Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/SRBY-Qeu9tAhqC1_Uv4BjkKdAfA.roa
File: SRBY-Qeu9tAhqC1_Uv4BjkKdAfA.roa (raw, json)
Hash identifier: AOHrhZB6m9V8hm/9Dgmum2V2bzv3TakQMjaiC8HUmoM=
Subject key identifier: 49:10:58:F9:07:AE:F6:D0:21:A8:2D:7F:52:FE:01:8E:42:9D:01:F0
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 0185718C2EA76D01E69586BCCADC996D41F5
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/SRBY-Qeu9tAhqC1_Uv4BjkKdAfA.roa
Signing time: Mon 02 Jan 2023 08:14:50 +0000
ROA not before: Mon 02 Jan 2023 08:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199813
IP address blocks: 2a03:9180:2::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2e:a7:6d:01:e6:95:86:bc:ca:dc:99:6d:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jan 2 08:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=491058f907aef6d021a82d7f52fe018e429d01f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:43:45:3f:4e:44:48:2c:6d:00:ed:d5:f0:
df:ce:0d:91:95:cd:90:83:16:77:05:20:c9:f3:d8:
88:28:06:55:62:5f:4c:47:37:1a:8b:e7:f4:d6:48:
9c:15:3c:2b:ca:7a:8d:32:28:01:69:04:7d:80:49:
e3:35:08:96:25:37:7e:ea:98:ce:7c:2c:28:0e:95:
8b:b8:b0:8d:3b:f8:a0:c4:8c:f6:63:1f:61:f5:51:
7c:9d:5b:84:e1:e1:ed:ea:9d:3e:53:2e:43:09:5f:
98:f2:e6:ab:11:0d:f3:3a:2d:3a:33:92:ca:23:30:
6c:32:81:24:30:0e:15:cb:c5:b5:17:49:40:0f:0d:
ed:1f:c5:3e:21:f9:cb:d1:b0:5a:d5:cd:11:51:6e:
e8:03:bf:f9:50:cf:85:ee:4b:a9:36:7c:03:b4:e8:
b8:9c:48:de:45:be:4d:fe:a4:a3:a1:da:ef:e4:55:
d2:b8:ab:1b:bf:5c:f1:54:32:83:51:b8:a4:40:6f:
9c:46:60:f0:60:dd:70:b0:27:07:3b:80:9d:52:b9:
86:1b:e9:8c:40:f4:6e:44:b1:dc:7d:af:b9:cb:e5:
f4:4c:f6:b0:06:93:e8:fe:9a:dd:1a:5d:28:6e:1f:
37:88:15:f1:e9:b8:14:25:f0:fe:26:41:38:f6:8b:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:58:F9:07:AE:F6:D0:21:A8:2D:7F:52:FE:01:8E:42:9D:01:F0
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/SRBY-Qeu9tAhqC1_Uv4BjkKdAfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9180:2::/47
Signature Algorithm: sha256WithRSAEncryption
02:26:08:33:3f:a1:9f:a1:8a:73:92:86:6e:72:69:68:eb:a5:
40:c6:4f:87:f2:cb:13:8f:70:ec:49:29:d9:17:f9:cc:cf:90:
84:09:1e:9a:c1:3e:24:bc:d9:d1:d3:f9:9b:e4:74:bc:88:dc:
c4:a3:8b:96:67:a8:bc:56:3b:83:7b:9b:f3:5f:b6:75:63:c3:
cc:d3:2b:c4:2e:45:a5:e2:84:ce:02:a7:87:ca:e4:de:fa:11:
b1:71:31:9c:72:30:b9:d7:cc:c6:c6:b9:56:1f:8e:a4:9e:87:
26:77:1a:1d:dd:d6:c0:2d:3d:69:b5:f3:37:01:ce:90:3a:cf:
13:99:3d:6d:62:be:63:85:7c:67:8f:dd:d0:c4:95:e2:c3:9c:
eb:bb:97:5d:83:25:c8:c8:0d:ae:6c:e0:bd:3f:b2:17:aa:74:
df:5a:e3:ca:90:dd:bb:49:10:64:ba:6e:f1:8b:16:5f:70:ec:
bd:e0:ab:85:45:fd:cf:8f:2e:5a:99:70:a6:84:63:c6:65:2c:
00:4d:8e:a0:cc:59:36:b2:94:6a:77:3b:df:9c:18:ff:33:a4:
ae:7e:fd:f0:56:11:5b:24:a1:63:74:55:b8:fc:90:99:f9:1a:
5e:d0:a2:ed:a6:89:45:ff:ae:6c:bf:ab:cc:0b:64:c0:4d:66:
32:a2:a5:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxjC6nbQHmlYa8ytyZbUH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjMwMTAyMDgxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTEwNThmOTA3YWVmNmQwMjFhODJkN2Y1MmZlMDE4ZTQyOWQwMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQBDRT9OREgsbQDt1fDfzg2Rlc2Q
gxZ3BSDJ89iIKAZVYl9MRzcai+f01kicFTwrynqNMigBaQR9gEnjNQiWJTd+6pjO
fCwoDpWLuLCNO/igxIz2Yx9h9VF8nVuE4eHt6p0+Uy5DCV+Y8uarEQ3zOi06M5LK
IzBsMoEkMA4Vy8W1F0lADw3tH8U+IfnL0bBa1c0RUW7oA7/5UM+F7kupNnwDtOi4
nEjeRb5N/qSjodrv5FXSuKsbv1zxVDKDUbikQG+cRmDwYN1wsCcHO4CdUrmGG+mM
QPRuRLHcfa+5y+X0TPawBpPo/prdGl0obh83iBXx6bgUJfD+JkE49ou4eQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEkQWPkHrvbQIagtf1L+AY5CnQHwMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvU1JCWS1RZXU5dEFocUMxX1V2NEJqa0tkQWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgORgAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQACJggzP6GfoYpzkoZucmlo66VAxk+H8ssTj3Ds
SSnZF/nMz5CECR6awT4kvNnR0/mb5HS8iNzEo4uWZ6i8VjuDe5vzX7Z1Y8PM0yvE
LkWl4oTOAqeHyuTe+hGxcTGccjC518zGxrlWH46knocmdxod3dbALT1ptfM3Ac6Q
Os8TmT1tYr5jhXxnj93QxJXiw5zru5ddgyXIyA2ubOC9P7IXqnTfWuPKkN27SRBk
um7xixZfcOy94KuFRf3Pjy5amXCmhGPGZSwATY6gzFk2spRqdzvfnBj/M6Sufv3w
VhFbJKFjdFW4/JCZ+Rpe0KLtpolF/65sv6vMC2TATWYyoqVB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:35 2024 by rpki-client on console-ams.rpki-client.org