Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa
File: v2eCk4JqJVTrnvvurYPnYFpg2tg.roa (raw, json)
Hash identifier: vwx63Dt6T0B+vv+cGfna/cRKzuRprPTIdkuyupwpxWg=
Subject key identifier: BF:67:82:93:82:6A:25:54:EB:9E:FB:EE:AD:83:E7:60:5A:60:DA:D8
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 018770073588A49F3B36B4DFC5F40F50FD19
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa
Signing time: Tue 11 Apr 2023 11:15:33 +0000
ROA not before: Tue 11 Apr 2023 11:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42861
IP address blocks: 2a00:1e68:112::/48 maxlen: 128
2a00:1e68:100::/48 maxlen: 128
2a00:1e68:100::/47 maxlen: 128
2a00:1e68:101::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:07:35:88:a4:9f:3b:36:b4:df:c5:f4:0f:50:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 11 11:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf678293826a2554eb9efbeead83e7605a60dad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:15:4f:2e:ca:7a:67:6c:81:e6:3d:73:b1:
8e:b8:a7:46:4c:72:8f:59:14:77:59:97:75:c9:72:
07:a9:1b:0a:b9:77:96:07:ff:91:a0:03:f2:7d:01:
6e:89:28:35:0d:9a:5f:9f:3d:fa:84:ba:6d:24:db:
61:fa:ce:96:3f:97:ce:0a:1b:76:17:a3:e5:ae:7b:
01:03:44:ad:17:72:c9:7c:bd:9e:03:f1:e3:c6:ca:
23:58:3c:87:20:31:3b:93:29:c1:d6:85:ed:1e:cd:
c6:25:d0:57:59:0f:0f:1e:ae:f5:c4:ac:9b:0c:9c:
91:1f:1a:90:7c:cc:28:3e:b2:ab:bf:d5:59:58:d6:
4f:b6:c3:f9:d2:bf:04:d9:dd:82:59:3b:e9:d2:9d:
bb:9b:b0:c5:67:ea:f7:0b:e2:63:d7:ab:00:c6:2c:
65:2b:9e:98:d8:d5:cc:71:61:a9:88:db:11:c7:0d:
cc:16:bd:90:80:d3:f1:23:7a:8b:b3:42:a4:41:0c:
03:f6:f5:a1:dc:be:32:57:a2:52:ae:15:bf:d1:a8:
17:13:c6:36:09:9d:34:bf:7a:3d:04:0c:f3:85:23:
1c:96:75:34:2c:f2:17:de:97:ba:ff:02:c2:38:6e:
50:29:c1:89:67:33:9a:1b:a3:62:96:87:c7:eb:0c:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:67:82:93:82:6A:25:54:EB:9E:FB:EE:AD:83:E7:60:5A:60:DA:D8
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/v2eCk4JqJVTrnvvurYPnYFpg2tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e68:100::/47
2a00:1e68:112::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8a:0a:4d:bf:4e:9c:f5:d1:e3:bd:2a:a1:9f:69:48:f7:96:
6e:b3:3e:37:c2:1e:c5:1c:99:4a:fd:58:8a:4c:e2:f3:08:a4:
41:3c:fb:7a:57:ef:a9:f4:70:58:be:1b:01:52:f1:46:90:1c:
c7:f8:9f:34:44:8c:2b:2b:82:c5:78:1a:12:16:91:31:ec:c4:
0d:7f:0f:3f:8f:e2:b6:e5:c4:65:dc:49:e0:63:88:0d:b0:58:
76:b2:e9:89:33:30:16:08:06:19:09:ca:f8:3e:bd:13:e4:8e:
b1:cd:68:bf:6b:f0:35:92:59:a9:ec:98:3a:0b:8d:9d:06:37:
7d:73:27:46:38:0d:37:c7:b9:fe:52:bf:8b:d4:2b:8a:71:b0:
d1:43:f2:5d:67:94:3a:e3:79:58:e4:45:85:94:23:c6:01:78:
a7:6d:de:57:60:04:93:6a:4c:e1:7c:f3:31:82:3b:58:3d:1b:
b9:3b:8a:c7:5d:56:9a:6a:b5:dc:77:cd:75:7e:81:cb:1b:9e:
2c:62:49:91:8e:96:0f:4e:f0:e8:b3:1b:4b:0b:73:7f:67:64:
bf:a3:df:6c:46:1d:e2:1b:98:df:da:3e:87:3c:2b:97:f1:18:
1b:c8:06:0c:48:67:47:df:0a:c9:e9:dd:22:05:5e:0f:40:b6:
8e:44:49:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org