Route Origin Authorization
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a366336393a3a2f36342d3634203d3e20323135373738.roa
File: 326131313a663263303a666663623a366336393a3a2f36342d3634203d3e20323135373738.roa (raw, json)
Hash identifier: UTaVQsOi17SBjN/NtCC+HoMwEernSKnn+twTNQFd3/4=
Subject key identifier: 02:E9:DC:AE:07:AC:EA:BB:BF:E9:FB:BF:AB:CC:B8:34:B3:0F:04:C9
Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Certificate serial: 191C6802A2E44905EA7C4407E6934E841D6F135B
Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a366336393a3a2f36342d3634203d3e20323135373738.roa
Signing time: Thu 05 Sep 2024 21:20:10 +0000
ROA not before: Thu 05 Sep 2024 21:15:10 +0000
ROA not after: Thu 04 Sep 2025 21:20:10 +0000
asID: 215778
IP address blocks: 2a11:f2c0:ffcb:6c69::/64 maxlen: 64
Validation: Failed, certificate revoked on Sat 07 Sep 2024 19:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1c:68:02:a2:e4:49:05:ea:7c:44:07:e6:93:4e:84:1d:6f:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F
Validity
Not Before: Sep 5 21:15:10 2024 GMT
Not After : Sep 4 21:20:10 2025 GMT
Subject: CN=02E9DCAE07ACEABBBFE9FBBFABCCB834B30F04C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:0d:f9:ff:5c:5d:79:71:bc:70:24:b5:11:
53:7f:dd:68:3e:17:f4:18:70:59:ae:7a:7f:7e:b0:
a3:23:d7:ee:4e:38:a5:3b:c6:1e:75:8e:4f:de:4c:
7a:ea:b8:8a:04:8c:60:3c:bd:ba:c5:8d:e0:73:58:
69:9a:7e:0e:c9:9a:05:69:8f:0a:63:14:7c:85:df:
a4:82:ac:f9:8a:29:64:dd:70:05:28:6e:a1:72:52:
25:ab:fd:fa:8d:d6:bd:05:9e:61:59:e5:3e:bb:28:
b7:59:25:73:37:db:1f:de:5e:5b:aa:f9:5e:01:46:
9c:1f:3d:57:8a:fb:5a:66:7f:27:0a:6b:fa:4f:c4:
fb:da:3d:ec:2c:8b:1b:cd:d3:d2:ce:c0:43:6c:80:
60:0d:c7:b3:5d:3d:89:dd:28:c8:31:0f:ad:bd:de:
88:e1:76:f2:3b:98:c2:d3:80:e3:cc:43:dd:64:42:
12:21:e5:43:85:14:d6:8a:15:c1:03:84:ce:11:46:
c3:ec:26:13:0e:38:da:17:cc:08:60:6f:52:fc:57:
ff:f8:90:0e:ee:59:2a:3b:6d:ff:b4:0e:4c:be:a8:
06:00:b7:92:72:49:16:e8:ce:bb:4b:c5:ac:36:30:
82:76:a3:f8:25:0c:d3:e4:82:b3:f5:60:04:c8:72:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:DC:AE:07:AC:EA:BB:BF:E9:FB:BF:AB:CC:B8:34:B3:0F:04:C9
X509v3 Authority Key Identifier:
keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/326131313a663263303a666663623a366336393a3a2f36342d3634203d3e20323135373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb:6c69::/64
Signature Algorithm: sha256WithRSAEncryption
3b:a9:9e:03:e1:ca:0a:0c:bb:6e:cf:b8:69:69:c7:0e:c9:98:
