Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Xmuq92fT1gO_gRkthSx3OpkQ484.roa
File: Xmuq92fT1gO_gRkthSx3OpkQ484.roa (raw, json)
Hash identifier: NL8noVI/3xrwUeFxVT7kfsFEZ+1K3q6f6Ky1j/v5uN0=
Subject key identifier: 5E:6B:AA:F7:67:D3:D6:03:BF:81:19:2D:85:2C:77:3A:99:10:E3:CE
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018876E6B890CA010501218DE0FBFEE91755
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Xmuq92fT1gO_gRkthSx3OpkQ484.roa
Signing time: Thu 01 Jun 2023 12:20:11 +0000
ROA not before: Thu 01 Jun 2023 12:20:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202402
IP address blocks: 2a13:b487:4400::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Aug 2023 15:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:e6:b8:90:ca:01:05:01:21:8d:e0:fb:fe:e9:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jun 1 12:20:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e6baaf767d3d603bf81192d852c773a9910e3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:3b:46:c4:29:c8:24:02:a0:cc:79:fd:ca:
d6:aa:b1:89:69:d7:fc:e1:f4:45:0c:1b:59:33:94:
8c:94:08:38:df:b2:0b:4b:ed:db:48:93:c4:06:23:
18:e8:96:48:ee:5e:50:98:51:8b:fb:94:0a:78:2d:
17:80:22:8c:b5:5d:35:d4:a9:33:9e:01:ec:39:4a:
7c:1a:48:8f:dd:93:91:f8:91:4c:ec:1f:dd:ca:6c:
cb:fd:ea:4b:cd:a9:eb:c1:d3:f3:06:ad:de:f5:8b:
f3:fb:9a:41:e6:1d:9c:ed:fc:ef:99:03:c3:32:0d:
26:ea:73:d8:c3:f4:9a:d3:fe:ce:d7:ba:2b:bd:ac:
f5:dc:92:db:1c:98:07:89:f8:49:36:d4:68:b1:02:
2b:54:90:8c:ea:09:5b:3c:c5:e7:2c:87:57:2c:26:
a5:08:48:32:48:83:ca:30:d2:d3:c3:31:82:b8:d4:
cc:37:ed:cf:87:ce:7d:eb:26:2b:fd:31:2a:4a:a3:
c6:73:3f:fc:31:f8:c0:b3:15:89:90:38:33:ad:8c:
c4:14:3f:50:7c:6a:bb:5c:de:53:c8:df:c0:b2:78:
4d:30:99:c8:26:23:7c:99:d9:2d:1f:34:b1:19:ef:
66:11:15:28:78:8e:97:cc:f6:44:c6:52:b3:e8:07:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:AA:F7:67:D3:D6:03:BF:81:19:2D:85:2C:77:3A:99:10:E3:CE
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/Xmuq92fT1gO_gRkthSx3OpkQ484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4400::/48
Signature Algorithm: sha256WithRSAEncryption
9d:9f:24:45:0e:78:55:03:1f:bb:ea:43:44:3b:9f:c0:db:63:
9d:f7:a0:ad:c4:7e:0c:12:4b:54:6f:a6:ca:39:ae:8c:ec:0e:
39:55:d9:c5:73:b6:00:de:ec:22:2b:e2:88:35:b5:0a:01:05:
6c:ec:75:4b:4e:39:06:51:aa:32:79:06:a7:2b:e1:89:2b:24:
93:a0:bc:43:f7:27:c7:ce:4b:8b:d4:fd:9f:37:c4:3d:88:41:
86:b0:3d:f0:47:cf:82:7c:a7:96:e2:a0:94:5d:bc:81:00:ca:
cf:46:9c:c0:f2:45:6b:fa:72:6d:5e:f0:31:5c:ad:e2:fd:d3:
a4:4d:a9:66:78:01:82:33:2a:85:e7:41:17:ce:40:c1:c2:f6:
ff:1a:b0:f6:7a:b4:a0:65:21:43:67:12:c7:29:fa:9b:03:36:
75:e7:84:34:a9:a2:24:e0:5a:83:60:7c:e8:5b:b9:69:c2:6c:
50:8f:5f:98:63:43:c6:b2:e9:e9:57:bc:a3:e5:2c:f8:b1:9b:
e1:2f:6f:49:8f:00:c3:57:62:f0:c3:16:e3:3b:51:50:da:1d:
22:9c:9c:4f:04:69:8f:1e:6e:9a:85:62:4e:94:42:56:9f:3e:
0b:5f:dc:90:f9:0c:4a:fe:cd:7e:4c:50:b8:97:f8:91:e5:fd:
83:64:2e:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYh25riQygEFASGN4Pv+6RdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjMwNjAxMTIyMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTZiYWFmNzY3ZDNkNjAzYmY4MTE5MmQ4NTJjNzczYTk5MTBlM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwg7RsQpyCQCoMx5/crWqrGJadf8
4fRFDBtZM5SMlAg437ILS+3bSJPEBiMY6JZI7l5QmFGL+5QKeC0XgCKMtV011Kkz
ngHsOUp8GkiP3ZOR+JFM7B/dymzL/epLzanrwdPzBq3e9Yvz+5pB5h2c7fzvmQPD
Mg0m6nPYw/Sa0/7O17orvaz13JLbHJgHifhJNtRosQIrVJCM6glbPMXnLIdXLCal
CEgySIPKMNLTwzGCuNTMN+3Ph8596yYr/TEqSqPGcz/8MfjAsxWJkDgzrYzEFD9Q
fGq7XN5TyN/AsnhNMJnIJiN8mdktHzSxGe9mERUoeI6XzPZExlKz6AfPNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFF5rqvdn09YDv4EZLYUsdzqZEOPOMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvWG11cTkyZlQxZ09fZ1JrdGhTeDNPcGtRNDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhO0h0QA
MA0GCSqGSIb3DQEBCwUAA4IBAQCdnyRFDnhVAx+76kNEO5/A22Od96CtxH4MEktU
b6bKOa6M7A45VdnFc7YA3uwiK+KINbUKAQVs7HVLTjkGUaoyeQanK+GJKySToLxD
9yfHzkuL1P2fN8Q9iEGGsD3wR8+CfKeW4qCUXbyBAMrPRpzA8kVr+nJtXvAxXK3i
/dOkTalmeAGCMyqF50EXzkDBwvb/GrD2erSgZSFDZxLHKfqbAzZ154Q0qaIk4FqD
YHzoW7lpwmxQj1+YY0PGsunpV7yj5Sz4sZvhL29JjwDDV2LwwxbjO1FQ2h0inJxP
BGmPHm6ahWJOlEJWnz4LX9yQ+QxK/s1+TFC4l/iR5f2DZC4e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org