Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sef_fQX3LSIRYO424K54FCmeQ-E.roa
File: sef_fQX3LSIRYO424K54FCmeQ-E.roa (raw, json)
Hash identifier: 8kea/8MBysAbe59zw/qrx6bIYLCkLNDSBDFfgi4FSqE=
Subject key identifier: B1:E7:FF:7D:05:F7:2D:22:11:60:EE:36:E0:AE:78:14:29:9E:43:E1
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018A469ACC7B7957662BA9FA76DD8D5B3CA1
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sef_fQX3LSIRYO424K54FCmeQ-E.roa
Signing time: Wed 30 Aug 2023 13:21:04 +0000
ROA not before: Wed 30 Aug 2023 13:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 2a07:3500:19a0::/48 maxlen: 48
2a07:3500:19b0::/48 maxlen: 48
2a07:3500:1998::/48 maxlen: 48
2a07:3500:1200::/48 maxlen: 48
2a07:3500:19a8::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:9a:cc:7b:79:57:66:2b:a9:fa:76:dd:8d:5b:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Aug 30 13:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1e7ff7d05f72d221160ee36e0ae7814299e43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:f3:f4:7d:26:ba:89:ae:ad:a3:e1:fc:6f:
11:91:ac:66:cd:0d:06:07:73:9a:4c:0c:19:42:ba:
1b:c5:0c:6b:35:ac:00:fb:6b:b8:81:81:19:20:a0:
c9:72:1d:29:36:ec:6f:65:d3:88:83:3d:f9:73:c6:
22:25:32:8f:90:ed:a8:49:42:0a:74:5c:9d:2b:de:
56:74:16:69:94:c6:74:01:04:48:6b:b9:6e:c8:63:
b1:c4:b6:02:8b:a8:d6:f7:78:ca:db:24:fe:25:08:
2e:af:59:c9:10:39:82:ed:e5:e1:02:03:dc:d5:54:
7d:ba:fa:0e:61:b8:e9:1d:94:ee:67:c4:93:6b:c5:
23:6e:8a:1a:b5:74:14:ef:3d:0d:8e:71:4e:65:6e:
e4:be:22:a1:06:98:e0:f0:a1:22:ea:43:79:1e:06:
c6:32:84:d7:58:bb:9e:ff:78:ee:1b:4d:e2:04:8e:
5e:fb:68:c5:b9:38:ba:47:44:55:c1:a6:0a:c5:9a:
2d:e6:78:a2:07:b7:d6:c3:bc:cb:e8:00:7b:97:9a:
23:b4:14:fa:30:f0:57:16:1f:22:b0:11:0b:80:b4:
46:07:18:2b:5b:50:6a:8d:80:36:6c:da:b2:a0:50:
04:ed:1e:74:b7:2e:85:b9:50:4f:4d:85:88:88:b7:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:FF:7D:05:F7:2D:22:11:60:EE:36:E0:AE:78:14:29:9E:43:E1
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sef_fQX3LSIRYO424K54FCmeQ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1200::/48
2a07:3500:1998::/48
2a07:3500:19a0::/48
2a07:3500:19a8::/48
2a07:3500:19b0::/48
Signature Algorithm: sha256WithRSAEncryption
c2:ae:10:a8:1b:b8:7e:1d:f4:a5:81:6f:ab:c5:e9:d4:1f:fa:
15:d5:de:fc:1c:47:80:b2:b1:02:9e:39:9b:24:15:1d:9f:c3:
85:55:88:28:75:70:4a:09:85:4d:fe:3f:9c:49:27:f5:ae:a7:
9f:2d:9c:ab:b3:4c:cf:42:26:c2:3a:e0:45:c6:50:0d:76:55:
bd:c9:66:f8:14:46:3c:61:c7:66:77:22:ef:88:27:5c:20:10:
e5:4a:b0:ba:05:c1:a6:c7:aa:a7:7d:a1:00:e1:55:5f:07:6b:
19:fa:fd:3d:a4:4c:2b:30:de:7e:3e:66:49:ff:15:56:f0:bd:
45:fd:3b:6c:66:16:e3:42:88:97:ed:5b:fc:7e:8b:30:25:22:
aa:eb:4a:5c:81:61:42:8b:a6:ef:0d:ba:a9:46:ba:67:34:6d:
e6:d0:e6:54:fe:2c:fa:65:82:5c:78:dc:6b:a2:ba:97:9b:44:
31:f8:40:67:a5:43:21:15:c3:fd:17:d2:43:83:57:15:df:4e:
a6:2f:07:f7:56:e8:63:05:e2:07:14:e3:b0:74:40:7d:f5:db:
78:c4:76:ca:c2:d2:60:df:ef:fc:99:5f:ef:04:a2:c5:b4:c7:
0e:97:d0:46:c9:2c:a8:8a:5f:6e:3e:79:07:36:bb:1d:94:b6:
33:12:1d:40
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 31 06:14:36 2023 by rpki-client on console-fra.rpki-client.org