Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/iLvp7axI-WcF5imYWlAgjOfZSPQ.roa
File: iLvp7axI-WcF5imYWlAgjOfZSPQ.roa (raw, json)
Hash identifier: OC/OLCmSHzSQwNYaf7lDurqvajrLLKDIElVwp5jcVh4=
Subject key identifier: 88:BB:E9:ED:AC:48:F9:67:05:E6:29:98:5A:50:20:8C:E7:D9:48:F4
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 018570F0A6B1A7D89D2EB459F12635072D33
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/iLvp7axI-WcF5imYWlAgjOfZSPQ.roa
Signing time: Mon 02 Jan 2023 05:24:57 +0000
ROA not before: Mon 02 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60236
IP address blocks: 2a0f:2a00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a6:b1:a7:d8:9d:2e:b4:59:f1:26:35:07:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jan 2 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88bbe9edac48f96705e629985a50208ce7d948f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:7c:0c:24:18:20:60:19:97:83:24:5c:de:
dc:ec:d0:dc:c6:ea:8f:6b:3b:89:63:41:2e:81:66:
e5:11:9f:73:ff:13:ed:5c:88:65:30:71:dd:3d:fd:
38:a8:e4:d1:f1:b6:3d:f8:0b:39:3f:2d:07:fa:0a:
b7:9f:29:bb:a1:52:f2:78:8d:e6:08:95:76:24:88:
15:6f:bb:f9:98:a3:72:c3:91:6f:e5:ff:98:e4:d4:
bf:83:8c:4f:22:db:33:cd:33:3b:ac:99:87:8e:0f:
eb:41:3b:ba:2b:7e:5d:62:b2:ba:59:62:84:a4:6b:
42:16:8f:98:37:95:d6:22:bd:cc:34:41:70:42:63:
f8:16:51:9e:d4:47:61:2c:ed:76:87:b5:90:9d:32:
b8:79:46:e4:bd:45:51:69:55:c0:f7:3c:35:65:76:
b3:61:1a:61:55:47:67:8d:bf:c2:af:9c:05:b8:14:
fc:db:a6:01:6d:75:99:43:dd:3e:78:0f:c5:70:ad:
54:67:1a:f2:55:73:13:f1:c5:a9:37:07:a6:fd:a6:
1c:8d:34:50:92:b7:55:b5:7a:e9:87:9a:b2:92:93:
0e:c7:fa:38:3a:e9:19:18:4d:ae:6d:bb:55:17:b6:
3e:11:91:a5:f1:a6:0c:b4:9b:c3:b7:3b:70:71:4a:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:E9:ED:AC:48:F9:67:05:E6:29:98:5A:50:20:8C:E7:D9:48:F4
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/iLvp7axI-WcF5imYWlAgjOfZSPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2a00::/48
Signature Algorithm: sha256WithRSAEncryption
94:5b:c6:21:80:a6:d4:78:62:fd:1b:74:16:8d:8b:d5:16:fc:
2e:51:15:90:56:b0:d0:63:a1:aa:bf:16:a8:55:f2:74:07:90:
9f:aa:6c:0d:dd:5a:ca:3f:cd:a4:9b:06:a5:8a:1c:33:20:38:
42:a8:05:64:64:96:b5:5e:c5:5b:76:f9:a1:28:e7:28:8e:f8:
e2:e7:80:e7:52:d5:02:da:6a:4b:53:e0:d4:a0:d1:a9:8f:1b:
f3:8b:d4:c1:ac:1e:bd:ff:63:85:f9:b3:ab:5b:82:df:87:fc:
8e:73:a2:a9:67:63:bc:4a:e5:30:a0:a9:d9:c7:ec:fb:3c:7f:
28:77:39:3c:b5:5e:7e:3f:ba:67:2f:8c:66:17:ea:7b:36:65:
8d:c7:b7:4a:c4:26:4a:ad:c8:2c:b3:32:e5:42:46:bc:f6:28:
f4:2b:e6:f6:24:bf:d5:51:30:ca:5a:b4:d2:11:89:e2:a2:90:
65:ff:bc:a8:51:97:f0:a1:a3:42:44:f9:7f:78:bf:03:eb:6a:
b0:2f:d1:54:29:19:3d:63:55:be:5f:86:d1:c3:f4:b1:53:eb:
05:ec:96:e6:5f:e1:80:b2:3c:c8:90:ae:2e:43:20:1c:10:74:
36:65:9a:19:d4:7e:07:a2:ec:83:91:79:5e:34:8f:7c:56:d6:
f7:c5:93:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw8Kaxp9idLrRZ8SY1By0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj
NjIwYWUwHhcNMjMwMTAyMDUyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGJiZTllZGFjNDhmOTY3MDVlNjI5OTg1YTUwMjA4Y2U3ZDk0OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe18DCQYIGAZl4MkXN7c7NDcxuqP
azuJY0EugWblEZ9z/xPtXIhlMHHdPf04qOTR8bY9+As5Py0H+gq3nym7oVLyeI3m
CJV2JIgVb7v5mKNyw5Fv5f+Y5NS/g4xPItszzTM7rJmHjg/rQTu6K35dYrK6WWKE
pGtCFo+YN5XWIr3MNEFwQmP4FlGe1EdhLO12h7WQnTK4eUbkvUVRaVXA9zw1ZXaz
YRphVUdnjb/Cr5wFuBT826YBbXWZQ90+eA/FcK1UZxryVXMT8cWpNwem/aYcjTRQ
krdVtXrph5qykpMOx/o4OukZGE2ubbtVF7Y+EZGl8aYMtJvDtztwcUqcZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIi76e2sSPlnBeYpmFpQIIzn2Uj0MB8GA1UdIwQY
MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt
NjI1M2FkMDhmODU4LzEvaUx2cDdheEktV2NGNWltWVdsQWdqT2ZaU1BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4
LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8qAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCUW8YhgKbUeGL9G3QWjYvVFvwuURWQVrDQY6Gq
vxaoVfJ0B5CfqmwN3VrKP82kmwalihwzIDhCqAVkZJa1XsVbdvmhKOcojvji54Dn
UtUC2mpLU+DUoNGpjxvzi9TBrB69/2OF+bOrW4Lfh/yOc6KpZ2O8SuUwoKnZx+z7
PH8odzk8tV5+P7pnL4xmF+p7NmWNx7dKxCZKrcgsszLlQka89ij0K+b2JL/VUTDK
WrTSEYniopBl/7yoUZfwoaNCRPl/eL8D62qwL9FUKRk9Y1W+X4bRw/SxU+sF7Jbm
X+GAsjzIkK4uQyAcEHQ2ZZoZ1H4HouyDkXleNI98Vtb3xZOx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:33 2024 by rpki-client on console-fra.rpki-client.org