Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/w4x21FhMuYwV7kzItgy2pUvvLUY.roa
File: w4x21FhMuYwV7kzItgy2pUvvLUY.roa (raw, json)
Hash identifier: G/C9e1O1FZlneb07dLS9OmEOQBJUePPdfoA1B78OmVI=
Subject key identifier: C3:8C:76:D4:58:4C:B9:8C:15:EE:4C:C8:B6:0C:B6:A5:4B:EF:2D:46
Certificate issuer: /CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Certificate serial: 018E56CDB2E4618D83ECA4D74AF1D8C03E8E
Authority key identifier: FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/w4x21FhMuYwV7kzItgy2pUvvLUY.roa
Signing time: Tue 19 Mar 2024 13:01:44 +0000
ROA not before: Tue 19 Mar 2024 13:01:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29632
IP address blocks: 2001:67c:e3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 23 Mar 2024 21:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:cd:b2:e4:61:8d:83:ec:a4:d7:4a:f1:d8:c0:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Validity
Not Before: Mar 19 13:01:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c38c76d4584cb98c15ee4cc8b60cb6a54bef2d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:f7:c8:ad:8a:a3:1a:25:eb:92:4a:45:c9:
5c:28:1b:8f:33:be:55:a2:e6:f1:f0:09:fc:e1:c9:
fb:7c:21:58:62:15:55:3e:13:08:0b:96:e9:e4:57:
79:74:b2:1f:23:82:14:bf:00:3e:9c:6c:20:0d:bb:
61:64:37:68:02:fb:49:3e:55:fb:f9:7f:bd:f1:bd:
5b:3d:53:33:b8:85:b2:ff:e1:55:bd:d9:41:75:87:
2f:ba:d3:9d:e2:a1:bf:d8:f0:27:0d:6e:9f:9b:f3:
e2:e2:6b:bc:99:3a:43:77:89:9a:b8:02:a8:92:d1:
7a:1f:44:8b:08:44:d1:e2:2e:21:65:37:36:47:40:
79:74:11:c8:0a:19:a2:06:93:eb:4f:3a:3b:b9:f7:
9a:c1:14:a6:8a:06:c0:f9:fe:f4:04:fc:fe:14:6b:
6d:16:d9:78:fa:c7:5c:5d:c2:15:4f:d0:23:d6:b4:
86:ae:c6:00:42:e1:ef:63:59:72:bb:2b:e8:1d:46:
31:73:8e:ff:ed:ef:09:fb:ed:ad:77:82:30:4a:75:
d5:6f:10:b8:ba:1e:0a:ae:5c:1e:f6:cb:30:2e:3c:
49:26:58:91:2f:90:99:b5:5f:c2:58:94:a6:0a:68:
ec:99:d7:aa:7c:f0:2f:0e:a1:8a:4a:ff:b2:8a:c8:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:76:D4:58:4C:B9:8C:15:EE:4C:C8:B6:0C:B6:A5:4B:EF:2D:46
X509v3 Authority Key Identifier:
keyid:FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/w4x21FhMuYwV7kzItgy2pUvvLUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e3c::/48
Signature Algorithm: sha256WithRSAEncryption
08:46:bd:47:d5:55:33:18:dc:60:c5:61:ee:2a:42:3c:70:aa:
a5:44:9e:b2:95:52:2a:7a:fc:8e:5c:35:7d:7f:b5:1f:60:01:
68:f7:fd:2a:42:c5:60:ce:16:25:9e:75:ff:cf:1b:a4:8f:9e:
bd:13:05:b4:11:96:2e:a1:96:cd:59:f5:6c:53:9a:29:97:3b:
38:41:c3:4a:06:52:b2:1a:07:49:3e:9e:eb:98:50:1a:2c:b7:
aa:06:4b:ab:54:78:f9:4b:7e:0f:c2:13:52:92:bf:5d:d0:c7:
28:94:df:eb:26:73:47:37:21:05:fe:56:ad:29:d9:47:c1:60:
4d:e4:a3:19:ab:25:3e:c7:13:f5:b5:af:e8:24:9b:0d:be:cb:
5c:93:0b:3d:ca:2d:d7:74:7f:55:fb:7d:a5:a5:18:43:a9:93:
76:c1:0e:77:5d:f1:8f:0c:7e:09:26:f0:d8:a7:7b:b1:7a:80:
84:75:11:bd:d5:e0:9f:96:eb:64:6e:f5:82:ec:5e:a8:3e:3c:
f6:82:dc:37:9b:70:d7:11:88:20:99:b1:40:83:7b:06:d2:e3:
d5:08:58:69:8e:62:d1:49:4d:94:e7:d8:30:8d:ac:21:6e:34:
3a:f1:70:62:0d:dd:5c:1f:73:42:fc:90:f2:24:b5:c2:8c:43:
88:65:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org