Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/t4nQ9ilwtx5lFKD_Y5b3O1jVuRY.roa
File: t4nQ9ilwtx5lFKD_Y5b3O1jVuRY.roa (raw, json)
Hash identifier: HmpdMnJrsNl0mPneeCQJxQqtYPcuAajz3tMBxPTHazg=
Subject key identifier: B7:89:D0:F6:29:70:B7:1E:65:14:A0:FF:63:96:F7:3B:58:D5:B9:16
Certificate issuer: /CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Certificate serial: 018E5291B6F4580EF4ACCA061EEAA231B598
Authority key identifier: FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/t4nQ9ilwtx5lFKD_Y5b3O1jVuRY.roa
Signing time: Mon 18 Mar 2024 17:17:44 +0000
ROA not before: Mon 18 Mar 2024 17:17:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41051
IP address blocks: 2001:67c:e3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 23 Mar 2024 21:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:91:b6:f4:58:0e:f4:ac:ca:06:1e:ea:a2:31:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Validity
Not Before: Mar 18 17:17:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b789d0f62970b71e6514a0ff6396f73b58d5b916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:69:5b:93:52:ac:eb:fb:62:cf:5a:b6:18:
6a:a1:54:10:b5:ee:58:a0:e1:b0:da:19:60:8f:aa:
73:dd:5b:ad:63:38:ee:02:33:29:7b:4c:d3:c9:1e:
75:11:f7:da:09:9e:33:22:19:9d:fd:81:74:4a:35:
58:71:38:aa:f3:b3:11:24:b8:06:2c:46:d4:41:76:
2e:3f:2b:a1:6b:06:57:57:21:af:c7:32:03:cb:60:
25:40:bd:1c:6f:49:eb:5b:ae:a5:a8:67:8a:29:23:
a4:86:84:8c:1c:27:7f:de:c7:f6:fc:3c:45:c8:c2:
81:8b:85:17:17:67:79:69:f8:cf:61:0e:fa:5e:ba:
a1:bd:8f:ff:52:37:a8:ec:a4:31:1c:b1:30:c1:4a:
6e:16:a1:9b:2f:51:d5:7c:65:42:1a:5e:bf:a5:cd:
0e:b9:c6:fb:b4:94:c0:c8:6c:76:06:82:9a:78:57:
92:81:be:87:de:17:61:25:ae:25:6c:f3:9d:f8:f2:
61:c5:88:f4:94:c7:ef:4a:d1:9c:dc:5b:76:3f:16:
d4:b4:05:21:4e:d6:14:e2:e5:84:9e:b4:85:07:6c:
cc:a3:d7:b5:55:73:74:c2:f4:b9:0f:af:38:60:46:
ba:d9:b4:76:f9:4a:2c:1f:50:68:c8:62:17:db:58:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:D0:F6:29:70:B7:1E:65:14:A0:FF:63:96:F7:3B:58:D5:B9:16
X509v3 Authority Key Identifier:
keyid:FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/t4nQ9ilwtx5lFKD_Y5b3O1jVuRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e3c::/48
Signature Algorithm: sha256WithRSAEncryption
49:7f:f9:30:e4:e4:aa:89:01:b8:98:cc:ea:4b:e3:3a:ce:e0:
0b:14:37:1d:07:b8:63:30:b3:4b:cb:cf:b7:55:54:8a:41:27:
c0:f1:aa:9a:0b:00:ac:10:d7:95:9b:78:80:6e:fe:b5:5d:59:
2c:a5:d0:2a:6c:67:26:3b:2f:e9:9a:03:fa:41:92:1f:ee:b6:
10:79:1e:b2:d3:5f:b1:a8:5e:c6:16:59:74:c5:38:ab:44:4a:
df:91:15:3a:c5:80:fc:c8:36:eb:64:e7:0d:30:75:77:94:51:
20:f0:bd:67:56:7b:8c:64:17:e7:cb:a2:4f:48:8c:1e:8c:12:
e1:0e:51:d5:26:35:81:43:83:7c:51:7b:58:91:ea:ca:29:70:
16:b9:fe:aa:61:03:6b:00:41:4a:d5:75:f4:7e:a4:67:0a:0e:
6b:30:12:10:f3:21:5c:09:fa:e5:de:d4:ae:97:d6:37:db:46:
73:57:31:37:8d:c2:51:ac:c4:14:c7:7d:7c:96:14:38:14:ab:
3e:ab:8b:e6:cd:49:b3:82:93:68:5e:36:f8:51:38:a1:9a:c6:
71:b8:24:b9:1b:fa:5c:6b:6c:3f:a0:5a:dc:31:cb:7d:77:62:
ea:30:b1:cf:b2:a5:05:f7:49:95:06:da:ec:bf:0f:8a:bc:d4:
81:39:e8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:53 2024 by rpki-client on console-ams.rpki-client.org