Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33392d3438203d3e20323135393738.roa
File: 326131333a646638373a623430303a3a2f33392d3438203d3e20323135393738.roa (raw, json)
Hash identifier: SpNW2JZpoSY4zi7n0ORlMWE1JlYIJelCQwlzfLUGbMo=
Subject key identifier: C6:11:59:0F:D9:ED:B4:AC:0D:B2:D9:89:80:39:5A:7D:B0:9A:B9:98
Certificate issuer: /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial: 59C12EA0164EC4CEA4C76BB171FD68DEA7619FA5
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access: rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33392d3438203d3e20323135393738.roa
Signing time: Sun 07 Jan 2024 17:10:23 +0000
ROA not before: Sun 07 Jan 2024 17:05:23 +0000
ROA not after: Sun 05 Jan 2025 17:10:23 +0000
asID: 215978
IP address blocks: 2a13:df87:b400::/39 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jan 2024 20:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c1:2e:a0:16:4e:c4:ce:a4:c7:6b:b1:71:fd:68:de:a7:61:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Validity
Not Before: Jan 7 17:05:23 2024 GMT
Not After : Jan 5 17:10:23 2025 GMT
Subject: CN=C611590FD9EDB4AC0DB2D98980395A7DB09AB998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:84:4b:d7:1e:5c:6a:93:cc:b9:3b:47:9d:
0b:9c:a8:a1:46:39:e6:40:ed:82:50:2b:87:e2:f1:
3a:06:57:c6:de:7e:6d:82:5b:60:b5:2c:48:3b:9c:
3a:8f:16:55:c3:49:bf:5c:18:2f:30:b1:11:2c:01:
e7:8e:be:af:79:8e:be:8b:13:3a:31:6a:3b:cf:8e:
76:8a:05:0b:9a:07:13:63:44:fb:b0:3c:4e:90:e0:
66:06:6b:c6:58:13:28:bd:02:74:7b:57:96:70:7a:
5e:63:f0:43:d2:ab:21:47:7a:39:26:0e:22:ba:84:
70:13:49:ba:01:5a:45:47:cc:a4:bc:20:67:ac:70:
e7:19:b7:ec:88:ce:0b:40:53:b3:90:ae:70:df:78:
e5:42:8d:b5:27:e0:e8:93:88:cb:b0:58:f3:83:3d:
0e:85:99:a1:8a:23:8b:46:91:63:40:32:08:c4:29:
a5:15:b0:37:12:87:e1:99:da:03:22:17:8b:9a:12:
ce:bc:d9:b6:5c:30:83:4f:49:31:85:bc:64:1c:93:
c0:d6:3a:ad:67:f5:1d:70:46:a9:7e:e5:f7:e0:91:
2d:ce:c5:9e:8a:73:39:1b:10:c9:79:ad:0f:b1:3e:
d1:c2:9e:38:8b:00:ad:33:7b:da:29:91:e5:84:98:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:59:0F:D9:ED:B4:AC:0D:B2:D9:89:80:39:5A:7D:B0:9A:B9:98
X509v3 Authority Key Identifier:
keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430303a3a2f33392d3438203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b400::/39
Signature Algorithm: sha256WithRSAEncryption
53:63:68:f9:7a:65:59:cd:3d:8f:61:88:ff:6d:0d:07:c7:0e:
ae:05:98:da:4f:f0:7e:ff:5f:64:c5:b2:87:9f:4b:54:fb:d4:
73:32:8b:c9:42:a5:4c:c6:12:4d:2e:69:23:ca:34:f6:be:07:
