Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/t3DHnuyAieabnJsOJkXnXUDz43k.roa
File: t3DHnuyAieabnJsOJkXnXUDz43k.roa (raw, json)
Hash identifier: wBCaNKc/0NFYDCwxuPamMb9y5XWS2V257MHyn4+YDAs=
Subject key identifier: B7:70:C7:9E:EC:80:89:E6:9B:9C:9B:0E:26:45:E7:5D:40:F3:E3:79
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 0186D1F1D85B958E6FCB593C4E64FFFBF786
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/t3DHnuyAieabnJsOJkXnXUDz43k.roa
Signing time: Sat 11 Mar 2023 18:32:13 +0000
ROA not before: Sat 11 Mar 2023 18:32:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202361
IP address blocks: 2a13:40::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:f1:d8:5b:95:8e:6f:cb:59:3c:4e:64:ff:fb:f7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Mar 11 18:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b770c79eec8089e69b9c9b0e2645e75d40f3e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:31:43:fe:8a:81:8d:c8:94:c9:1a:8f:49:
00:40:e2:c1:2c:a7:ce:cb:be:d2:45:fc:fd:27:6f:
b7:6a:6b:cb:a7:bc:5d:7c:bf:ae:db:12:5f:c7:4f:
18:ce:a4:90:d3:0e:10:af:a1:00:4b:e1:b0:d9:c0:
62:01:22:af:f9:89:3a:af:ec:c2:58:e5:66:b1:ee:
a3:d2:fb:dd:48:05:51:80:f0:51:fa:e8:32:fa:f9:
1e:eb:b4:ab:7b:e3:98:0b:cf:3f:bd:09:90:13:fe:
37:79:af:6a:da:7b:a9:33:96:61:b5:26:54:bf:c7:
c6:4f:de:82:a5:1c:63:c7:0e:35:cb:6f:ce:ce:88:
6d:c8:4f:52:13:77:a0:97:07:24:69:cd:68:3f:0e:
40:f8:77:d8:10:0b:51:5d:1e:9b:bc:4b:6f:81:28:
17:54:95:f0:61:97:73:ce:34:4b:f6:00:91:6e:a9:
83:b3:21:d9:52:ad:b7:75:12:a8:7a:5f:45:06:37:
10:b9:f3:6b:3a:47:0a:27:87:bb:ae:22:09:30:38:
6f:3e:49:75:4d:5b:f2:b9:e9:65:bf:b7:51:9d:e3:
df:60:4f:96:78:4c:1e:8a:fe:32:41:cb:42:7c:2f:
b5:b2:d5:a4:b9:99:c4:20:af:82:8d:40:9c:bb:5f:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:C7:9E:EC:80:89:E6:9B:9C:9B:0E:26:45:E7:5D:40:F3:E3:79
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/t3DHnuyAieabnJsOJkXnXUDz43k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:40::/32
Signature Algorithm: sha256WithRSAEncryption
57:0f:41:ec:8b:b8:f6:fb:f9:72:72:09:c9:de:03:06:1c:0c:
a9:72:33:73:92:fc:ee:14:98:62:06:be:9c:91:be:89:f9:3f:
57:28:a2:1f:43:22:2a:73:69:7c:97:d3:9f:83:8c:50:47:96:
87:14:38:d7:f9:03:a5:85:64:5b:d5:55:f5:de:45:a4:8d:7b:
35:5c:4f:ef:19:3c:2b:8c:5b:6f:7c:86:7f:9b:23:d7:d5:2f:
9f:5a:38:b6:79:c3:d1:9a:c1:33:22:41:a6:d6:0b:c8:25:4e:
05:08:8e:c5:41:cd:e7:b0:41:5f:17:c7:80:92:0e:ba:1a:40:
e1:85:2c:f9:08:55:2b:38:60:36:45:6c:5c:46:f9:a2:ac:84:
e0:f3:5c:bc:c9:b9:8d:66:14:a3:af:f6:78:83:99:20:88:a1:
1b:06:7b:c6:3a:05:0e:cb:86:4d:d2:59:ba:4a:04:8b:78:6b:
d5:6f:24:48:2e:f6:1e:b4:f6:20:2b:e8:dc:2b:51:a2:cd:54:
f6:72:41:ce:9b:81:c4:46:c6:d4:3c:77:94:14:27:15:88:71:
04:10:35:78:5a:b5:e3:08:ec:04:cd:cb:26:c1:bb:05:63:24:
2a:15:bc:1e:b1:d5:f4:22:b2:9f:89:6b:99:e0:79:f9:d7:c8:
64:8e:af:64
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYbR8dhblY5vy1k8TmT/+/eGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky
NjJhY2YwHhcNMjMwMzExMTgzMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzcwYzc5ZWVjODA4OWU2OWI5YzliMGUyNjQ1ZTc1ZDQwZjNlMzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/UxQ/6KgY3IlMkaj0kAQOLBLKfO
y77SRfz9J2+3amvLp7xdfL+u2xJfx08YzqSQ0w4Qr6EAS+Gw2cBiASKv+Yk6r+zC
WOVmse6j0vvdSAVRgPBR+ugy+vke67Sre+OYC88/vQmQE/43ea9q2nupM5ZhtSZU
v8fGT96CpRxjxw41y2/OzohtyE9SE3eglwckac1oPw5A+HfYEAtRXR6bvEtvgSgX
VJXwYZdzzjRL9gCRbqmDsyHZUq23dRKoel9FBjcQufNrOkcKJ4e7riIJMDhvPkl1
TVvyuellv7dRnePfYE+WeEweiv4yQctCfC+1stWkuZnEIK+CjUCcu19K0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLdwx57sgInmm5ybDiZF511A8+N5MB8GA1UdIwQY
MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt
OGVjMDYwNGU2OTI5LzEvdDNESG51eUFpZWFibkpzT0prWG5YVUR6NDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5
LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAVw9B7Iu49vv5cnIJyd4DBhwMqXIzc5L87hSYYga+
nJG+ifk/VyiiH0MiKnNpfJfTn4OMUEeWhxQ41/kDpYVkW9VV9d5FpI17NVxP7xk8
K4xbb3yGf5sj19Uvn1o4tnnD0ZrBMyJBptYLyCVOBQiOxUHN57BBXxfHgJIOuhpA
4YUs+QhVKzhgNkVsXEb5oqyE4PNcvMm5jWYUo6/2eIOZIIihGwZ7xjoFDsuGTdJZ
ukoEi3hr1W8kSC72HrT2ICvo3CtRos1U9nJBzpuBxEbG1Dx3lBQnFYhxBBA1eFq1
4wjsBM3LJsG7BWMkKhW8HrHV9CKyn4lrmeB5+dfIZI6vZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-fra.rpki-client.org