Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s9Tk3IIifbgXqG6iLxLNVoJv0WI.roa
File: s9Tk3IIifbgXqG6iLxLNVoJv0WI.roa (raw, json)
Hash identifier: c6dxHJiw0Vnf3H4zMlSvxPHjA4a79ihjrf4ZigZaC/o=
Subject key identifier: B3:D4:E4:DC:82:22:7D:B8:17:A8:6E:A2:2F:12:CD:56:82:6F:D1:62
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018B68023141E64232041ACFD599C13C9057
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s9Tk3IIifbgXqG6iLxLNVoJv0WI.roa
Signing time: Wed 25 Oct 2023 18:04:16 +0000
ROA not before: Wed 25 Oct 2023 18:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205884
IP address blocks: 2a09:59c0::/29 maxlen: 29
2a0e:2800::/29 maxlen: 29
2a0e:b00::/29 maxlen: 29
2a09:57c0::/29 maxlen: 29
2a09:5bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:02:31:41:e6:42:32:04:1a:cf:d5:99:c1:3c:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 25 18:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d4e4dc82227db817a86ea22f12cd56826fd162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:2b:b5:20:65:9a:f6:f7:81:92:a3:d0:ed:
01:15:13:69:f7:ec:24:46:49:d7:d9:30:e9:34:ba:
66:06:9e:23:79:5d:48:3e:de:5e:93:46:36:96:ad:
c1:af:be:ff:f0:a6:37:d2:2d:ba:91:20:b8:61:7e:
ba:f2:9d:55:a8:ef:4f:a7:37:b1:37:b4:8a:f9:7f:
a0:c3:67:53:3a:38:f9:70:97:c6:7d:b3:27:05:aa:
e9:f4:b4:43:89:53:6c:2d:fe:b6:61:da:a3:a9:3f:
9c:e4:0c:fa:50:42:b1:20:f9:11:cf:84:18:d7:0f:
58:b3:b6:2c:e8:d8:2a:12:6d:44:55:12:64:f4:20:
8d:f8:da:88:d7:23:76:08:44:f5:8a:17:d8:c1:7f:
3e:79:6f:21:e9:bd:ad:64:b5:94:85:02:4d:07:6c:
62:00:7d:68:ff:56:ff:8d:da:f1:13:17:5d:12:8e:
94:95:b8:1c:9f:37:4b:d7:d1:ea:cc:d3:2b:57:02:
6b:6f:2c:e4:96:a7:ed:06:3f:9b:67:01:91:cb:39:
5f:07:7d:bd:5b:2c:1a:1a:d4:c1:58:c9:2e:bc:88:
f0:34:16:0c:76:6a:f1:26:00:9d:52:19:00:db:2b:
8e:e0:5a:ed:8f:a8:25:1b:af:d0:47:76:e9:0b:fd:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:E4:DC:82:22:7D:B8:17:A8:6E:A2:2F:12:CD:56:82:6F:D1:62
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/s9Tk3IIifbgXqG6iLxLNVoJv0WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:57c0::/29
2a09:59c0::/29
2a09:5bc0::/29
2a0e:b00::/29
2a0e:2800::/29
Signature Algorithm: sha256WithRSAEncryption
6e:6f:37:76:9e:07:17:7d:48:7b:1b:fd:0c:1a:7f:f1:ba:9f:
57:bc:bb:07:a7:3c:b9:02:9d:e9:9c:8b:3d:1d:d4:ff:53:4c:
0a:df:2b:7b:31:2c:62:6a:9d:7f:45:49:b8:c3:21:11:0b:5a:
ff:bd:85:a8:cf:94:cb:3a:48:56:5b:f0:8e:61:83:72:ae:97:
68:88:4d:af:e3:76:4f:e6:4a:63:8f:be:49:d3:88:26:b6:6d:
23:f5:d8:a2:84:53:14:a1:1b:09:bc:4a:ce:47:ee:7a:29:76:
09:83:48:da:2f:df:9c:d3:b9:c1:9d:5b:cf:b7:4a:98:a4:10:
1a:ca:df:67:fb:ff:6d:a5:1a:bb:b3:d1:c7:d8:0f:de:76:aa:
30:06:3f:0c:fd:c7:4f:83:c3:5b:15:c0:c5:70:90:36:98:38:
18:d5:a8:90:e3:a2:f0:6c:8d:6c:d4:e6:04:7d:12:a1:14:28:
03:cf:3a:10:c9:75:c2:78:c5:41:54:b8:09:0a:ac:e1:a4:9a:
4e:13:39:09:00:f6:69:66:b1:a1:17:2e:39:83:14:44:46:a0:
23:c5:94:fd:c0:5c:36:f9:5c:b4:14:f5:57:fd:22:c4:b3:5b:
a6:8c:84:cf:12:85:1f:0b:6f:db:16:2e:7d:9d:3b:0b:f8:23:
37:5d:e9:d2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYtoAjFB5kIyBBrP1ZnBPJBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMDI1MTgwNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Q0ZTRkYzgyMjI3ZGI4MTdhODZlYTIyZjEyY2Q1NjgyNmZkMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrArtSBlmvb3gZKj0O0BFRNp9+wk
RknX2TDpNLpmBp4jeV1IPt5ek0Y2lq3Br77/8KY30i26kSC4YX668p1VqO9Ppzex
N7SK+X+gw2dTOjj5cJfGfbMnBarp9LRDiVNsLf62YdqjqT+c5Az6UEKxIPkRz4QY
1w9Ys7Ys6NgqEm1EVRJk9CCN+NqI1yN2CET1ihfYwX8+eW8h6b2tZLWUhQJNB2xi
AH1o/1b/jdrxExddEo6UlbgcnzdL19HqzNMrVwJrbyzklqftBj+bZwGRyzlfB329
WywaGtTBWMkuvIjwNBYMdmrxJgCdUhkA2yuO4Frtj6glG6/QR3bpC/04WQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFLPU5NyCIn24F6huoi8SzVaCb9FiMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvczlUazNJSWlmYmdYcUc2aUx4TE5Wb0p2MFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKglXwAMF
AyoJWcADBQMqCVvAAwUDKg4LAAMFAyoOKAAwDQYJKoZIhvcNAQELBQADggEBAG5v
N3aeBxd9SHsb/Qwaf/G6n1e8uwenPLkCnemciz0d1P9TTArfK3sxLGJqnX9FSbjD
IRELWv+9hajPlMs6SFZb8I5hg3Kul2iITa/jdk/mSmOPvknTiCa2bSP12KKEUxSh
Gwm8Ss5H7nopdgmDSNov35zTucGdW8+3SpikEBrK32f7/22lGruz0cfYD952qjAG
Pwz9x0+Dw1sVwMVwkDaYOBjVqJDjovBsjWzU5gR9EqEUKAPPOhDJdcJ4xUFUuAkK
rOGkmk4TOQkA9mlmsaEXLjmDFERGoCPFlP3AXDb5XLQU9Vf9IsSzW6aMhM8ShR8L
b9sWLn2dOwv4Izdd6dI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org