Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/_Bc8g10rrK9WLiJxqeZ31zKdBCc.roa
File: _Bc8g10rrK9WLiJxqeZ31zKdBCc.roa (raw, json)
Hash identifier: kHjHbMFb1VTmrn48/2hrjvS1sbHBMBczSweLRUQwNyw=
Subject key identifier: FC:17:3C:83:5D:2B:AC:AF:56:2E:22:71:A9:E6:77:D7:32:9D:04:27
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018579B71E4761B4D12AAE8BA34E6008845F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/_Bc8g10rrK9WLiJxqeZ31zKdBCc.roa
Signing time: Tue 03 Jan 2023 22:18:41 +0000
ROA not before: Tue 03 Jan 2023 22:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200373
IP address blocks: 2a13:3f83::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 21 Mar 2023 14:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:b7:1e:47:61:b4:d1:2a:ae:8b:a3:4e:60:08:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 3 22:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc173c835d2bacaf562e2271a9e677d7329d0427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:c2:56:cb:53:ad:a2:a0:30:e0:d4:57:26:
4a:61:23:51:e2:2e:f5:24:f4:f3:8f:a0:06:ad:9e:
a6:4c:a8:08:3e:e2:0d:84:60:74:07:57:5a:1e:82:
ee:b8:c3:ed:0d:d9:f6:eb:ca:64:12:a5:b2:3f:95:
b5:08:08:9e:38:63:55:7b:a3:71:c7:23:3c:15:aa:
c7:05:4d:99:ea:77:06:ad:82:0a:d6:36:ea:a1:cf:
48:4c:27:b6:f5:55:f1:e7:ea:dd:bf:43:8e:cf:e2:
3a:4d:9a:79:7e:88:94:38:b0:d4:d1:40:5f:2d:1a:
ff:03:5c:80:68:61:cd:85:00:51:8c:fc:da:bd:34:
6f:f4:c3:cf:55:89:39:a7:0e:9c:6a:f1:16:b6:55:
99:e6:41:50:cd:59:36:25:27:0a:3a:09:cb:22:0e:
17:4d:77:af:6f:76:64:e2:49:e9:cb:7c:0c:43:ea:
7b:be:5a:c5:bc:25:75:bc:e8:86:ca:23:2e:e2:82:
03:c0:e5:f6:f0:d0:28:b1:34:f8:c9:e7:70:63:96:
bd:ba:a1:61:07:15:b6:ac:45:6a:ad:ef:ab:48:7a:
3a:1f:f6:be:2a:da:87:79:ff:e4:85:af:5b:52:b6:
51:4c:e8:ad:69:e7:43:bd:e5:b2:2d:96:5b:46:16:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:3C:83:5D:2B:AC:AF:56:2E:22:71:A9:E6:77:D7:32:9D:04:27
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/_Bc8g10rrK9WLiJxqeZ31zKdBCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f83::/32
Signature Algorithm: sha256WithRSAEncryption
23:8b:b8:0a:2e:eb:b1:57:71:c4:5f:5a:23:6a:d9:92:bc:8e:
7f:f9:66:ed:e9:96:bc:98:9c:5b:ec:38:a6:12:7c:0b:54:dc:
c4:1e:70:60:a2:c6:de:66:f7:50:82:10:60:51:6a:5d:b1:6a:
d8:1b:2a:00:4d:3d:80:8b:d5:96:ba:f0:38:14:bc:d9:34:92:
11:56:f0:23:10:af:de:a2:75:2b:ca:da:81:f3:8e:3c:a0:53:
52:ae:85:a4:a4:8a:c3:a7:15:f4:b5:2c:65:f1:fc:e5:73:aa:
4c:c2:db:e3:15:b7:85:4d:a5:03:0e:ef:96:eb:54:05:02:31:
b3:fa:fc:6c:83:ca:8f:24:51:c3:30:ae:57:96:c4:a0:4c:99:
a2:a0:06:de:32:a5:65:d3:f1:d6:e5:11:de:b9:bd:15:dc:22:
ba:79:28:ad:8c:72:fc:91:be:60:eb:a5:8b:5a:55:ae:c4:d1:
a2:e1:84:7e:54:96:7c:31:97:c9:3b:c8:8e:44:f5:17:c8:66:
27:06:65:9e:d1:03:14:cd:61:80:6a:a6:f6:ed:d1:3f:10:23:
d4:de:98:0b:49:6e:df:07:a2:79:26:66:b0:61:cb:00:17:9d:
27:ab:47:f9:4d:3e:55:3d:37:ae:2d:0a:5c:06:19:29:ef:cb:
9b:ce:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org