Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/WufxLQJ3P3ASlbtIW9eG2l6IF9U.roa
File: WufxLQJ3P3ASlbtIW9eG2l6IF9U.roa (raw, json)
Hash identifier: CedEyVv+REKC5ptsWGHaGRrRhlQrniQ0yBGpJDW+khM=
Subject key identifier: 5A:E7:F1:2D:02:77:3F:70:12:95:BB:48:5B:D7:86:DA:5E:88:17:D5
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01871340CD4AD07EF4ADEE93854EBCDF6705
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/WufxLQJ3P3ASlbtIW9eG2l6IF9U.roa
Signing time: Fri 24 Mar 2023 10:53:46 +0000
ROA not before: Fri 24 Mar 2023 10:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a13:b487:1e00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 25 Mar 2023 14:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:40:cd:4a:d0:7e:f4:ad:ee:93:85:4e:bc:df:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 24 10:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae7f12d02773f701295bb485bd786da5e8817d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:c1:ff:7b:b1:56:86:c6:7e:85:9a:14:a4:
44:1f:99:c9:54:15:68:68:47:33:7b:71:1d:ea:d6:
f1:8c:b5:45:b3:03:cb:e8:44:d7:52:2e:d6:84:67:
c0:21:4a:26:0b:e1:61:f1:e7:e8:e1:0a:10:be:ae:
76:d9:e3:80:75:03:d9:b4:bd:cc:a1:cb:ed:07:f0:
09:e6:04:41:69:96:bf:77:97:14:b2:cc:33:9c:5d:
dd:8d:f5:2a:ba:63:df:10:9a:2a:ac:39:dc:3d:8b:
72:c1:13:7e:5a:83:78:0b:c1:a0:ec:0f:42:8c:1d:
69:97:e7:b4:c2:09:da:d1:01:6c:3b:95:95:7c:f8:
d9:12:af:a1:5c:34:0d:35:12:d0:82:71:19:9d:6c:
b5:48:bc:47:39:3a:8d:8d:65:0d:14:07:27:f4:47:
35:49:25:a7:46:40:7e:9c:90:14:b0:ec:1c:5c:03:
e0:88:c8:60:42:a0:b0:cd:5e:2e:18:db:ec:ee:8b:
94:fb:1e:40:ca:0c:d0:32:2a:1a:be:64:36:1a:8d:
00:7a:e4:c1:5c:b6:16:25:de:dd:76:32:45:a1:1d:
d5:1a:ba:bb:36:92:08:55:48:64:6c:c5:5f:a1:1c:
58:fa:f3:13:5a:91:bc:ad:74:5a:2b:6f:8f:fd:9f:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:F1:2D:02:77:3F:70:12:95:BB:48:5B:D7:86:DA:5E:88:17:D5
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/WufxLQJ3P3ASlbtIW9eG2l6IF9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
06:78:f0:2c:15:19:6e:5f:30:f8:64:6d:0e:c7:7d:9d:3e:6b:
00:ef:9e:f3:f9:7e:ec:2b:24:a7:9c:48:7f:72:24:27:3e:1b:
cd:9b:00:9c:a6:7b:cd:54:85:2e:f0:1b:c2:75:60:bc:77:9e:
8b:7d:e3:73:17:86:d7:3a:08:26:69:52:49:34:e6:b6:46:50:
e6:2b:9c:06:3f:44:21:a5:8e:bd:7c:2f:3a:f6:ed:19:84:05:
31:7e:8b:e3:8c:af:ac:94:a5:b3:49:0f:88:fe:6a:c7:89:e9:
98:2c:ec:6f:79:a1:e9:5d:82:67:4a:97:68:d1:79:8f:c8:0c:
fb:dd:b8:66:d8:86:69:a6:0c:f1:fd:8d:49:57:2b:3f:0f:16:
7a:ba:73:87:47:97:3e:7b:08:9c:ef:9b:e8:c8:d3:15:df:f8:
30:d2:1e:49:cd:ce:09:2c:fd:80:e6:49:56:81:91:02:b3:d5:
67:66:c7:22:b0:fa:cb:0d:56:dc:17:f1:05:1b:45:d5:85:0b:
a7:c3:a0:a1:9b:9a:12:ea:5b:bb:66:a1:9a:fd:05:22:1f:ac:
c8:97:87:84:01:ac:bd:49:49:95:15:09:25:36:1a:1a:9f:1f:
60:01:5a:b9:f1:c7:ec:4e:e5:ae:46:37:8e:01:63:32:3b:3b:
20:57:d0:58
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYcTQM1K0H70re6ThU6832cFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjMwMzI0MTA1MzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWU3ZjEyZDAyNzczZjcwMTI5NWJiNDg1YmQ3ODZkYTVlODgxN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN7B/3uxVobGfoWaFKREH5nJVBVo
aEcze3Ed6tbxjLVFswPL6ETXUi7WhGfAIUomC+Fh8efo4QoQvq522eOAdQPZtL3M
ocvtB/AJ5gRBaZa/d5cUsswznF3djfUqumPfEJoqrDncPYtywRN+WoN4C8Gg7A9C
jB1pl+e0wgna0QFsO5WVfPjZEq+hXDQNNRLQgnEZnWy1SLxHOTqNjWUNFAcn9Ec1
SSWnRkB+nJAUsOwcXAPgiMhgQqCwzV4uGNvs7ouU+x5AygzQMioavmQ2Go0AeuTB
XLYWJd7ddjJFoR3VGrq7NpIIVUhkbMVfoRxY+vMTWpG8rXRaK2+P/Z9eCwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFrn8S0Cdz9wEpW7SFvXhtpeiBfVMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvV3VmeExRSjNQM0FTbGJ0SVc5ZUcybDZJRjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hx4w
DQYJKoZIhvcNAQELBQADggEBAAZ48CwVGW5fMPhkbQ7HfZ0+awDvnvP5fuwrJKec
SH9yJCc+G82bAJyme81UhS7wG8J1YLx3not943MXhtc6CCZpUkk05rZGUOYrnAY/
RCGljr18Lzr27RmEBTF+i+OMr6yUpbNJD4j+aseJ6Zgs7G95oeldgmdKl2jReY/I
DPvduGbYhmmmDPH9jUlXKz8PFnq6c4dHlz57CJzvm+jI0xXf+DDSHknNzgks/YDm
SVaBkQKz1WdmxyKw+ssNVtwX8QUbRdWFC6fDoKGbmhLqW7tmoZr9BSIfrMiXh4QB
rL1JSZUVCSU2GhqfH2ABWrnxx+xO5a5GN44BYzI7OyBX0Fg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org