Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_-FEuNDCbFYPKTjXB0xfG8Qe1qg.roa
File: _-FEuNDCbFYPKTjXB0xfG8Qe1qg.roa (raw, json)
Hash identifier: jV6qS7qd+bM6ZTva0s9W+pCq7GIq5XxzI3BnKbTQVhk=
Subject key identifier: FF:E1:44:B8:D0:C2:6C:56:0F:29:38:D7:07:4C:5F:1B:C4:1E:D6:A8
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01887CFEC821C166EA2264128288710C41E1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_-FEuNDCbFYPKTjXB0xfG8Qe1qg.roa
Signing time: Fri 02 Jun 2023 16:44:12 +0000
ROA not before: Fri 02 Jun 2023 16:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203
IP address blocks: 2a03:5000:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Jun 2023 16:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:fe:c8:21:c1:66:ea:22:64:12:82:88:71:0c:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jun 2 16:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe144b8d0c26c560f2938d7074c5f1bc41ed6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:6d:6a:6d:5b:66:7d:81:7b:fd:f2:1e:81:
3b:28:ba:18:70:ae:8c:cb:cd:e6:4b:34:76:b9:a1:
27:d8:3b:66:7b:ec:50:d0:d4:2c:cb:c0:25:c5:13:
28:0d:18:85:00:1d:3a:f2:ac:8d:43:6a:49:aa:51:
27:9d:e6:16:67:1c:85:b0:96:5b:df:18:7f:01:55:
32:31:18:b0:da:39:33:9f:d9:14:88:57:6e:8a:97:
ab:2a:87:f8:30:4b:92:b1:20:97:c8:49:12:ca:cf:
5f:66:61:0f:62:33:41:71:58:12:b6:ff:05:5e:ca:
99:db:b9:eb:5f:22:6e:48:f3:61:bc:cc:94:70:75:
18:ce:47:ac:5e:66:a0:6b:08:76:dc:29:1d:c5:25:
06:34:27:f1:69:a0:80:79:2c:2a:0e:94:0b:88:d2:
4b:ef:dc:d4:b0:28:d1:ff:ac:c6:56:93:1a:e5:ed:
37:a9:f6:50:e2:58:13:61:68:5a:80:ba:c8:f1:cf:
4b:d7:00:37:3c:d1:2b:8b:25:db:d5:f2:f0:55:4e:
65:4c:77:7d:59:7c:60:e0:ce:c4:07:59:f0:d0:9f:
fc:31:9f:5a:aa:e9:91:e1:79:d0:0a:89:c4:18:6f:
72:c3:2f:72:79:af:5c:31:46:8d:e2:5f:12:12:90:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:44:B8:D0:C2:6C:56:0F:29:38:D7:07:4C:5F:1B:C4:1E:D6:A8
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/_-FEuNDCbFYPKTjXB0xfG8Qe1qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:21::/48
Signature Algorithm: sha256WithRSAEncryption
ab:de:54:e2:1c:43:1d:6c:f5:d8:49:55:3b:6f:98:d4:6c:a8:
16:ea:38:67:19:22:47:cc:63:0a:40:53:b6:95:8e:9f:80:2b:
48:11:98:88:61:61:01:ed:9e:db:33:1c:de:a0:7e:d7:a8:f5:
a9:e6:49:74:4b:08:85:ca:e6:38:4c:21:0b:cc:d6:fb:ba:5b:
46:6d:b6:53:f6:28:f6:1a:6b:b3:d8:11:bc:55:07:e8:83:c7:
76:da:64:26:3b:e0:89:ac:a1:94:e6:a1:72:ec:e8:73:45:35:
78:b2:52:ac:d3:78:07:e9:9a:78:6f:fa:16:0f:8c:33:20:48:
5b:ee:aa:40:13:52:4a:22:f4:62:98:d3:e5:2e:8a:47:3d:e9:
f8:55:26:a8:86:a6:4f:aa:b0:8f:5f:08:5a:25:95:64:f0:87:
61:19:28:7e:1c:59:f9:db:45:9a:74:0e:35:69:42:07:4f:ca:
c8:7b:85:c6:b4:14:d9:0a:43:7b:95:f9:ff:75:b9:0a:55:46:
fc:a8:27:90:ff:ce:f7:43:e1:84:71:cb:ab:83:34:0b:bf:9d:
7a:d6:e2:e1:55:55:a2:2d:fa:e9:39:17:11:b0:7c:1e:70:c9:
c8:ee:6f:34:8a:e6:89:8b:6d:74:36:9f:c8:78:28:af:4e:5b:
f8:ac:6f:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYh8/sghwWbqImQSgohxDEHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjMwNjAyMTY0NDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmUxNDRiOGQwYzI2YzU2MGYyOTM4ZDcwNzRjNWYxYmM0MWVkNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBptam1bZn2Be/3yHoE7KLoYcK6M
y83mSzR2uaEn2Dtme+xQ0NQsy8AlxRMoDRiFAB068qyNQ2pJqlEnneYWZxyFsJZb
3xh/AVUyMRiw2jkzn9kUiFduiperKof4MEuSsSCXyEkSys9fZmEPYjNBcVgStv8F
XsqZ27nrXyJuSPNhvMyUcHUYzkesXmagawh23CkdxSUGNCfxaaCAeSwqDpQLiNJL
79zUsCjR/6zGVpMa5e03qfZQ4lgTYWhagLrI8c9L1wA3PNEriyXb1fLwVU5lTHd9
WXxg4M7EB1nw0J/8MZ9aqumR4XnQConEGG9ywy9yea9cMUaN4l8SEpDRWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP/hRLjQwmxWDyk41wdMXxvEHtaoMB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvXy1GRXVORENiRllQS1RqWEIweGZHOFFlMXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNQAAAh
MA0GCSqGSIb3DQEBCwUAA4IBAQCr3lTiHEMdbPXYSVU7b5jUbKgW6jhnGSJHzGMK
QFO2lY6fgCtIEZiIYWEB7Z7bMxzeoH7XqPWp5kl0SwiFyuY4TCELzNb7ultGbbZT
9ij2Gmuz2BG8VQfog8d22mQmO+CJrKGU5qFy7OhzRTV4slKs03gH6Zp4b/oWD4wz
IEhb7qpAE1JKIvRimNPlLopHPen4VSaohqZPqrCPXwhaJZVk8IdhGSh+HFn520Wa
dA41aUIHT8rIe4XGtBTZCkN7lfn/dbkKVUb8qCeQ/873Q+GEccurgzQLv5161uLh
VVWiLfrpORcRsHwecMnI7m80iuaJi210Np/IeCivTlv4rG8k
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org