Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FNFLloetqBXUiVh43xL-5OUPKGk.roa
File: FNFLloetqBXUiVh43xL-5OUPKGk.roa (raw, json)
Hash identifier: fCUzZNJifqZKlDXVnDhmxdKFl8aI+H2Q1k6jifaYJhM=
Subject key identifier: 14:D1:4B:96:87:AD:A8:15:D4:89:58:78:DF:12:FE:E4:E5:0F:28:69
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FAD8D1FF5099AB145C9B10B499FEFA1
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FNFLloetqBXUiVh43xL-5OUPKGk.roa
Signing time: Tue 06 Feb 2024 18:28:16 +0000
ROA not before: Tue 06 Feb 2024 18:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48718
IP address blocks: 2a0f:b241:112::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:ad:8d:1f:f5:09:9a:b1:45:c9:b1:0b:49:9f:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d14b9687ada815d4895878df12fee4e50f2869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:90:fe:e3:9f:00:b5:f9:2d:d9:d5:bd:df:
dd:11:3b:1a:6c:00:a9:23:a3:b6:fa:55:8d:9b:88:
dd:78:dd:8b:4b:65:73:77:10:7c:61:1d:ce:f8:86:
5b:cc:00:15:0b:83:3c:c0:a3:9a:ad:5d:6c:29:e7:
da:8e:ea:29:71:19:0e:a7:d5:35:7e:ee:66:23:80:
ae:b5:0d:29:02:bb:43:de:35:89:5b:d4:6a:73:a1:
96:6d:90:14:2f:9a:7c:69:5d:27:f1:db:53:b2:b8:
95:02:5a:b5:50:11:04:ed:e4:cf:75:d1:f7:10:32:
d2:1f:05:8a:1d:74:4c:ed:06:b5:b7:28:39:12:94:
9e:ae:12:38:a5:9d:7d:e0:61:f0:03:e6:46:48:60:
88:d1:cd:57:08:3b:a6:ec:71:4f:b1:2b:4a:56:b2:
f9:bd:8d:22:85:96:7f:63:3f:97:72:15:32:03:b0:
6d:ac:f8:22:ed:d5:ba:99:e8:3d:2a:e3:f9:54:c0:
93:fc:39:e7:fb:4c:9a:54:33:4a:87:ab:e9:09:5e:
dc:35:32:23:05:45:65:6b:11:fc:f5:52:0c:36:ee:
f8:6a:99:df:66:d1:2a:ea:e2:58:78:2a:51:84:28:
a5:a6:5b:7e:27:84:b7:cb:97:3a:12:de:c3:e8:0b:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D1:4B:96:87:AD:A8:15:D4:89:58:78:DF:12:FE:E4:E5:0F:28:69
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/FNFLloetqBXUiVh43xL-5OUPKGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:112::/48
Signature Algorithm: sha256WithRSAEncryption
83:d5:23:38:79:de:fe:10:9b:f7:90:4a:71:0f:e6:4f:38:61:
7c:d3:9e:c5:18:69:6b:32:75:2b:f1:3e:b7:9e:89:1c:37:d9:
ed:6a:4d:a1:6f:36:5b:1c:7d:91:30:48:a7:a1:c5:45:5a:83:
50:7d:99:8e:8b:d0:89:ef:8e:fe:60:0d:80:41:e5:fb:68:61:
8b:26:4f:1b:81:cb:f0:95:c8:15:d3:6f:45:10:71:3d:6d:79:
af:82:a7:f2:91:4c:7d:3d:50:3b:ea:85:fe:cc:65:fe:b7:9d:
73:b4:d7:d1:78:41:07:f2:12:22:94:49:2f:8c:80:99:6c:43:
d0:e6:55:15:c8:6d:df:95:e5:6a:2a:e9:42:e5:e8:e5:67:fa:
50:7d:22:4c:5d:43:83:3e:9f:bd:fe:22:f9:5c:ab:11:87:a1:
e5:d8:29:ac:9b:06:34:b7:51:c2:3e:72:f6:9b:c0:47:a2:b5:
60:69:6c:1f:7a:7c:8a:a9:a1:ac:52:8f:78:cf:4b:9c:67:64:
91:e6:6b:fc:40:5c:2e:24:c7:80:f6:ee:8d:a5:9e:65:f0:d2:
e8:ff:56:cd:00:ef:10:82:6e:47:a9:9c:2e:50:e6:29:e6:bb:
63:62:11:dd:cf:2d:09:10:6f:9d:33:48:f4:87:f1:f9:f1:fe:
dd:fe:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:11 2024 by rpki-client on console-fra.rpki-client.org