Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/BFc3_V7rRXh0djPzrTvgyiW1S8w.roa
File: BFc3_V7rRXh0djPzrTvgyiW1S8w.roa (raw, json)
Hash identifier: wCp0UJjD9g15TXGB8G92G9VZCLnbMbqBuc01FMSxNKM=
Subject key identifier: 04:57:37:FD:5E:EB:45:78:74:76:33:F3:AD:3B:E0:CA:25:B5:4B:CC
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 01877B2EDD7DFA6215AC4C04308EAAF68F2E
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/BFc3_V7rRXh0djPzrTvgyiW1S8w.roa
Signing time: Thu 13 Apr 2023 15:14:41 +0000
ROA not before: Thu 13 Apr 2023 15:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199471
IP address blocks: 2a13:fc80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Apr 2023 15:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:2e:dd:7d:fa:62:15:ac:4c:04:30:8e:aa:f6:8f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Apr 13 15:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=045737fd5eeb4578747633f3ad3be0ca25b54bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:f1:2c:41:c7:76:ca:b5:01:52:0a:28:7b:
7d:90:30:73:f2:5d:4b:5b:10:ef:74:b9:de:90:a8:
b5:ee:11:f1:e1:db:a8:e9:4a:da:33:12:27:f3:24:
96:b8:b8:0d:0d:d0:a6:66:17:97:0d:5e:25:6c:e8:
03:4e:de:b6:d6:41:80:69:27:96:3e:10:3f:bd:3c:
f7:01:64:de:ef:68:26:36:c8:96:46:e3:8a:cc:bb:
78:da:5f:54:91:00:14:4e:c7:04:7c:5c:6b:08:08:
28:13:5e:af:fb:a7:ec:8b:de:e3:a5:50:37:04:6e:
ee:ef:51:c9:7f:b3:a1:88:42:84:f2:8a:10:b2:86:
9c:af:e8:9e:a6:aa:a8:21:d9:a4:4a:ad:bd:b0:a7:
1b:29:1b:04:c4:dd:06:4b:e0:5e:80:4d:f6:fe:89:
a0:75:6b:27:4d:86:74:cb:45:a0:01:43:27:30:bc:
de:d4:ce:7e:24:ab:13:e2:37:2b:54:d0:11:b5:20:
e3:11:8f:53:44:0f:33:e1:76:3f:7c:24:b4:1b:91:
88:90:30:de:e0:9d:ad:e8:22:7c:48:00:b9:0f:4d:
e5:2e:4e:40:64:6e:58:2e:56:b9:32:71:43:ba:ad:
68:e7:f1:13:66:e9:21:4b:f2:5a:e0:13:76:1e:2c:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:37:FD:5E:EB:45:78:74:76:33:F3:AD:3B:E0:CA:25:B5:4B:CC
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/BFc3_V7rRXh0djPzrTvgyiW1S8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
a2:7e:05:73:5f:5e:60:0b:41:7f:68:4b:6c:ed:dc:7f:33:d4:
07:0b:12:ba:20:7f:19:18:9b:fb:7b:92:54:09:51:7e:b1:4c:
18:6e:01:22:94:00:f0:84:43:c6:59:41:46:d6:3e:71:63:75:
d1:16:86:02:46:67:e3:71:85:76:a7:73:5d:71:57:1b:3f:8f:
83:0e:a4:2c:4e:0c:5b:39:97:c7:3b:f2:9a:33:73:2a:08:8b:
a4:7c:45:b3:b7:bc:97:3f:9d:87:92:43:8e:bb:99:e8:d0:cc:
fe:1b:8c:fa:cc:4a:98:12:37:5a:be:a5:95:7a:ac:fd:0f:b1:
70:08:d8:70:8f:86:41:1c:61:59:37:a6:95:15:26:32:89:a3:
6d:47:69:9c:5b:5c:c9:91:7f:67:60:48:10:db:c1:9c:fe:c1:
f3:17:8e:39:1e:5a:93:3e:14:b3:59:d1:e0:63:07:35:d9:d7:
6d:00:ef:92:9e:66:ce:74:d5:cc:cb:c1:30:f8:99:fd:97:4c:
61:30:f2:15:ee:5f:07:c5:a9:cc:c0:b8:4d:6b:96:d2:43:b6:
57:ea:fc:e3:74:c1:5b:bd:e4:00:51:cc:b4:96:5b:a3:dd:77:
52:62:12:8b:31:2b:70:1c:10:47:ae:47:d6:bf:e6:87:82:12:
b1:2e:02:cc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYd7Lt19+mIVrEwEMI6q9o8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2
MzA1YTgwHhcNMjMwNDEzMTUxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDU3MzdmZDVlZWI0NTc4NzQ3NjMzZjNhZDNiZTBjYTI1YjU0YmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgajxLEHHdsq1AVIKKHt9kDBz8l1L
WxDvdLnekKi17hHx4duo6UraMxIn8ySWuLgNDdCmZheXDV4lbOgDTt621kGAaSeW
PhA/vTz3AWTe72gmNsiWRuOKzLt42l9UkQAUTscEfFxrCAgoE16v+6fsi97jpVA3
BG7u71HJf7OhiEKE8ooQsoacr+iepqqoIdmkSq29sKcbKRsExN0GS+BegE32/omg
dWsnTYZ0y0WgAUMnMLze1M5+JKsT4jcrVNARtSDjEY9TRA8z4XY/fCS0G5GIkDDe
4J2t6CJ8SAC5D03lLk5AZG5YLla5MnFDuq1o5/ETZukhS/Ja4BN2Hiw2AwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFARXN/1e60V4dHYz86074MoltUvMMB8GA1UdIwQY
MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt
YWQ0M2NjZDdhYWU4LzEvQkZjM19WN3JSWGgwZGpQenJUdmd5aVcxUzh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4
LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhP8gDAN
BgkqhkiG9w0BAQsFAAOCAQEAon4Fc19eYAtBf2hLbO3cfzPUBwsSuiB/GRib+3uS
VAlRfrFMGG4BIpQA8IRDxllBRtY+cWN10RaGAkZn43GFdqdzXXFXGz+Pgw6kLE4M
WzmXxzvymjNzKgiLpHxFs7e8lz+dh5JDjruZ6NDM/huM+sxKmBI3Wr6llXqs/Q+x
cAjYcI+GQRxhWTemlRUmMomjbUdpnFtcyZF/Z2BIENvBnP7B8xeOOR5akz4Us1nR
4GMHNdnXbQDvkp5mznTVzMvBMPiZ/ZdMYTDyFe5fB8WpzMC4TWuW0kO2V+r843TB
W73kAFHMtJZbo913UmISizErcBwQR65H1r/mh4ISsS4CzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org