Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FJJrEoPzLx_5QB2HgJCx7eTMAJs.roa
File: FJJrEoPzLx_5QB2HgJCx7eTMAJs.roa (raw, json)
Hash identifier: HSJ8/R2Ee1hFB30Qljw+KSiZghzLcdc41brjNuuFDCM=
Subject key identifier: 14:92:6B:12:83:F3:2F:1F:F9:40:1D:87:80:90:B1:ED:E4:CC:00:9B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018F993DF28660D3FA883E8FA3579A9FD12E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FJJrEoPzLx_5QB2HgJCx7eTMAJs.roa
Signing time: Tue 21 May 2024 03:42:04 +0000
ROA not before: Tue 21 May 2024 03:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a11:4b41::/32 maxlen: 32
2a11:4b42::/32 maxlen: 32
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
Validation: Failed, certificate revoked on Sat 25 May 2024 07:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:3d:f2:86:60:d3:fa:88:3e:8f:a3:57:9a:9f:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 21 03:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14926b1283f32f1ff9401d878090b1ede4cc009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:e9:2e:18:a5:ad:25:b2:dd:6b:9e:a8:9e:
8f:50:7f:79:2a:51:96:ef:29:36:26:f1:d0:94:0a:
9f:44:73:fa:7b:c8:38:bf:51:98:a6:fc:ca:4d:5f:
04:52:46:4b:41:32:a3:29:b7:55:84:29:1f:d7:33:
1c:13:c4:17:3c:6f:0e:4d:75:f0:34:f0:a4:7f:a2:
e1:68:63:4a:ff:83:38:30:15:79:a2:e5:74:db:0e:
de:16:3f:8a:11:3a:eb:7b:f5:a8:9f:83:83:5c:34:
b5:29:96:55:7b:5f:af:28:63:5d:48:bf:78:7c:ad:
2b:5f:e2:84:35:70:16:80:d9:09:6e:56:6d:4d:2a:
ed:81:8b:6e:dc:e1:af:0a:c6:17:8d:8c:86:75:ad:
6f:29:18:bc:6b:c7:46:95:d4:6d:3b:db:41:22:72:
ed:eb:40:15:f4:f0:65:21:e0:ed:94:8b:83:ad:80:
fb:89:22:59:f3:6d:87:b6:c7:f4:4f:9a:69:6b:db:
1a:85:7b:d5:26:a0:2b:95:b5:84:5b:17:11:f8:cb:
e2:7a:04:ca:fd:d4:c3:24:22:b1:a3:36:3a:de:11:
4d:1b:c9:01:c6:0e:2c:0b:d3:e4:2c:7b:2d:73:54:
ef:94:c5:cf:b9:4d:a8:f2:e7:92:7c:e3:b6:ad:ac:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:6B:12:83:F3:2F:1F:F9:40:1D:87:80:90:B1:ED:E4:CC:00:9B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FJJrEoPzLx_5QB2HgJCx7eTMAJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b140::/29
2a0f:db80::/29
2a10:4700::/29
2a11:4b41::-2a11:4b42:ffff:ffff:ffff:ffff:ffff:ffff
2a12:4300::/29
Signature Algorithm: sha256WithRSAEncryption
4a:39:73:68:4d:44:2f:b8:a8:0e:e9:06:87:34:04:58:fd:fa:
08:5d:26:97:15:ac:32:2d:15:e7:c6:4f:c4:52:ee:32:ff:1c:
56:3b:5a:17:a7:cf:7f:57:8e:82:cb:81:75:9d:04:fc:d6:54:
c4:32:70:f4:45:bf:1e:e9:19:ab:29:94:ad:03:04:f1:75:92:
6d:71:dd:14:d9:97:c1:25:a1:b8:c7:c6:68:e9:52:9b:85:e0:
15:c2:f5:82:90:20:5f:d6:01:c5:49:51:f9:f8:b7:6c:8c:78:
40:b8:d2:63:39:55:69:69:37:84:a6:86:1d:43:8e:96:68:38:
e3:9c:bf:d6:1b:25:40:0a:d6:be:10:85:b3:c8:20:b6:72:c0:
36:a7:f2:eb:fa:04:4c:e9:92:1c:f4:71:97:49:09:f4:09:14:
26:0d:55:43:b4:98:9a:07:7d:40:c1:39:ed:84:c0:e6:20:a2:
d4:f0:5a:df:c0:91:93:ff:c7:17:8d:7f:ae:40:9d:8c:ea:e0:
93:2f:40:9c:e9:c6:fc:29:7c:65:19:f8:12:e5:c4:43:77:1d:
73:00:51:09:a4:f7:47:1c:bf:4c:0e:2e:46:2c:ca:b0:26:71:
bf:1d:8f:4a:b2:7d:d7:10:b2:bb:01:64:9c:72:5e:19:db:89:
10:8c:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:16 2025 by rpki-client