Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa
File: bg7B-foluhM_bdlqbQZhdhdVEno.roa (raw, json)
Hash identifier: g7dHhnQy64QGBYgW3nS6nz7yH1plWzeHqU5MUGbew+0=
Subject key identifier: 6E:0E:C1:F9:FA:25:BA:13:3F:6D:D9:6A:6D:06:61:76:17:55:12:7A
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 01856FD5167A145BDEF2522809A2C0923910
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa
Signing time: Mon 02 Jan 2023 00:15:13 +0000
ROA not before: Mon 02 Jan 2023 00:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206362
IP address blocks: 2001:678:fdc::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:16:7a:14:5b:de:f2:52:28:09:a2:c0:92:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jan 2 00:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0ec1f9fa25ba133f6dd96a6d0661761755127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:79:b3:60:8f:5e:38:33:bd:0d:53:fb:47:
bc:36:5d:98:f6:ce:17:19:ec:b7:60:81:cd:ad:d9:
8a:e2:6a:97:ce:d3:01:93:11:f2:e2:2a:51:0a:62:
f9:0d:99:f2:1e:2f:93:4b:af:51:02:56:ae:9b:ff:
b2:26:3b:9d:cc:4f:29:ab:e7:53:7f:20:1f:08:63:
31:8f:3e:8a:db:b3:ef:a4:30:8f:3c:a2:6a:d4:cc:
da:40:71:1a:d9:db:74:da:6e:21:07:7f:30:c4:11:
a2:99:25:47:65:fe:a0:14:f6:de:00:c6:bb:de:18:
04:f6:ad:bb:79:2a:0d:38:bd:44:d0:b2:7c:7f:13:
31:78:68:06:ed:e3:c0:74:80:f6:95:e9:35:51:c8:
e9:a6:34:6b:b5:5a:ec:2c:17:7f:f3:a7:53:80:a7:
97:c2:be:c8:89:b5:4d:57:7e:3f:01:c6:39:43:ce:
f3:2a:19:f6:08:3e:01:64:2d:eb:e3:57:d2:94:3f:
00:80:d5:7f:2e:05:93:56:6b:db:3b:59:db:5a:48:
7c:a5:ab:4f:c9:60:29:57:35:78:7b:b5:63:d2:87:
d0:83:b2:81:b3:52:28:6f:8b:34:da:cc:b3:ee:be:
24:13:b3:48:ae:79:23:ec:77:76:88:e4:80:7d:95:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:C1:F9:FA:25:BA:13:3F:6D:D9:6A:6D:06:61:76:17:55:12:7A
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/bg7B-foluhM_bdlqbQZhdhdVEno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fdc::/48
Signature Algorithm: sha256WithRSAEncryption
12:1e:20:34:9b:ab:6e:aa:cd:e1:23:c6:1e:b2:70:97:3f:af:
92:0c:a4:bb:2c:73:05:eb:31:87:a3:ba:fd:8f:ab:b7:be:1d:
28:46:55:90:f2:64:ec:26:a5:5d:75:76:73:2a:ad:bb:7b:8e:
33:16:20:a4:27:e7:d2:80:75:a0:e4:b5:cf:b8:09:f5:77:24:
b2:a6:74:76:70:9a:74:35:3a:78:7c:40:64:c7:b4:70:c7:d4:
35:9c:db:67:d3:fc:9f:94:80:a6:1f:f3:0c:f9:c7:5f:7a:65:
18:fb:94:00:39:bf:6a:f7:4e:dd:2f:38:56:f3:ee:e0:19:d3:
8c:c5:00:b6:4a:0b:0e:0e:1b:58:0a:54:1e:56:7c:59:08:1e:
97:c4:cd:7d:8b:6c:d3:cf:85:db:c8:3f:ee:cf:15:5f:26:f0:
d4:01:9f:6c:1e:c7:f4:08:fa:8f:2e:fd:02:03:de:03:7b:70:
32:db:6d:0a:d2:a3:6b:38:ed:0d:6f:a1:0e:ba:bd:ff:0e:a0:
0f:82:91:a1:1b:c2:ce:1f:dd:65:6e:9c:b4:ce:83:34:16:78:
ca:77:d0:de:32:26:24:53:66:ae:36:fb:53:3b:3e:5c:ac:00:
57:ca:c3:4c:a5:1c:b8:56:cc:30:85:d7:ea:0c:cd:1b:e8:b7:
fa:73:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:02 2024 by rpki-client on console-fra.rpki-client.org