Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fgY5N5sDSDUvqCbcIhzW3oBTLVg.roa
File: fgY5N5sDSDUvqCbcIhzW3oBTLVg.roa (raw, json)
Hash identifier: osWEt/sj86simH3HpRbLmEVi1NQbDUn2jgEG2JXAlXo=
Subject key identifier: 7E:06:39:37:9B:03:48:35:2F:A8:26:DC:22:1C:D6:DE:80:53:2D:58
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 018C59D9AAB6FCE9B123B04C45953B090A50
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fgY5N5sDSDUvqCbcIhzW3oBTLVg.roa
Signing time: Mon 11 Dec 2023 17:08:06 +0000
ROA not before: Mon 11 Dec 2023 17:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212685
IP address blocks: 2a12:3e80:401::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:d9:aa:b6:fc:e9:b1:23:b0:4c:45:95:3b:09:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Dec 11 17:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0639379b0348352fa826dc221cd6de80532d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:d8:28:cd:df:94:38:b0:3a:00:21:9f:1c:
58:7f:b2:9c:0b:87:b9:dd:8c:88:83:18:0e:10:58:
5c:81:53:3c:00:df:76:08:a3:b5:be:dc:54:0a:bc:
5e:0b:5d:79:92:cd:be:44:f4:7f:42:d1:0a:1b:02:
0c:d8:0f:5a:65:77:6d:59:fc:c9:4b:97:e9:b3:c4:
36:12:21:65:43:91:31:37:13:b6:56:88:00:b6:90:
ab:30:21:e3:3b:9b:3c:e6:14:2e:3c:fb:bf:43:ba:
50:3e:3d:5a:54:43:71:74:83:e1:95:5b:7d:8e:d5:
0e:47:70:55:58:44:24:b9:34:19:ef:23:cd:cc:21:
8f:88:83:75:f6:00:05:02:de:81:c4:14:f1:9f:28:
1d:70:a6:a1:d1:ea:5c:b9:67:51:5b:19:46:81:e5:
d2:ac:84:40:ad:45:9f:ef:9f:46:e8:bd:9a:75:21:
9b:44:54:d4:62:d4:23:0c:3d:7b:af:97:8a:35:75:
e6:39:7c:09:99:53:48:8f:2b:5d:c5:46:bc:c0:5a:
35:70:88:1b:b7:91:b4:4a:05:d3:08:69:fc:89:eb:
61:f5:48:fa:d2:9b:e5:1c:cc:d1:ca:2a:48:50:6a:
ef:91:09:b5:1a:3c:45:6e:cd:45:46:70:b6:31:f9:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:39:37:9B:03:48:35:2F:A8:26:DC:22:1C:D6:DE:80:53:2D:58
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fgY5N5sDSDUvqCbcIhzW3oBTLVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3e80:401::/48
Signature Algorithm: sha256WithRSAEncryption
43:1c:7c:4d:24:be:5d:8e:b1:66:62:81:79:46:ab:d8:36:c7:
62:3f:fd:16:a3:2d:2b:d5:56:fe:14:90:c9:3c:9d:07:9c:65:
29:3b:e7:47:be:c8:58:37:07:2e:6f:c8:ba:dc:a9:cd:36:41:
81:bf:40:ed:c9:05:b1:f4:f4:ae:aa:a5:9a:be:a5:c1:a5:1f:
d6:4d:07:77:2d:c7:47:b3:fb:2e:26:6a:9e:f1:21:f1:b1:c7:
ab:a1:25:45:ba:5c:c5:3b:e0:e0:82:c9:8e:e1:ac:d3:e9:5a:
e2:36:11:21:79:29:57:e3:1b:1b:a3:c6:fc:0b:74:1e:6f:0e:
57:d8:f5:6f:93:91:85:2b:2f:f1:34:7d:c8:d5:23:c9:f7:25:
d8:79:2e:09:6f:ac:ce:af:c9:05:fb:59:32:ab:b9:34:24:86:
a2:4c:13:e6:8d:a8:93:27:77:08:fe:f8:df:a1:49:c4:42:81:
1b:67:5f:75:d6:90:c0:05:73:50:30:70:b8:78:14:e3:6b:94:
ab:be:5d:f0:64:14:7c:4e:8e:c1:a2:63:33:c8:f0:08:3d:fb:
7b:5e:8b:9c:d9:89:8d:f5:fa:65:c9:94:38:1f:b8:f0:ad:b4:
c8:e6:92:1d:52:c3:b8:e5:d5:83:a1:75:69:c2:d5:28:31:a0:
dd:43:c7:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYxZ2aq2/OmxI7BMRZU7CQpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjMxMjExMTcwODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTA2MzkzNzliMDM0ODM1MmZhODI2ZGMyMjFjZDZkZTgwNTMyZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEnYKM3flDiwOgAhnxxYf7KcC4e5
3YyIgxgOEFhcgVM8AN92CKO1vtxUCrxeC115ks2+RPR/QtEKGwIM2A9aZXdtWfzJ
S5fps8Q2EiFlQ5ExNxO2VogAtpCrMCHjO5s85hQuPPu/Q7pQPj1aVENxdIPhlVt9
jtUOR3BVWEQkuTQZ7yPNzCGPiIN19gAFAt6BxBTxnygdcKah0epcuWdRWxlGgeXS
rIRArUWf759G6L2adSGbRFTUYtQjDD17r5eKNXXmOXwJmVNIjytdxUa8wFo1cIgb
t5G0SgXTCGn8ieth9Uj60pvlHMzRyipIUGrvkQm1GjxFbs1FRnC2Mfl8QQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH4GOTebA0g1L6gm3CIc1t6AUy1YMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvZmdZNU41c0RTRFV2cUNiY0loelczb0JUTFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhI+gAQB
MA0GCSqGSIb3DQEBCwUAA4IBAQBDHHxNJL5djrFmYoF5RqvYNsdiP/0Woy0r1Vb+
FJDJPJ0HnGUpO+dHvshYNwcub8i63KnNNkGBv0DtyQWx9PSuqqWavqXBpR/WTQd3
LcdHs/suJmqe8SHxsceroSVFulzFO+DggsmO4azT6VriNhEheSlX4xsbo8b8C3Qe
bw5X2PVvk5GFKy/xNH3I1SPJ9yXYeS4Jb6zOr8kF+1kyq7k0JIaiTBPmjaiTJ3cI
/vjfoUnEQoEbZ1911pDABXNQMHC4eBTja5Srvl3wZBR8To7BomMzyPAIPft7Xouc
2YmN9fplyZQ4H7jwrbTI5pIdUsO45dWDoXVpwtUoMaDdQ8fe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org