Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7CA4l8_YePoz8aMbAO3b8TrYA_c.roa
File: 7CA4l8_YePoz8aMbAO3b8TrYA_c.roa (raw, json)
Hash identifier: CX5PnbjGoROZUgIaSsugvYtZ1DU23iH+VrQG/DmP7zk=
Subject key identifier: EC:20:38:97:CF:D8:78:FA:33:F1:A3:1B:00:ED:DB:F1:3A:D8:03:F7
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186BFAEFB3DC6BBA6B57F3D2FC9406D00BF
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7CA4l8_YePoz8aMbAO3b8TrYA_c.roa
Signing time: Wed 08 Mar 2023 05:26:01 +0000
ROA not before: Wed 08 Mar 2023 05:26:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57934
IP address blocks: 2a13:b487:1000::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:ae:fb:3d:c6:bb:a6:b5:7f:3d:2f:c9:40:6d:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 8 05:26:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec203897cfd878fa33f1a31b00eddbf13ad803f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:a0:7c:d7:b0:3e:8f:a5:79:cb:c4:0a:c7:
37:79:e8:02:1b:e1:ba:8c:f5:6e:8a:b1:6f:91:19:
42:06:3d:94:fa:28:6e:12:3c:c9:7c:2a:ce:cd:89:
36:05:6d:9d:5a:32:0f:49:60:33:f4:25:fc:a0:82:
19:17:36:21:82:62:e5:5f:5e:fb:cb:c2:95:04:c0:
9c:76:45:fc:81:76:a8:bb:3a:8f:65:92:aa:67:64:
35:18:03:b1:43:23:ed:82:8e:63:67:a6:61:dc:92:
1f:cb:eb:04:4a:e9:3e:09:87:45:6c:16:94:5a:c3:
6e:04:7b:a6:ab:28:40:53:f1:72:e2:67:09:90:b6:
30:c7:b9:b0:19:1f:ab:e5:19:cc:46:45:76:14:6d:
43:3a:21:82:df:ef:50:56:26:e0:c8:b2:63:fd:a6:
d5:bc:84:ef:a0:b3:ab:0f:58:7b:d0:c7:64:bd:b2:
c5:07:5a:b9:ae:f2:28:8c:0a:ab:91:e1:ea:bb:15:
ab:1c:b6:fd:c4:58:75:dc:16:dd:03:92:d4:54:53:
2a:47:75:cd:1d:bd:b5:c4:37:90:58:9f:04:96:ed:
ef:34:82:6a:11:f4:ac:60:b9:7d:aa:e0:7b:76:e5:
93:d1:a5:46:74:69:e6:26:3d:20:04:44:8c:0c:2e:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:38:97:CF:D8:78:FA:33:F1:A3:1B:00:ED:DB:F1:3A:D8:03:F7
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/7CA4l8_YePoz8aMbAO3b8TrYA_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1000::/40
Signature Algorithm: sha256WithRSAEncryption
cf:87:69:64:3d:b8:df:c6:5b:76:f5:ee:21:3b:e2:c5:0c:86:
e6:74:4d:21:2c:cd:5c:07:80:ae:6e:3d:85:d8:72:de:bf:11:
92:1a:07:0a:e6:5c:5c:f2:17:33:12:df:bb:c1:13:01:6e:ed:
8e:d1:b0:5b:fe:cd:45:21:57:d6:85:9d:17:55:13:e0:1d:79:
b0:cb:8c:a4:6e:21:27:cb:95:78:2d:cb:24:62:8e:ac:0e:c6:
35:c7:6d:2a:65:6b:8e:61:37:76:11:b6:3f:3a:fc:ff:3e:23:
85:6b:d7:00:4c:03:81:1d:f9:94:b1:e3:2c:ce:50:0e:60:73:
be:f9:ec:64:de:fb:a8:0a:f5:3e:fd:8e:06:5c:f7:37:f5:90:
d8:75:cc:96:0e:a2:34:59:e2:fe:6b:8b:3b:7a:28:42:d5:10:
77:17:88:18:30:ec:1e:7f:28:cc:fc:59:22:0e:7f:66:9e:99:
9b:73:ea:77:ab:bd:22:7a:d0:4d:86:c5:ed:33:e1:54:37:4f:
17:37:e8:10:33:35:e9:b5:e7:28:60:a1:06:37:02:91:a7:d4:
16:6d:b6:72:74:57:af:ab:79:0f:e3:ec:41:bb:5a:9b:bc:c3:
96:24:d0:bd:f4:d3:95:7b:33:84:81:d2:3d:fd:a1:b1:b1:f8:
04:b7:37:32
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYa/rvs9xrumtX89L8lAbQC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjMwMzA4MDUyNjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzIwMzg5N2NmZDg3OGZhMzNmMWEzMWIwMGVkZGJmMTNhZDgwM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8ygfNewPo+lecvECsc3eegCG+G6
jPVuirFvkRlCBj2U+ihuEjzJfCrOzYk2BW2dWjIPSWAz9CX8oIIZFzYhgmLlX177
y8KVBMCcdkX8gXaouzqPZZKqZ2Q1GAOxQyPtgo5jZ6Zh3JIfy+sESuk+CYdFbBaU
WsNuBHumqyhAU/Fy4mcJkLYwx7mwGR+r5RnMRkV2FG1DOiGC3+9QVibgyLJj/abV
vITvoLOrD1h70MdkvbLFB1q5rvIojAqrkeHquxWrHLb9xFh13BbdA5LUVFMqR3XN
Hb21xDeQWJ8Elu3vNIJqEfSsYLl9quB7duWT0aVGdGnmJj0gBESMDC6b+QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOwgOJfP2Hj6M/GjGwDt2/E62AP3MB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvN0NBNGw4X1llUG96OGFNYkFPM2I4VHJZQV9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxAw
DQYJKoZIhvcNAQELBQADggEBAM+HaWQ9uN/GW3b17iE74sUMhuZ0TSEszVwHgK5u
PYXYct6/EZIaBwrmXFzyFzMS37vBEwFu7Y7RsFv+zUUhV9aFnRdVE+AdebDLjKRu
ISfLlXgtyyRijqwOxjXHbSpla45hN3YRtj86/P8+I4Vr1wBMA4Ed+ZSx4yzOUA5g
c7757GTe+6gK9T79jgZc9zf1kNh1zJYOojRZ4v5rizt6KELVEHcXiBgw7B5/KMz8
WSIOf2aemZtz6nervSJ60E2Gxe0z4VQ3Txc36BAzNem15yhgoQY3ApGn1BZttnJ0
V6+reQ/j7EG7Wpu8w5Yk0L3005V7M4SB0j39obGx+AS3NzI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org