Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fcLcBBSu3QFSbzQ3_G_A-uSWCzY.roa
File: fcLcBBSu3QFSbzQ3_G_A-uSWCzY.roa (raw, json)
Hash identifier: vS4NTrzpDy7O95Mx3zT1/zXW8XWFDI7HZBxTU/bT0JY=
Subject key identifier: 7D:C2:DC:04:14:AE:DD:01:52:6F:34:37:FC:6F:C0:FA:E4:96:0B:36
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0191D7BC034730A7094DA48E532C18D058BB
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fcLcBBSu3QFSbzQ3_G_A-uSWCzY.roa
Signing time: Mon 09 Sep 2024 17:01:48 +0000
ROA not before: Mon 09 Sep 2024 17:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214294
IP address blocks: 2a01:ee80:1::/48 maxlen: 48
2a01:ee80:2::/48 maxlen: 48
2a01:ee80:141::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Sep 2024 10:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:bc:03:47:30:a7:09:4d:a4:8e:53:2c:18:d0:58:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Sep 9 17:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc2dc0414aedd01526f3437fc6fc0fae4960b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:b1:df:bb:19:04:12:79:e4:98:1e:72:b5:
5e:7c:f0:83:2f:cc:4c:71:2c:e5:dc:6e:99:7f:aa:
07:70:4a:82:eb:32:b9:89:79:75:f3:67:c8:8b:d9:
0c:1c:93:bd:64:1e:35:e9:d9:e5:e2:3b:7e:aa:51:
eb:4c:94:84:54:d4:81:19:42:9f:2e:6a:de:a7:fb:
52:65:6f:43:2d:69:72:ad:be:fd:e7:f1:a6:16:56:
88:ea:1d:79:6f:f9:96:04:15:7b:e8:68:4e:ea:1d:
02:67:4f:e3:6f:2f:4e:f0:76:a0:65:ed:da:78:8c:
ce:9a:15:98:b9:a7:f4:0a:aa:b4:8b:0b:62:db:bf:
53:15:2c:9d:f1:9e:55:80:ac:b5:63:38:df:a6:dc:
4f:ac:e2:ca:72:7b:b5:f3:10:ca:a8:4a:62:8f:a9:
cb:1a:19:5c:5d:95:e4:67:99:85:69:d0:26:44:eb:
da:3c:20:db:b8:78:ab:96:a0:ed:b4:4b:0b:36:36:
9c:c4:07:a7:e5:b3:1c:68:38:0e:f1:1c:b1:66:fa:
56:15:49:59:b5:9d:80:88:ab:b2:f4:82:3b:b6:78:
4d:81:dc:03:a9:58:46:a7:2a:4a:05:13:d0:a1:e3:
c7:43:64:94:08:e6:9a:16:b8:13:3f:bd:f0:1d:a5:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:DC:04:14:AE:DD:01:52:6F:34:37:FC:6F:C0:FA:E4:96:0B:36
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/fcLcBBSu3QFSbzQ3_G_A-uSWCzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ee80:1::-2a01:ee80:2:ffff:ffff:ffff:ffff:ffff
2a01:ee80:141::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d0:ca:76:26:e8:ee:17:cb:89:d9:f1:8b:7a:d5:8d:0c:3a:
d6:33:c8:8f:04:41:cd:d0:37:cd:d8:55:aa:43:15:00:e9:23:
8c:46:a5:3c:77:71:28:d4:93:a4:76:63:37:d8:7a:a2:00:5d:
ad:06:64:07:30:ce:52:c4:5f:36:8b:6d:9e:51:19:b8:a3:82:
24:91:4e:57:e5:9f:fc:7b:96:57:f7:68:01:71:00:4b:5f:aa:
be:7d:0c:32:85:4e:5d:25:cf:74:af:b2:e8:38:38:e8:47:3a:
08:07:e8:7f:6e:c1:01:9f:c7:9f:78:b0:5c:4a:e1:62:37:7d:
70:0f:d8:ee:88:80:a1:f4:da:29:15:d1:3b:29:ee:48:d0:99:
b4:ea:ad:9a:83:bc:e3:97:f4:92:5d:8d:95:f5:6e:c2:e2:66:
72:d4:e9:59:24:1d:df:3b:ee:a6:81:e8:be:5b:74:d4:ee:f3:
72:39:b8:de:6a:e1:c3:71:35:cc:ec:b4:63:93:47:5d:c3:66:
21:00:c4:5e:f5:28:5d:ed:40:4a:f3:d7:e9:0c:8c:60:70:72:
9f:99:6f:30:37:95:37:c5:0b:44:da:e1:ec:a2:a3:e7:f8:11:
e1:65:d8:17:b6:9b:9b:34:a0:07:df:ed:87:6e:7b:7b:7d:13:
ec:ce:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 15:54:05 2024 by rpki-client on console-fra.rpki-client.org