Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/_MJ1pg2dJfw5H34N1wpFOawARnQ.roa
File: _MJ1pg2dJfw5H34N1wpFOawARnQ.roa (raw, json)
Hash identifier: eRkKYRbPYhddFwDTt8S8C2idL1IV5djbuTmVRSvHqdw=
Subject key identifier: FC:C2:75:A6:0D:9D:25:FC:39:1F:7E:0D:D7:0A:45:39:AC:00:46:74
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 018B2901F388787795576E0DFCCE27C637DD
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/_MJ1pg2dJfw5H34N1wpFOawARnQ.roa
Signing time: Fri 13 Oct 2023 12:27:55 +0000
ROA not before: Fri 13 Oct 2023 12:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49542
IP address blocks: 2a11:644::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:01:f3:88:78:77:95:57:6e:0d:fc:ce:27:c6:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Oct 13 12:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcc275a60d9d25fc391f7e0dd70a4539ac004674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:04:60:57:d0:db:72:18:8a:70:17:5b:f7:
12:73:d0:2b:08:3c:cd:71:e7:b2:5d:b6:44:4b:e0:
dc:31:84:e6:fa:a8:8f:f2:44:c8:d0:3e:a4:40:00:
9f:08:c6:3c:cd:36:3e:f6:16:25:e0:1f:29:5a:72:
b1:70:1b:2f:da:55:23:6c:b9:3f:78:6e:12:50:9c:
9f:6c:92:71:19:26:b2:a4:a8:0d:c1:65:5c:7d:c5:
9f:b3:0b:40:6c:28:c4:81:32:f0:32:d4:c6:0c:56:
2a:8f:71:a0:e0:ef:25:36:f2:b3:e2:78:d0:af:c8:
52:5b:51:8e:f5:d6:75:77:b2:a0:7b:6e:65:0f:42:
e2:40:2f:75:eb:5f:87:91:f0:b6:cb:22:a1:c2:84:
50:05:71:09:65:ad:e9:af:f8:bf:5a:68:a8:f3:f7:
aa:80:82:33:a8:fe:52:19:47:8f:8f:e1:f7:fc:dd:
28:58:5b:f7:e3:8b:06:14:1a:75:38:4e:9d:9c:26:
67:c7:b8:18:8a:cf:a7:73:04:19:63:00:de:78:ff:
74:92:e9:4b:1a:7d:7e:f8:4c:44:ba:aa:08:94:ca:
0a:bd:f6:54:a3:91:7c:f0:81:3a:42:67:c8:f9:97:
66:02:77:56:ac:cf:ef:11:77:b9:cc:97:aa:fa:5f:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:75:A6:0D:9D:25:FC:39:1F:7E:0D:D7:0A:45:39:AC:00:46:74
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/_MJ1pg2dJfw5H34N1wpFOawARnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:644::/32
Signature Algorithm: sha256WithRSAEncryption
2f:83:1a:c2:ac:c8:67:97:d7:55:a0:d7:42:3d:fd:39:18:23:
7e:7f:eb:72:eb:c5:4f:fb:ac:87:4b:82:59:8e:c7:86:fc:e8:
06:12:98:25:5b:95:97:b8:5f:b9:9b:2b:1b:9d:73:1a:cc:db:
41:d8:f6:8d:f4:f2:89:af:eb:32:c7:9d:13:93:dd:85:80:38:
50:04:17:07:e6:1c:48:e3:86:b7:ab:1c:17:cc:91:c3:13:a4:
18:ec:dd:55:15:e3:81:5c:2a:39:c3:1f:ad:03:1e:8e:e9:ac:
67:df:e6:50:2f:75:63:be:c9:d8:bc:cc:8f:0d:5c:8b:c1:02:
76:a9:e4:38:d6:fd:88:ed:fb:4d:6e:ea:11:28:a0:9c:9e:11:
f3:66:44:15:9f:40:1d:c3:d9:28:f0:a9:c9:0a:cc:69:e5:bf:
48:8a:77:d5:e9:81:37:3e:6b:b7:1f:57:b7:fc:05:3b:f3:0c:
c6:0c:29:16:5f:96:b0:2d:4e:e5:91:17:a5:bd:4e:5f:85:83:
e0:c1:fc:f2:32:ae:12:05:42:dc:a7:82:78:66:0a:69:2f:55:
c6:30:8e:3c:91:fa:df:b7:09:38:16:b3:a0:48:e7:13:1b:44:
c3:c9:b5:be:5f:80:0d:29:b1:3f:68:dd:75:54:1d:23:57:41:
d7:40:89:33
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYspAfOIeHeVV24N/M4nxjfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjMxMDEzMTIyNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2MyNzVhNjBkOWQyNWZjMzkxZjdlMGRkNzBhNDUzOWFjMDA0Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlkEYFfQ23IYinAXW/cSc9ArCDzN
ceeyXbZES+DcMYTm+qiP8kTI0D6kQACfCMY8zTY+9hYl4B8pWnKxcBsv2lUjbLk/
eG4SUJyfbJJxGSaypKgNwWVcfcWfswtAbCjEgTLwMtTGDFYqj3Gg4O8lNvKz4njQ
r8hSW1GO9dZ1d7Kge25lD0LiQC9161+HkfC2yyKhwoRQBXEJZa3pr/i/Wmio8/eq
gIIzqP5SGUePj+H3/N0oWFv344sGFBp1OE6dnCZnx7gYis+ncwQZYwDeeP90kulL
Gn1++ExEuqoIlMoKvfZUo5F88IE6QmfI+ZdmAndWrM/vEXe5zJeq+l8mtQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPzCdaYNnSX8OR9+DdcKRTmsAEZ0MB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvX01KMXBnMmRKZnc1SDM0TjF3cEZPYXdBUm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEGRDAN
BgkqhkiG9w0BAQsFAAOCAQEAL4MawqzIZ5fXVaDXQj39ORgjfn/rcuvFT/ush0uC
WY7HhvzoBhKYJVuVl7hfuZsrG51zGszbQdj2jfTyia/rMsedE5PdhYA4UAQXB+Yc
SOOGt6scF8yRwxOkGOzdVRXjgVwqOcMfrQMejumsZ9/mUC91Y77J2LzMjw1ci8EC
dqnkONb9iO37TW7qESignJ4R82ZEFZ9AHcPZKPCpyQrMaeW/SIp31emBNz5rtx9X
t/wFO/MMxgwpFl+WsC1O5ZEXpb1OX4WD4MH88jKuEgVC3KeCeGYKaS9VxjCOPJH6
37cJOBazoEjnExtEw8m1vl+ADSmxP2jddVQdI1dB10CJMw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org