Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/t2CJdHI6uhu3BULhtpvlpRlvD0o.roa
File: t2CJdHI6uhu3BULhtpvlpRlvD0o.roa (raw, json)
Hash identifier: qgPIC1uQ2PCiAT1TpVkei336aGSCypu7TJfTDnLrO5c=
Subject key identifier: B7:60:89:74:72:3A:BA:1B:B7:05:42:E1:B6:9B:E5:A5:19:6F:0F:4A
Certificate issuer: /CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Certificate serial: 0185C144A59FF95AED2D7349F024C99BBAAB
Authority key identifier: 63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/t2CJdHI6uhu3BULhtpvlpRlvD0o.roa
Signing time: Tue 17 Jan 2023 19:46:19 +0000
ROA not before: Tue 17 Jan 2023 19:46:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208548
IP address blocks: 2a11:5cc1:b00c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c1:44:a5:9f:f9:5a:ed:2d:73:49:f0:24:c9:9b:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633bca0ed1f9b60bc0ed423022d0389e29b6cdd4
Validity
Not Before: Jan 17 19:46:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7608974723aba1bb70542e1b69be5a5196f0f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:19:c5:e1:78:5e:0e:3a:19:72:47:97:4c:
6a:0c:51:61:af:81:c3:fc:3c:9f:7b:e7:21:ea:e2:
f4:e2:29:54:56:d8:ae:58:19:6e:03:b3:3f:c8:a0:
da:f9:e9:b7:08:61:51:72:be:30:a4:b9:61:69:77:
4f:85:f7:dd:65:f0:c7:9a:22:9a:f3:3b:56:72:13:
bc:46:70:99:1c:13:4c:ee:bc:f2:d1:c5:4e:f3:ba:
ba:c0:5a:00:88:0d:ec:73:1c:37:29:e4:7a:25:a5:
94:46:25:ad:27:40:08:a1:f7:50:be:00:0f:69:24:
63:36:f1:4b:4a:99:a3:2c:ac:ce:35:d5:71:32:1f:
dc:d7:a2:df:fb:64:95:f0:c0:b6:88:3d:db:62:2e:
75:0d:7a:6c:e1:4f:3a:1f:8a:00:7d:f6:62:49:a4:
8b:fa:f4:63:3b:2f:6b:2b:71:ea:c9:3c:b5:a1:9c:
3f:6f:fc:ad:fc:02:c6:ad:26:a8:42:3c:00:c6:25:
6f:8b:88:a1:41:63:89:34:15:17:c1:bb:81:76:49:
dd:b5:cf:de:96:6b:11:cf:18:43:86:e7:eb:40:ab:
0e:a2:2c:a3:f4:79:34:41:a0:ce:55:f4:d7:da:12:
86:84:c5:3f:b6:24:b3:9d:c8:3a:79:db:94:ef:9e:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:60:89:74:72:3A:BA:1B:B7:05:42:E1:B6:9B:E5:A5:19:6F:0F:4A
X509v3 Authority Key Identifier:
keyid:63:3B:CA:0E:D1:F9:B6:0B:C0:ED:42:30:22:D0:38:9E:29:B6:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzvKDtH5tgvA7UIwItA4nim2zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/t2CJdHI6uhu3BULhtpvlpRlvD0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e387ff-5348-4b32-b136-d05184c25e9a/1/YzvKDtH5tgvA7UIwItA4nim2zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5cc1:b00c::/48
Signature Algorithm: sha256WithRSAEncryption
41:71:9d:0e:c7:41:f6:95:05:24:07:d7:20:63:97:d0:59:3f:
