Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Fs8UkB6ODauhGwVolpZ_aZUr2oU.roa
File: Fs8UkB6ODauhGwVolpZ_aZUr2oU.roa (raw, json)
Hash identifier: z9doTlrSePgfLcj0c6XqEgTQVBn7b1CoMvZIx+Upv84=
Subject key identifier: 16:CF:14:90:1E:8E:0D:AB:A1:1B:05:68:96:96:7F:69:95:2B:DA:85
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01856B8A3D8B010C3D7B417CA282772E10BD
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Fs8UkB6ODauhGwVolpZ_aZUr2oU.roa
Signing time: Sun 01 Jan 2023 04:14:59 +0000
ROA not before: Sun 01 Jan 2023 04:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Oct 2023 20:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:3d:8b:01:0c:3d:7b:41:7c:a2:82:77:2e:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 04:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16cf14901e8e0daba11b056896967f69952bda85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:2d:80:f7:d1:af:76:52:56:2d:08:9e:db:
c6:cc:db:70:de:79:46:5a:e8:8d:a8:c3:b5:77:61:
a2:0e:c2:19:52:43:e9:3b:09:30:f4:98:46:d0:73:
4d:8e:c0:ac:33:40:65:6a:5a:a9:e1:8b:4b:1c:4a:
1e:b3:51:31:09:c0:a2:a2:f4:77:e1:2a:92:e1:1d:
fc:a6:cd:37:f4:ec:2a:be:2b:a6:c0:26:8c:e9:0c:
18:77:c6:61:6b:bc:2c:35:35:65:0a:45:71:6f:4c:
f7:0d:9d:06:bf:97:9c:6e:af:0b:a3:db:5a:07:a1:
7e:cd:5a:8a:fd:35:2f:c7:6e:22:6f:e7:e5:87:d4:
2e:59:84:f1:88:52:e6:ca:07:d8:27:c1:de:d5:39:
f2:3f:10:bf:ba:e8:14:54:52:c9:50:61:22:01:ad:
ea:fe:2d:02:c5:ec:4c:95:25:88:2e:12:7a:34:c2:
d5:13:6f:76:cb:8f:a6:a3:51:d1:f5:bd:91:38:ca:
01:d1:ac:f2:c1:94:cd:f1:1c:07:af:b5:5d:a5:03:
8a:8f:b8:83:85:82:fa:6e:f5:ab:92:98:4a:49:ff:
0d:d8:97:68:b4:97:36:56:5b:9f:9a:77:ca:73:4e:
5f:fb:91:66:8d:04:e4:e1:3e:d3:ef:7a:91:ca:a8:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:14:90:1E:8E:0D:AB:A1:1B:05:68:96:96:7F:69:95:2B:DA:85
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Fs8UkB6ODauhGwVolpZ_aZUr2oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff35::-2a03:2887:ff37:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff39::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff40:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff4a::/47
Signature Algorithm: sha256WithRSAEncryption
0d:e4:32:bf:57:c9:61:09:0f:c5:7b:a0:68:ec:0f:44:d4:8e:
77:28:77:40:7b:8e:a8:86:80:43:06:9e:85:4c:94:e0:f2:63:
56:ac:bd:d4:b6:aa:3e:e4:87:df:f5:c5:f9:92:45:28:02:52:
eb:14:9d:db:3c:d4:56:bc:ec:e1:50:14:fe:1e:26:88:c9:2c:
db:05:8d:ba:8c:7e:51:db:d5:ef:59:9d:ec:b0:2a:84:46:dd:
99:d9:10:8b:46:d8:8c:b5:76:d7:87:8e:91:29:6e:52:5c:4b:
b0:67:21:34:88:42:dc:6a:65:a4:39:97:e1:0b:8b:b0:50:04:
21:d6:c5:b7:54:a8:41:a5:02:7b:72:a4:bc:67:7b:c8:06:9b:
15:3d:1e:db:0b:b6:7c:ab:6a:fc:e2:24:04:9d:29:5c:96:4a:
26:c3:03:09:ff:26:d6:11:e4:7d:33:a2:78:cd:e0:fb:08:af:
d0:3b:a7:de:2b:c2:c1:5f:dd:ce:a3:8d:6a:d6:cf:0e:7f:9e:
9c:e8:f5:b9:6a:1d:22:82:9e:4b:32:5a:99:e2:4c:b4:da:3a:
e7:2e:e4:ec:0f:bb:fa:6f:1d:31:19:0c:be:58:51:d2:34:85:
78:0f:48:b3:9c:db:e3:92:0a:5d:e3:58:69:4b:93:09:21:c5:
51:ce:5a:8a
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAYVrij2LAQw9e0F8ooJ3LhC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx
MmE4MTEwHhcNMjMwMTAxMDQxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmNmMTQ5MDFlOGUwZGFiYTExYjA1Njg5Njk2N2Y2OTk1MmJkYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsotgPfRr3ZSVi0IntvGzNtw3nlG
WuiNqMO1d2GiDsIZUkPpOwkw9JhG0HNNjsCsM0Blalqp4YtLHEoes1ExCcCiovR3
4SqS4R38ps039OwqviumwCaM6QwYd8Zha7wsNTVlCkVxb0z3DZ0Gv5ecbq8Lo9ta
B6F+zVqK/TUvx24ib+flh9QuWYTxiFLmygfYJ8He1TnyPxC/uugUVFLJUGEiAa3q
/i0CxexMlSWILhJ6NMLVE292y4+mo1HR9b2ROMoB0azywZTN8RwHr7VdpQOKj7iD
hYL6bvWrkphKSf8N2JdotJc2VlufmnfKc05f+5FmjQTk4T7T73qRyqglswIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFBbPFJAejg2roRsFaJaWf2mVK9qFMB8GA1UdIwQY
MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt
ZjQ0YTU3Y2VkNzNkLzEvRnM4VWtCNk9EYXVoR3dWb2xwWl9hWlVyMm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk
LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHYBggrBgEFBQcBBwEB/wSByDCBxTCBwgQCAAIwgbsDBwEq
AyiH/xgwEgMHACoDKIf/GwMHBSoDKIf/AAMHACoDKIf/ITASAwcAKgMoh/8jAwcB
KgMoh/8kMBIDBwAqAyiH/ycDBwIqAyiH/ygwEgMHASoDKIf/LgMHACoDKIf/MDAS
AwcAKgMoh/81AwcDKgMoh/8wMBIDBwAqAyiH/zkDBwIqAyiH/zgwEgMHACoDKIf/
PwMHACoDKIf/QDASAwcAKgMoh/9DAwcBKgMoh/9EAwcBKgMoh/9KMA0GCSqGSIb3
DQEBCwUAA4IBAQAN5DK/V8lhCQ/Fe6Bo7A9E1I53KHdAe46ohoBDBp6FTJTg8mNW
rL3Utqo+5Iff9cX5kkUoAlLrFJ3bPNRWvOzhUBT+HiaIySzbBY26jH5R29XvWZ3s
sCqERt2Z2RCLRtiMtXbXh46RKW5SXEuwZyE0iELcamWkOZfhC4uwUAQh1sW3VKhB
pQJ7cqS8Z3vIBpsVPR7bC7Z8q2r84iQEnSlclkomwwMJ/ybWEeR9M6J4zeD7CK/Q
O6feK8LBX93Oo41q1s8Of56c6PW5ah0igp5LMlqZ4ky02jrnLuTsD7v6bx0xGQy+
WFHSNIV4D0iznNvjkgpd41hpS5MJIcVRzlqK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:57 2024 by rpki-client on console-fra.rpki-client.org