f6:de:6c:09:a4:34:96:ac:03:de:7f:ec:58:50:04:00:07:64:
14:37:2b:4f:2f:d0:67:d1:b9:c8:57:78:da:d1:bd:3c:2d:1f:
85:fd:f9:eb:6e:af:21:22:9c:94:93:04:e4:8e:05:12:b4:cf:
1f:25:e9:b4:61:05:39:3e:a9:96:97:a6:09:80:cc:88:63:b1:
a0:64:8a:97:d1:d2:b4:1c:a7:19:08:3f:aa:27:0d:6b:61:a5:
85:1d:3f:a6:ab:5e:af:c9:4e:ab:9f:90:de:28:5e:97:1c:ec:
95:df:13:e7:02:3b:60:4e:23:62:2a:cb:41:d2:ab:42:b3:de:
fd:ab:1c:a0:1e:5f:65:e4:a8:28:1b:18:04:40:5a:a4:9e:35:
ed:d0:34:05:02:ba:06:43:35:f9:35:c8:79:6a:65:7f:6f:d5:
2f:fb:08:ec:3e:bf:44:41:96:3b:fe:07:65:6a:11:96:f0:91:
e5:00:1c:3a:71:ce:0d:ee:64:fc:dd:54:26:a5:e3:2b:57:75:
2f:4e:e8:50
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUWcEuoBZOxM6kx2uxcf1o3qdhn6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFF
NzVEQkJCMzAeFw0yNDAxMDcxNzA1MjNaFw0yNTAxMDUxNzEwMjNaMDMxMTAvBgNV
BAMTKEM2MTE1OTBGRDlFREI0QUMwREIyRDk4OTgwMzk1QTdEQjA5QUI5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSYRL1x5capPMuTtHnQucqKFG
OeZA7YJQK4fi8ToGV8befm2CW2C1LEg7nDqPFlXDSb9cGC8wsREsAeeOvq95jr6L
EzoxajvPjnaKBQuaBxNjRPuwPE6Q4GYGa8ZYEyi9AnR7V5Zwel5j8EPSqyFHejkm
DiK6hHATSboBWkVHzKS8IGescOcZt+yIzgtAU7OQrnDfeOVCjbUn4OiTiMuwWPOD
PQ6FmaGKI4tGkWNAMgjEKaUVsDcSh+GZ2gMiF4uaEs682bZcMINPSTGFvGQck8DW
Oq1n9R1wRql+5ffgkS3OxZ6KczkbEMl5rQ+xPtHCnjiLAK0ze9opkeWEmP+bAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUxhFZD9nttKwNstmJgDlafbCauZgwHwYDVR0j
BBgwFoAUKhphctpMM5/Xh0Z+JvkqEeddu7MwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraS5uZXRpZmFjZS5uZXQvcmVwby9BcHJp
Y290LzEvMkExQTYxNzJEQTRDMzM5RkQ3ODc0NjdFMjZGOTJBMTFFNzVEQkJCMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNDAzMmM4Zi0xZDU3LTRj
M2ItOTA0My1hMGU3ZmViZjE2N2QvMC8yQTFBNjE3MkRBNEMzMzlGRDc4NzQ2N0Uy
NkY5MkExMUU3NURCQkIzLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL
hm1yc3luYzovL3Jwa2kubmV0aWZhY2UubmV0L3JlcG8vQXByaWNvdC8xLzMyNjEz
MTMzM2E2NDY2MzgzNzNhNjIzNDMwMzAzYTNhMmYzMzM5MmQzNDM4MjAzZDNlMjAz
MjMxMzUzOTM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqE9+HtDANBgkqhkiG9w0BAQsFAAOCAQEA
U2No+XplWc09j2GI/20NB8cOrgWY2k/wfv9fZMWyh59LVPvUczKLyUKlTMYSTS5p
I8o09r4H9t5sCaQ0lqwD3n/sWFAEAAdkFDcrTy/QZ9G5yFd42tG9PC0fhf35626v
ISKclJME5I4FErTPHyXptGEFOT6plpemCYDMiGOxoGSKl9HStBynGQg/qicNa2Gl
hR0/pqter8lOq5+Q3ihelxzsld8T5wI7YE4jYirLQdKrQrPe/ascoB5fZeSoKBsY
BEBapJ417dA0BQK6BkM1+TXIeWplf2/VL/sI7D6/REGWO/4HZWoRlvCR5QAcOnHO
De5k/N1UJqXjK1d1L07oUA==
-----END CERTIFICATE-----
Generated at Sat Jan 13 23:33:12 2024 by rpki-client on console-ams.rpki-client.org