Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/F1us2vRb38P1hg_49Te_GC-FxIA.roa
File: F1us2vRb38P1hg_49Te_GC-FxIA.roa (raw, json)
Hash identifier: ZxR4oWg8+fzLZCapIkdEAMMBzIZuHwkZKyT7r+mI2N8=
Subject key identifier: 17:5B:AC:DA:F4:5B:DF:C3:F5:86:0F:F8:F5:37:BF:18:2F:85:C4:80
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0189167BFDDA26CD1BE696C7D107CB0E3CC0
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/F1us2vRb38P1hg_49Te_GC-FxIA.roa
Signing time: Sun 02 Jul 2023 12:02:51 +0000
ROA not before: Sun 02 Jul 2023 12:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198077
IP address blocks: 2a13:b487:4a00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:16:7b:fd:da:26:cd:1b:e6:96:c7:d1:07:cb:0e:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jul 2 12:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=175bacdaf45bdfc3f5860ff8f537bf182f85c480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:22:54:52:49:32:86:c7:4c:b8:88:e7:62:
fa:13:3d:75:a5:43:06:e0:90:33:0c:a7:2b:7f:ba:
cc:0e:ba:6e:ec:16:fa:ce:39:be:e7:33:e7:db:b4:
20:d3:20:12:82:13:6d:86:ab:6a:7e:bf:eb:3f:a7:
7a:94:8f:63:94:ff:47:eb:02:71:23:23:d9:c0:79:
1f:6e:6c:44:5f:e4:5e:24:63:54:37:69:df:fd:ab:
47:f1:49:8f:13:7d:6d:08:a1:f8:e4:ab:47:0d:1f:
be:27:f0:38:a5:92:5d:3e:74:e3:0d:5f:4e:f2:60:
2c:02:e0:6c:bf:df:ef:d7:68:d3:20:da:27:e7:cb:
b2:e9:d0:1f:60:d1:91:06:6a:29:19:b2:72:92:44:
c1:c1:27:e7:7b:92:0e:0d:68:27:27:4b:f7:f9:30:
08:23:61:08:c4:bb:50:52:4a:4d:b0:1d:8f:9b:8c:
43:dd:a6:f1:a4:df:2e:83:de:bc:36:c2:ef:74:83:
d6:ea:86:3d:b8:73:2d:09:79:d0:d3:0f:3d:dd:3b:
40:5f:e8:8a:a4:98:d6:60:df:cf:e4:25:df:ea:69:
ed:03:9a:ca:03:4a:3e:65:ca:00:b3:ba:27:7d:92:
1d:77:14:69:3b:db:dc:b8:38:5d:26:b2:4b:b0:f4:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:AC:DA:F4:5B:DF:C3:F5:86:0F:F8:F5:37:BF:18:2F:85:C4:80
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/F1us2vRb38P1hg_49Te_GC-FxIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4a00::/40
Signature Algorithm: sha256WithRSAEncryption
63:a9:78:ed:c3:5b:bc:ea:5b:2c:ca:a8:7b:43:39:14:13:b5:
99:94:b4:48:2d:4e:e2:c9:e3:fe:4d:d2:2f:a0:40:d2:62:bf:
b7:ab:68:93:59:dd:02:74:63:63:a0:4a:7b:dc:3f:c3:84:fc:
af:63:83:ab:97:f5:7f:ae:34:65:0f:fd:3c:88:5d:48:ff:e9:
8e:bb:65:8d:04:de:af:5c:ba:a4:ae:8e:fb:52:00:fc:b0:33:
1a:08:4f:19:26:6b:e9:af:a8:55:6d:25:a6:9d:a1:f8:45:f2:
b9:ab:d4:e1:95:d4:a2:ac:31:49:9c:9b:71:c2:80:5a:24:f9:
b2:99:53:51:14:38:0c:87:5b:be:99:c7:49:02:58:a8:56:5a:
a3:ec:71:7e:87:f3:ec:90:cd:5d:1a:41:43:84:c5:55:2b:87:
96:9a:4b:e3:c5:0d:fa:b8:47:05:95:37:31:16:52:b6:63:6c:
3e:3f:41:87:de:e3:4f:34:5b:a6:c6:17:27:bb:57:e3:df:c9:
fc:b6:e4:d9:11:8e:34:0b:a4:6b:c8:91:85:d2:cd:30:e7:1f:
84:5b:5c:bc:9a:83:e9:a4:97:f6:3a:ea:b2:f3:c3:01:8c:3b:
d2:de:ec:d3:6a:5b:32:7a:b7:79:a5:17:4c:4b:f0:d8:e7:cd:
7f:97:c0:8b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkWe/3aJs0b5pbH0QfLDjzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjMwNzAyMTIwMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzViYWNkYWY0NWJkZmMzZjU4NjBmZjhmNTM3YmYxODJmODVjNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYUiVFJJMobHTLiI52L6Ez11pUMG
4JAzDKcrf7rMDrpu7Bb6zjm+5zPn27Qg0yASghNthqtqfr/rP6d6lI9jlP9H6wJx
IyPZwHkfbmxEX+ReJGNUN2nf/atH8UmPE31tCKH45KtHDR++J/A4pZJdPnTjDV9O
8mAsAuBsv9/v12jTINon58uy6dAfYNGRBmopGbJykkTBwSfne5IODWgnJ0v3+TAI
I2EIxLtQUkpNsB2Pm4xD3abxpN8ug968NsLvdIPW6oY9uHMtCXnQ0w893TtAX+iK
pJjWYN/P5CXf6mntA5rKA0o+ZcoAs7onfZIddxRpO9vcuDhdJrJLsPT1wwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBdbrNr0W9/D9YYP+PU3vxgvhcSAMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvRjF1czJ2UmIzOFAxaGdfNDlUZV9HQy1GeElBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h0ow
DQYJKoZIhvcNAQELBQADggEBAGOpeO3DW7zqWyzKqHtDORQTtZmUtEgtTuLJ4/5N
0i+gQNJiv7eraJNZ3QJ0Y2OgSnvcP8OE/K9jg6uX9X+uNGUP/TyIXUj/6Y67ZY0E
3q9cuqSujvtSAPywMxoITxkma+mvqFVtJaadofhF8rmr1OGV1KKsMUmcm3HCgFok
+bKZU1EUOAyHW76Zx0kCWKhWWqPscX6H8+yQzV0aQUOExVUrh5aaS+PFDfq4RwWV
NzEWUrZjbD4/QYfe4080W6bGFye7V+Pfyfy25NkRjjQLpGvIkYXSzTDnH4RbXLya
g+mkl/Y66rLzwwGMO9Le7NNqWzJ6t3mlF0xL8NjnzX+XwIs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org