Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/SCKht8pjFMSdiRtsRQAQmutzuww.roa
File: SCKht8pjFMSdiRtsRQAQmutzuww.roa (raw, json)
Hash identifier: Fe6FfQ5jto+XaMH242+2BIKzSBY/yjeQtMLKgkTad+c=
Subject key identifier: 48:22:A1:B7:CA:63:14:C4:9D:89:1B:6C:45:00:10:9A:EB:73:BB:0C
Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial: 018CACCA9A7901C6A450579D9C0C5DDF3744
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/SCKht8pjFMSdiRtsRQAQmutzuww.roa
Signing time: Wed 27 Dec 2023 19:40:08 +0000
ROA not before: Wed 27 Dec 2023 19:40:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198515
IP address blocks: 2a0d:70c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:ca:9a:79:01:c6:a4:50:57:9d:9c:0c:5d:df:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Validity
Not Before: Dec 27 19:40:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4822a1b7ca6314c49d891b6c4500109aeb73bb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:a1:d0:f1:a7:1e:6a:54:57:ac:ab:03:15:
12:fa:fc:90:6c:07:21:da:05:39:86:10:31:b0:f1:
5a:2e:3f:3b:6f:39:59:15:92:06:4f:c9:d5:69:fb:
ec:ad:80:1b:89:80:1e:8d:52:bf:19:6c:92:9d:ec:
73:09:a1:72:a0:df:05:d0:6b:8c:70:8e:1b:0d:94:
0b:2b:4a:7e:f3:3c:a7:1f:5b:d9:9d:ae:91:f3:e2:
14:52:8a:fc:24:89:ea:88:e5:c4:2a:a1:ff:40:84:
9d:ac:56:65:39:ab:37:2c:7b:1a:1e:60:10:02:fc:
3e:5f:83:89:96:66:ec:b9:8c:75:00:81:06:02:9b:
a9:98:8c:1a:ec:11:6f:18:d6:f9:7a:a6:c0:5a:87:
a9:19:b5:25:4c:60:3a:ec:80:99:9f:61:51:af:c1:
c9:37:8e:ef:15:a8:30:5e:9f:46:ec:8a:52:35:d8:
d2:38:ff:6c:7d:f3:8a:cc:55:e2:12:ae:ad:0d:c0:
11:87:31:46:9e:d6:b0:69:53:92:23:4f:22:a8:f8:
3c:7a:a2:25:34:af:e0:87:de:18:85:64:0f:db:0c:
1d:51:42:cc:40:00:ae:42:86:98:f8:c2:30:80:0e:
b9:13:83:ba:ce:c6:d8:c2:be:52:e0:e4:4c:a0:93:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:A1:B7:CA:63:14:C4:9D:89:1B:6C:45:00:10:9A:EB:73:BB:0C
X509v3 Authority Key Identifier:
keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/SCKht8pjFMSdiRtsRQAQmutzuww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:70c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:72:97:75:9d:5a:84:31:24:5a:9d:4a:4d:d2:a3:4a:45:74:
51:42:f5:54:fc:b9:4a:a9:46:1f:04:40:64:14:1a:b2:e7:db:
7c:1e:c4:ec:b0:1b:97:8d:d6:38:35:eb:24:8b:df:72:fa:7c:
89:82:e3:dd:f5:ff:5c:e5:8d:62:f6:66:e8:35:de:1e:d3:e4:
2e:85:87:d9:e7:0f:11:33:c2:f6:80:ec:ca:ad:c0:06:22:41:
58:cb:83:18:b5:cd:00:72:5b:c8:67:0c:2e:29:1f:2a:13:dc:
d6:d0:49:94:58:7e:aa:38:fe:84:87:7d:02:da:bb:05:84:6c:
c8:83:89:c5:d8:40:c7:fb:1b:b6:bb:af:d4:c3:e6:4c:2b:88:
c5:4c:db:ba:3d:d0:12:01:cb:97:25:eb:6b:a6:bb:72:60:d5:
64:7d:31:5c:5e:61:10:82:47:a0:a4:fe:a1:0f:0a:a6:af:66:
97:64:09:bb:b4:e8:cd:9f:80:c3:a1:63:51:09:ae:2d:0e:21:
86:2d:b7:61:4a:1e:8c:24:3a:7c:16:a7:18:94:f2:03:5b:34:
69:12:4e:5a:a5:3c:f7:68:7e:87:92:f2:67:21:c0:ab:f5:67:
dc:6b:9b:d2:5e:91:97:b7:7a:53:6c:20:44:43:59:8f:e5:05:
e2:8f:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:50 2024 by rpki-client on console-fra.rpki-client.org