Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fL-JJaMv44KKDYJsh_UY5X6RXd4.roa
File: fL-JJaMv44KKDYJsh_UY5X6RXd4.roa (raw, json)
Hash identifier: ijdsvAabWaLZQPCK9EnFQJirZzj5bzcnlIKcVAAno28=
Subject key identifier: 7C:BF:89:25:A3:2F:E3:82:8A:0D:82:6C:87:F5:18:E5:7E:91:5D:DE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246D033A58E8355C9D4E13DC491771E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fL-JJaMv44KKDYJsh_UY5X6RXd4.roa
Signing time: Mon 02 Jan 2023 11:38:41 +0000
ROA not before: Mon 02 Jan 2023 11:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203314
IP address blocks: 2a0c:9a40:9500::/40 maxlen: 48
2a0c:9a40:8c90::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d0:33:a5:8e:83:55:c9:d4:e1:3d:c4:91:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cbf8925a32fe3828a0d826c87f518e57e915dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:10:e1:ee:1b:79:98:f5:ce:04:0a:1d:95:
bf:1c:28:40:a7:a5:6a:42:eb:7b:de:d5:22:59:ed:
2c:40:dc:bb:2f:ab:46:f9:8d:75:35:12:36:c7:d0:
95:a4:ae:b1:6f:73:90:16:42:ca:4a:99:62:b4:64:
7c:6e:52:45:a4:96:7c:04:39:90:0a:58:e4:1a:82:
d0:e5:09:9a:c9:b8:d0:61:41:c9:b2:73:1e:91:fc:
7f:3a:7e:29:a8:e9:fc:a1:d3:0c:8e:fc:24:27:58:
d8:67:e5:0e:cd:87:68:1a:83:40:1d:3b:b8:8d:2e:
99:75:a6:87:fa:6d:d4:25:d6:37:94:c1:72:25:76:
22:33:81:ba:4c:5b:51:85:7e:11:06:5f:40:34:f3:
c0:06:1f:0b:be:0c:25:93:72:38:af:27:67:57:0b:
f9:04:bd:2b:b2:f9:16:27:2c:7b:4d:22:32:42:56:
a4:62:23:f0:74:5a:27:94:b9:36:82:7b:d0:ee:56:
b9:cd:16:56:89:11:0b:99:e9:19:dd:96:60:36:84:
5d:2b:8e:e4:ba:ef:b5:eb:b0:c8:8c:f1:1a:ba:80:
16:1e:a4:0a:69:98:e3:84:f1:45:9c:66:4f:97:54:
52:a7:d2:1c:95:05:07:92:46:e9:74:97:11:d5:8f:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:89:25:A3:2F:E3:82:8A:0D:82:6C:87:F5:18:E5:7E:91:5D:DE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fL-JJaMv44KKDYJsh_UY5X6RXd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c90::/48
2a0c:9a40:9500::/40
Signature Algorithm: sha256WithRSAEncryption
7a:72:9b:06:0c:03:a7:3e:fc:f1:79:12:f2:7b:94:6d:c8:c5:
d8:34:5a:24:bf:75:db:57:d4:f5:17:bc:d8:53:ba:d5:46:56:
e3:0c:3a:9d:69:f7:a4:1f:ae:a2:41:a5:e0:70:65:53:bf:b4:
1b:9f:d3:bd:db:50:ff:85:44:3d:23:12:df:16:11:ec:b7:80:
8b:87:87:91:2d:75:ed:96:ff:e2:41:8b:a6:40:94:ba:f1:bb:
1b:2d:28:e8:e4:91:0a:c3:dc:4e:f4:a7:26:94:0d:ef:4a:5f:
8b:d2:a6:4b:c3:f4:8f:fa:56:b5:7a:95:24:67:bf:5a:f7:59:
32:0c:b3:4e:4b:18:d5:e2:17:0d:46:0c:4e:fa:48:f0:df:a8:
55:8e:78:1a:bc:52:d8:19:c8:2e:ee:45:35:fd:ef:51:c0:4f:
42:72:23:9a:47:da:4c:19:8b:09:47:9e:31:a6:25:67:00:f1:
3b:cc:1c:0b:99:9e:09:36:78:72:e5:47:5e:5d:e9:c9:a8:0b:
4c:0c:c7:9f:d4:f4:4c:26:a8:06:75:5f:f7:69:0e:ff:01:b1:
a0:83:b1:f9:a2:f6:10:22:93:29:30:6f:81:c6:d8:0b:a7:f9:
13:41:b2:2b:15:40:1e:87:8c:63:a3:5f:88:8c:ba:97:2a:42:
52:70:1c:a6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAYVyRtAzpY6DVcnU4T3EkXceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwMTAyMTEzODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JmODkyNWEzMmZlMzgyOGEwZDgyNmM4N2Y1MThlNTdlOTE1ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IYQ4e4beZj1zgQKHZW/HChAp6Vq
Qut73tUiWe0sQNy7L6tG+Y11NRI2x9CVpK6xb3OQFkLKSplitGR8blJFpJZ8BDmQ
CljkGoLQ5QmaybjQYUHJsnMekfx/On4pqOn8odMMjvwkJ1jYZ+UOzYdoGoNAHTu4
jS6ZdaaH+m3UJdY3lMFyJXYiM4G6TFtRhX4RBl9ANPPABh8Lvgwlk3I4rydnVwv5
BL0rsvkWJyx7TSIyQlakYiPwdFonlLk2gnvQ7la5zRZWiRELmekZ3ZZgNoRdK47k
uu+167DIjPEauoAWHqQKaZjjhPFFnGZPl1RSp9IclQUHkkbpdJcR1Y/4rQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFHy/iSWjL+OCig2CbIf1GOV+kV3eMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvZkwtSkphTXY0NEtLRFlKc2hfVVk1WDZSWGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgyaQIyQ
AwYAKgyaQJUwDQYJKoZIhvcNAQELBQADggEBAHpymwYMA6c+/PF5EvJ7lG3Ixdg0
WiS/ddtX1PUXvNhTutVGVuMMOp1p96QfrqJBpeBwZVO/tBuf073bUP+FRD0jEt8W
Eey3gIuHh5Etde2W/+JBi6ZAlLrxuxstKOjkkQrD3E70pyaUDe9KX4vSpkvD9I/6
VrV6lSRnv1r3WTIMs05LGNXiFw1GDE76SPDfqFWOeBq8UtgZyC7uRTX971HAT0Jy
I5pH2kwZiwlHnjGmJWcA8TvMHAuZngk2eHLlR15d6cmoC0wMx5/U9EwmqAZ1X/dp
Dv8BsaCDsfmi9hAikykwb4HG2Aun+RNBsisVQB6HjGOjX4iMupcqQlJwHKY=
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:57 2024 by rpki-client on console-fra.rpki-client.org