Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uv30yELQDZLs5lqlYKzRTJOntmI.roa
File: uv30yELQDZLs5lqlYKzRTJOntmI.roa (raw, json)
Hash identifier: XG9Moawe0Ln90ACrzF3nuDSLwBLCq9MPdr2KZddiNVw=
Subject key identifier: BA:FD:F4:C8:42:D0:0D:92:EC:E6:5A:A5:60:AC:D1:4C:93:A7:B6:62
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573901184818205CE9138D44C8BD9845C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uv30yELQDZLs5lqlYKzRTJOntmI.roa
Signing time: Mon 02 Jan 2023 17:38:19 +0000
ROA not before: Mon 02 Jan 2023 17:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212623
IP address blocks: 2a0b:b83:ff::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:11:84:81:82:05:ce:91:38:d4:4c:8b:d9:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bafdf4c842d00d92ece65aa560acd14c93a7b662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:fe:fd:2c:04:3d:6d:69:09:06:19:e1:37:
3d:2d:82:95:0d:76:32:53:a4:f9:ab:e4:10:3e:8d:
0c:0c:5b:8e:b7:bf:c8:d8:66:a0:c4:92:a2:87:77:
c8:0c:8b:50:ef:06:95:47:b9:c4:61:75:8d:26:52:
8c:54:33:22:53:ae:46:60:db:0d:ea:66:68:2b:23:
6e:56:84:98:c5:f3:14:af:5a:2c:a3:4d:ad:f0:a2:
c1:74:36:73:dd:60:07:85:fc:97:10:b1:9d:e5:87:
d3:d0:4c:bd:30:32:54:e7:e6:75:6d:66:b8:06:3f:
b3:8f:30:42:96:e3:43:64:79:4d:70:f2:54:63:37:
b8:e6:47:c1:b6:f2:15:6f:1e:53:ee:c4:fa:92:c8:
d1:ad:d5:1e:c8:b2:04:9a:7a:5e:f2:fe:17:74:16:
d9:6f:1e:77:3d:ae:40:2b:83:c1:6f:a0:79:94:8f:
a9:4c:ff:d8:68:72:ea:79:73:4d:06:0c:6e:f9:4d:
c4:d1:7e:1b:b4:da:8e:f6:c1:5f:ec:3c:2b:67:95:
04:9d:6e:54:88:9b:2e:52:42:1a:09:55:6b:73:d6:
49:a0:a8:1c:1e:2f:28:13:4d:d1:5b:8e:e1:6a:5f:
4e:63:f4:bd:4a:64:36:0c:b0:6a:ef:00:7a:43:b4:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:F4:C8:42:D0:0D:92:EC:E6:5A:A5:60:AC:D1:4C:93:A7:B6:62
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uv30yELQDZLs5lqlYKzRTJOntmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b83:ff::/48
Signature Algorithm: sha256WithRSAEncryption
79:8c:59:9e:7f:42:d8:d8:74:2c:63:4b:95:e5:f4:a0:7c:04:
ec:3f:d0:9c:2b:2b:72:c6:59:4d:32:55:00:30:fa:87:3f:b8:
e8:f1:8f:14:23:e9:ae:32:59:27:0f:2b:3e:c3:a5:d7:cc:60:
b0:3f:0d:36:4d:b0:31:0b:ff:56:96:8f:55:ab:be:5e:4d:8b:
c5:1e:66:43:ba:ef:1f:b5:f5:6e:56:60:6d:7b:56:a9:6e:62:
8e:30:c3:81:09:3d:6e:a9:64:a4:80:1a:52:48:05:9d:93:a4:
c1:50:6a:79:f3:76:ff:e8:2b:a2:47:38:ba:c6:35:e3:f9:4b:
ff:35:a8:0a:60:64:6b:ad:4b:ed:19:11:f0:54:3f:cb:18:09:
9b:e2:0b:27:3e:06:5c:54:f9:c0:df:b2:89:2d:3f:bf:75:1c:
75:60:25:6f:c0:d4:dc:eb:36:86:cd:9f:81:38:fd:be:20:b1:
83:e6:18:a1:bd:11:76:71:0a:db:1e:ee:ff:c4:46:c7:fe:64:
9c:25:dc:a2:06:21:a1:b0:91:37:74:6e:45:c6:18:99:39:13:
7b:07:04:91:b6:40:16:65:0b:21:b3:16:6a:4b:58:50:10:7e:
c4:b3:68:78:72:ab:53:9e:5e:7e:bd:b3:fa:e5:9b:2e:e4:af:
92:04:b3:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVzkBGEgYIFzpE41EyL2YRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWZkZjRjODQyZDAwZDkyZWNlNjVhYTU2MGFjZDE0YzkzYTdiNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CL+/SwEPW1pCQYZ4Tc9LYKVDXYy
U6T5q+QQPo0MDFuOt7/I2GagxJKih3fIDItQ7waVR7nEYXWNJlKMVDMiU65GYNsN
6mZoKyNuVoSYxfMUr1oso02t8KLBdDZz3WAHhfyXELGd5YfT0Ey9MDJU5+Z1bWa4
Bj+zjzBCluNDZHlNcPJUYze45kfBtvIVbx5T7sT6ksjRrdUeyLIEmnpe8v4XdBbZ
bx53Pa5AK4PBb6B5lI+pTP/YaHLqeXNNBgxu+U3E0X4btNqO9sFf7DwrZ5UEnW5U
iJsuUkIaCVVrc9ZJoKgcHi8oE03RW47hal9OY/S9SmQ2DLBq7wB6Q7Q6OQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLr99MhC0A2S7OZapWCs0UyTp7ZiMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvdXYzMHlFTFFEWkxzNWxxbFlLelJUSk9udG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLgwD/
MA0GCSqGSIb3DQEBCwUAA4IBAQB5jFmef0LY2HQsY0uV5fSgfATsP9CcKytyxllN
MlUAMPqHP7jo8Y8UI+muMlknDys+w6XXzGCwPw02TbAxC/9Wlo9Vq75eTYvFHmZD
uu8ftfVuVmBte1apbmKOMMOBCT1uqWSkgBpSSAWdk6TBUGp583b/6CuiRzi6xjXj
+Uv/NagKYGRrrUvtGRHwVD/LGAmb4gsnPgZcVPnA37KJLT+/dRx1YCVvwNTc6zaG
zZ+BOP2+ILGD5hihvRF2cQrbHu7/xEbH/mScJdyiBiGhsJE3dG5FxhiZORN7BwSR
tkAWZQshsxZqS1hQEH7Es2h4cqtTnl5+vbP65Zsu5K+SBLOk
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org