:ad:16:e5:e7:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:C8:CB:65:00:FC:58:B1:B1:55:73:C2:C6:F5:5C:75:4C:C7:47
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_ArIy2UA_FixsVVzwsb1XHVMx0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d200::/29
2a12:54c0::/29
2a13:f080::/29
Signature Algorithm: sha256WithRSAEncryption
0f:f7:7e:11:ce:1b:f4:49:8f:34:01:c9:0f:32:9a:5d:c5:59:
58:01:df:04:7e:0a:45:2a:fe:c5:e6:1b:f7:a2:9f:ea:8c:47:
5b:d7:17:fb:be:3b:8e:10:3e:dc:58:48:c0:fd:73:80:d0:56:
61:eb:2b:6d:20:c5:d3:0c:9d:2b:13:12:e6:02:82:34:32:15:
05:f4:85:a7:b4:a4:ac:78:af:5a:ac:f6:bb:01:11:66:89:a9:
2b:f4:07:5c:f8:30:46:3a:cb:d0:db:8a:64:a5:ed:63:72:24:
6b:7a:60:08:fd:18:54:c5:7d:30:7d:2f:ef:3e:4a:96:5f:1c:
7e:fc:c0:ae:f8:4b:17:96:4c:b1:5c:b5:7f:8f:eb:f9:76:fb:
ba:ed:ee:92:0d:25:81:45:ea:1d:34:56:21:0c:45:52:0f:5a:
1d:31:15:38:69:03:29:cf:59:33:9a:4a:e5:a6:df:d9:18:b8:
0d:ea:11:59:fe:14:9c:3f:31:d6:11:9d:61:36:13:d0:5a:e0:
bb:30:ee:1c:6d:bd:7b:8f:9d:81:c3:0f:38:e3:92:ee:13:6d:
e2:84:3e:cd:dd:00:49:5f:04:75:e5:53:53:3a:c0:66:01:94:
a6:03:8b:4b:5a:b1:5e:9b:8f:d8:20:42:a5:b1:2f:df:56:4a:
0b:82:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 21:27:04 2024 by rpki-client on console-fra.rpki-client.org