Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/vPyQfsM_A0IKQyboWAOrnwLqmXU.roa
File: vPyQfsM_A0IKQyboWAOrnwLqmXU.roa (raw, json)
Hash identifier: 6d3V9m0qoqBBM5LzFLgabR772Ik1l4ROg9rBJWcff6M=
Subject key identifier: BC:FC:90:7E:C3:3F:03:42:0A:43:26:E8:58:03:AB:9F:02:EA:99:75
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 018BCD1E9CC20ABF553AD05AC69F8F63786C
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/vPyQfsM_A0IKQyboWAOrnwLqmXU.roa
Signing time: Tue 14 Nov 2023 09:16:57 +0000
ROA not before: Tue 14 Nov 2023 09:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25117
IP address blocks: 2a04:cec0:1380::/41 maxlen: 48
2a04:cec0:1300::/41 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:1e:9c:c2:0a:bf:55:3a:d0:5a:c6:9f:8f:63:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Nov 14 09:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcfc907ec33f03420a4326e85803ab9f02ea9975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:10:76:2f:5a:95:78:6c:5b:e5:fb:9d:40:
be:94:92:46:09:89:8f:cc:db:ea:a6:a0:21:f8:b7:
5e:df:00:a6:8e:e5:00:29:18:47:d9:9f:09:82:e0:
76:c3:6a:af:d7:26:e8:90:da:64:5b:9b:b7:d8:43:
bf:79:d9:10:a2:f3:dc:f1:70:03:ee:0e:3b:27:e3:
75:4d:a3:99:20:f6:50:6c:34:7c:ef:86:ef:47:84:
15:91:98:9b:1a:14:ef:a2:d8:cf:55:4c:7c:53:0e:
ea:c5:db:4d:b6:67:82:18:d4:10:92:0a:b8:af:0f:
05:0e:78:56:f3:66:9c:50:dd:2b:20:32:05:63:3a:
eb:42:fa:11:6c:6f:eb:86:0d:6e:df:fe:f9:b7:fa:
d5:b3:c1:db:d0:06:f7:02:6b:44:04:51:c8:31:2c:
6b:4c:ee:32:e2:57:d6:3c:0b:a5:9b:b7:ec:d2:90:
2c:0c:be:75:08:6b:4a:3a:ca:34:02:c0:8f:b4:fb:
da:ad:4d:11:d0:d4:f1:b9:67:2f:a1:dd:df:e6:36:
79:fd:05:e0:9a:83:1b:dd:33:c8:88:07:04:a1:e3:
02:a2:77:bd:ef:aa:41:63:7c:f3:85:07:f0:05:94:
63:1c:6a:ec:4b:57:6c:e1:2d:e8:bf:e6:55:dd:fe:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:90:7E:C3:3F:03:42:0A:43:26:E8:58:03:AB:9F:02:EA:99:75
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/vPyQfsM_A0IKQyboWAOrnwLqmXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:cec0:1300::/40
Signature Algorithm: sha256WithRSAEncryption
73:b1:b0:aa:6e:33:11:16:9e:1d:b4:22:5d:cf:27:b3:43:bc:
b9:d0:29:9a:bd:88:85:a5:bf:65:c4:d1:92:67:47:c6:dd:06:
af:70:e3:b6:d3:fa:c5:cd:56:9c:05:8c:a2:31:97:de:c9:b8:
7b:6f:8f:d1:6e:d8:1b:4a:b3:d7:3f:a6:ac:1f:ca:46:5d:10:
2f:a0:e4:00:1b:bb:77:af:de:02:8b:e4:02:a5:b8:4b:40:e3:
44:5e:ef:78:81:aa:b9:01:f6:40:43:af:e6:d3:70:1e:39:7e:
cf:69:d3:7f:ec:47:16:94:53:ec:56:bb:20:af:18:81:95:35:
6b:96:2d:3b:85:08:6e:4a:a0:c3:e3:5d:12:1b:10:4e:3e:69:
bb:c6:45:6a:19:9f:ec:77:4e:38:58:d7:4d:05:b4:af:68:35:
76:61:d7:b9:52:a6:01:3f:30:0d:6f:ef:22:e4:4a:eb:4a:14:
9b:90:68:78:5e:4a:7a:6c:51:53:45:b8:7d:ce:aa:3f:b3:b3:
91:d6:31:55:c6:24:78:13:b0:7e:80:d4:4c:c2:08:57:20:bc:
86:83:e2:4b:db:91:1a:2d:ac:75:42:a3:79:63:9f:5f:b9:a8:
b2:d5:aa:fb:93:24:3a:a0:02:cb:0b:5b:0b:47:6a:61:a7:eb:
a0:16:42:14
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYvNHpzCCr9VOtBaxp+PY3hsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjMxMTE0MDkxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZjOTA3ZWMzM2YwMzQyMGE0MzI2ZTg1ODAzYWI5ZjAyZWE5OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z8Qdi9alXhsW+X7nUC+lJJGCYmP
zNvqpqAh+Lde3wCmjuUAKRhH2Z8JguB2w2qv1ybokNpkW5u32EO/edkQovPc8XAD
7g47J+N1TaOZIPZQbDR874bvR4QVkZibGhTvotjPVUx8Uw7qxdtNtmeCGNQQkgq4
rw8FDnhW82acUN0rIDIFYzrrQvoRbG/rhg1u3/75t/rVs8Hb0Ab3AmtEBFHIMSxr
TO4y4lfWPAulm7fs0pAsDL51CGtKOso0AsCPtPvarU0R0NTxuWcvod3f5jZ5/QXg
moMb3TPIiAcEoeMCone976pBY3zzhQfwBZRjHGrsS1ds4S3ov+ZV3f4mXwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLz8kH7DPwNCCkMm6FgDq58C6pl1MB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEvdlB5UWZzTV9BMElLUXlib1dBT3Jud0xxbVhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgTOwBMw
DQYJKoZIhvcNAQELBQADggEBAHOxsKpuMxEWnh20Il3PJ7NDvLnQKZq9iIWlv2XE
0ZJnR8bdBq9w47bT+sXNVpwFjKIxl97JuHtvj9Fu2BtKs9c/pqwfykZdEC+g5AAb
u3ev3gKL5AKluEtA40Re73iBqrkB9kBDr+bTcB45fs9p03/sRxaUU+xWuyCvGIGV
NWuWLTuFCG5KoMPjXRIbEE4+abvGRWoZn+x3TjhY100FtK9oNXZh17lSpgE/MA1v
7yLkSutKFJuQaHheSnpsUVNFuH3Oqj+zs5HWMVXGJHgTsH6A1EzCCFcgvIaD4kvb
kRotrHVCo3ljn1+5qLLVqvuTJDqgAssLWwtHamGn66AWQhQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:39 2024 by rpki-client on console-fra.rpki-client.org