ba:51:d1:81:a1:06:06:93:9f:c9:db:81:d2:74:70:79:48:79:
01:f6:e0:8a:27:3c:05:43:41:e3:bb:66:b0:2f:08:dc:47:10:
7f:6b:ae:81:f7:f9:64:23:b1:a0:ae:d6:36:61:a8:d4:30:cf:
e9:4f:93:9e:52:d1:ae:8c:45:2f:17:4e:ea:e9:47:91:c3:6c:
d1:62:99:43:c0:5c:cd:2d:7d:1a:83:f3:32:ea:33:45:63:31:
0a:06:a8:ea:f3:9b:15:cb:90:11:16:ef:0e:6f:3c:53:15:08:
a1:3c:c7:f6:14:b4:77:e4:c4:ca:b3:cd:05:b3:3f:4a:99:db:
e7:e6:5b:c5:09:f0:84:fa:3f:28:bf:dc:c2:82:99:e4:a7:40:
f8:2b:5f:34:8c:17:4e:6c:f1:a4:01:0e:d8:bc:e6:37:4b:a6:
5b:62:f7:e5:1c:3e:e6:89:1f:61:0b:67:c3:e4:94:f9:26:d6:
af:ed:6c:f3:55:fd:91:ae:77:ef:1e:88:d7:ef:c8:51:ab:4a:
5c:d9:9a:ef:78:eb:7b:9f:1a:c9:4a:33:aa:22:ad:eb:96:f6:
be:23:b1:c2:d6:04:50:8a:9c:39:44:b5:3d:c4:9a:41:05:92:
bc:4e:f3:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXBRKWf+VrtLXNJ8CTJm7qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2JjYTBlZDFmOWI2MGJjMGVkNDIzMDIyZDAzODllMjli
NmNkZDQwHhcNMjMwMTE3MTk0NjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzYwODk3NDcyM2FiYTFiYjcwNTQyZTFiNjliZTVhNTE5NmYwZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolAZxeF4Xg46GXJHl0xqDFFhr4HD
/Dyfe+ch6uL04ilUVtiuWBluA7M/yKDa+em3CGFRcr4wpLlhaXdPhffdZfDHmiKa
8ztWchO8RnCZHBNM7rzy0cVO87q6wFoAiA3scxw3KeR6JaWURiWtJ0AIofdQvgAP
aSRjNvFLSpmjLKzONdVxMh/c16Lf+2SV8MC2iD3bYi51DXps4U86H4oAffZiSaSL
+vRjOy9rK3HqyTy1oZw/b/yt/ALGrSaoQjwAxiVvi4ihQWOJNBUXwbuBdkndtc/e
lmsRzxhDhufrQKsOoiyj9Hk0QaDOVfTX2hKGhMU/tiSzncg6eduU756M1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLdgiXRyOrobtwVC4bab5aUZbw9KMB8GA1UdIwQY
MBaAFGM7yg7R+bYLwO1CMCLQOJ4pts3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXp2S0R0SDV0Z3ZBN1VJd0l0QTRuaW0yemRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMzg3ZmYtNTM0OC00YjMyLWIxMzYt
ZDA1MTg0YzI1ZTlhLzEvdDJDSmRISTZ1aHUzQlVMaHRwdmxwUmx2RDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMzg3ZmYtNTM0OC00YjMyLWIxMzYtZDA1MTg0YzI1ZTlh
LzEvWXp2S0R0SDV0Z3ZBN1VJd0l0QTRuaW0yemRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhFcwbAM
MA0GCSqGSIb3DQEBCwUAA4IBAQBBcZ0Ox0H2lQUkB9cgY5fQWT+6UdGBoQYGk5/J
24HSdHB5SHkB9uCKJzwFQ0Hju2awLwjcRxB/a66B9/lkI7GgrtY2YajUMM/pT5Oe
UtGujEUvF07q6UeRw2zRYplDwFzNLX0ag/My6jNFYzEKBqjq85sVy5ARFu8ObzxT
FQihPMf2FLR35MTKs80Fsz9Kmdvn5lvFCfCE+j8ov9zCgpnkp0D4K180jBdObPGk
AQ7YvOY3S6ZbYvflHD7miR9hC2fD5JT5Jtav7WzzVf2RrnfvHojX78hRq0pc2Zrv
eOt7nxrJSjOqIq3rlva+I7HC1gRQipw5RLU9xJpBBZK8TvNM
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:51 2024 by rpki-client on console-fra.rpki-client.org