80:fa:ce:d7:d7:83:26:72:14:7b:d4:5c:d9:80:3f:bd:5b:a8:
35:11:4c:c0:38:fa:54:c9:d3:4b:9d:63:4b:9f:b7:30:12:fa:
5a:ec:62:ca:1c:0c:03:b6:5c:1b:28:ac:3e:70:88:69:fc:8e:
f5:0e:bb:fc:0e:70:a7:3f:83:d8:27:3f:ff:41:f2:f4:6a:f0:
cb:21:94:61:a6:fb:d1:25:02:65:33:cc:80:d6:87:c9:35:3a:
55:55:d9:cb:f1:31:9e:e5:eb:c1:71:30:a8:44:94:e9:33:b8:
57:bd:02:99:05:eb:53:49:34:5e:6b:58:2c:6d:4b:0a:85:dd:
b5:27:3a:02:47:90:c8:ba:35:04:6b:15:5d:24:ce:b3:c3:4f:
5d:00:35:8e:72:b9:e9:21:40:e5:85:e1:1d:f3:85:90:a7:1e:
5f:fc:2b:6c:05:5a:2e:38:0a:c4:9b:5c:be:5a:3c:8d:c1:8a:
5d:27:b9:54:27:6f:9c:6b:d5:e8:0f:83:87:ff:fd:82:0d:1f:
16:8d:63:61:a9:29:8c:16:5e:4a:a1:e9:44:54:21:d9:4f:f1:
63:9d:1e:73:d4:d9:29:c6:31:b8:05:44:09:3e:e8:0d:0c:f9:
d5:ec:0a:8d
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUGRxoAqLkSQXqfEQH5pNOhB1vE1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF
RDA1NTYyRjAeFw0yNDA5MDUyMTE1MTBaFw0yNTA5MDQyMTIwMTBaMDMxMTAvBgNV
BAMTKDAyRTlEQ0FFMDdBQ0VBQkJCRkU5RkJCRkFCQ0NCODM0QjMwRjA0QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHw35/1xdeXG8cCS1EVN/3Wg+
F/QYcFmuen9+sKMj1+5OOKU7xh51jk/eTHrquIoEjGA8vbrFjeBzWGmafg7JmgVp
jwpjFHyF36SCrPmKKWTdcAUobqFyUiWr/fqN1r0FnmFZ5T67KLdZJXM32x/eXluq
+V4BRpwfPVeK+1pmfycKa/pPxPvaPewsixvN09LOwENsgGANx7NdPYndKMgxD629
3ojhdvI7mMLTgOPMQ91kQhIh5UOFFNaKFcEDhM4RRsPsJhMOONoXzAhgb1L8V//4
kA7uWSo7bf+0Dky+qAYAt5JySRbozrtLxaw2MIJ2o/glDNPkgrP1YATIcrqvAgMB
AAGjggKHMIICgzAdBgNVHQ4EFgQUAuncrges6ru/6fu/q8y4NLMPBMkwHwYDVR0j
BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv
NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE
MEVEMDU1NjJGLmNlcjCBvQYIKwYBBQUHAQsEgbAwga0wgaoGCCsGAQUFBzALhoGd
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV85NzNl
N2E5OGE3MWI0OWZmYmIyMmI3NmVkNWYxMjllMi8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjY2NjYzNjIzYTM2NjMzNjM5M2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIwMzIz
MTM1MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF
BwEHAQH/BBUwEzARBAIAAjALAwkAKhHywP/LbGkwDQYJKoZIhvcNAQELBQADggEB
ADupngPhygoMu27PuGlpxw7JmID6ztfXgyZyFHvUXNmAP71bqDURTMA4+lTJ00ud
Y0uftzAS+lrsYsocDAO2XBsorD5wiGn8jvUOu/wOcKc/g9gnP/9B8vRq8MshlGGm
+9ElAmUzzIDWh8k1OlVV2cvxMZ7l68FxMKhElOkzuFe9ApkF61NJNF5rWCxtSwqF
3bUnOgJHkMi6NQRrFV0kzrPDT10ANY5yuekhQOWF4R3zhZCnHl/8K2wFWi44CsSb
XL5aPI3Bil0nuVQnb5xr1egPg4f//YINHxaNY2GpKYwWXkqh6URUIdlP8WOdHnPU
2SnGMbgFRAk+6A0M+dXsCo0=
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:14:01 2024 by rpki-client on console-fra.rpki-client.org