Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/nucf3Sziz7n0p8JzNLYuVkzXwKE.roa
File: nucf3Sziz7n0p8JzNLYuVkzXwKE.roa (raw, json)
Hash identifier: bIYPzEZ1vxkWJghPyDvgfE4yEmki34RIA3Oyzt2SQaM=
Subject key identifier: 9E:E7:1F:DD:2C:E2:CF:B9:F4:A7:C2:73:34:B6:2E:56:4C:D7:C0:A1
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186C14ED079976E546C2E9809891432D4A7
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/nucf3Sziz7n0p8JzNLYuVkzXwKE.roa
Signing time: Wed 08 Mar 2023 13:00:13 +0000
ROA not before: Wed 08 Mar 2023 13:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212164
IP address blocks: 2a13:b487:1300::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:4e:d0:79:97:6e:54:6c:2e:98:09:89:14:32:d4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 8 13:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ee71fdd2ce2cfb9f4a7c27334b62e564cd7c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:f9:65:6b:c1:c4:5f:9a:e2:5a:9c:d8:46:
be:e5:f9:21:c2:60:d9:4e:73:2c:40:e4:f9:c5:1a:
c0:f7:9b:30:58:7d:a5:6b:43:8a:36:82:6c:0a:8b:
1f:24:e1:ab:cc:cd:9a:11:d1:b6:75:91:b2:e0:9a:
8c:df:cd:11:a1:11:08:b6:16:6a:45:ae:d1:ec:5e:
e1:b2:5a:95:cf:0f:5c:52:5f:a0:11:3e:3a:e3:b9:
34:53:44:85:41:18:7a:7d:25:f2:bc:2d:0b:2b:80:
a9:17:9a:27:4a:b2:c4:50:ff:a2:85:6b:c1:a7:5f:
27:1a:ab:f3:4f:1e:3e:90:94:4b:e9:7c:7f:94:a3:
3e:aa:99:1b:ca:19:eb:bd:47:c5:0c:87:9c:46:3c:
a3:bb:38:3b:54:9d:5f:f3:96:6e:d3:17:db:31:5e:
ff:e2:5e:ef:b6:79:5d:70:6f:18:29:ae:c3:b5:18:
21:5d:35:06:62:3b:d7:4c:b6:f5:25:02:f4:86:c2:
51:e2:8e:bd:4b:c0:2c:64:ce:a5:9a:85:bc:52:e2:
56:f1:50:9d:20:b1:5b:9a:3a:8c:c3:04:74:d9:4d:
7e:bd:b8:57:70:a8:88:76:89:99:53:72:59:57:22:
d5:a1:24:46:25:e8:50:05:c3:46:17:a2:67:a3:2e:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:1F:DD:2C:E2:CF:B9:F4:A7:C2:73:34:B6:2E:56:4C:D7:C0:A1
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/nucf3Sziz7n0p8JzNLYuVkzXwKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1300::/40
Signature Algorithm: sha256WithRSAEncryption
1c:99:b6:e3:62:b1:20:a0:84:cc:32:f6:9d:48:de:4d:4a:b0:
08:76:fc:8f:a7:3c:85:cb:4f:9b:76:02:57:01:3f:fc:53:ab:
e0:b3:92:94:75:97:97:0b:ae:92:69:3c:63:56:b2:0b:ac:65:
65:06:3d:39:19:46:3e:bc:0d:83:fc:2c:f1:a1:3e:3f:bc:c3:
5b:de:84:ea:fc:c7:32:4d:1b:36:ea:82:2d:cb:0f:8d:3b:a6:
55:2e:03:99:e9:ea:f4:1a:02:c9:1e:ab:9a:0b:9e:0c:76:17:
62:5b:57:1c:c6:aa:b5:36:cf:69:18:19:f6:ff:21:cd:7f:f1:
d7:07:15:97:bb:cb:aa:34:c4:c0:81:38:a3:18:56:33:61:f1:
0d:f8:26:aa:20:81:7b:21:90:b9:5f:e0:c7:f8:0f:2b:38:de:
61:71:b9:06:b5:d3:62:8f:7f:10:38:6f:75:06:05:96:ce:90:
e4:37:a7:a0:ea:bd:99:df:64:f5:a7:91:05:57:c5:43:b9:6f:
dd:54:14:0a:e8:47:99:ac:00:67:20:4c:1c:98:e7:8c:58:5f:
4a:f9:e7:2a:82:56:62:1b:ac:fe:e0:49:f3:7a:df:27:d6:b8:
53:bb:8f:04:a5:5d:e6:e5:91:2d:73:99:c9:1a:a7:44:11:78:
7b:2b:11:bc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYbBTtB5l25UbC6YCYkUMtSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjMwMzA4MTMwMDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWU3MWZkZDJjZTJjZmI5ZjRhN2MyNzMzNGI2MmU1NjRjZDdjMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxr5ZWvBxF+a4lqc2Ea+5fkhwmDZ
TnMsQOT5xRrA95swWH2la0OKNoJsCosfJOGrzM2aEdG2dZGy4JqM380RoREIthZq
Ra7R7F7hslqVzw9cUl+gET4647k0U0SFQRh6fSXyvC0LK4CpF5onSrLEUP+ihWvB
p18nGqvzTx4+kJRL6Xx/lKM+qpkbyhnrvUfFDIecRjyjuzg7VJ1f85Zu0xfbMV7/
4l7vtnldcG8YKa7DtRghXTUGYjvXTLb1JQL0hsJR4o69S8AsZM6lmoW8UuJW8VCd
ILFbmjqMwwR02U1+vbhXcKiIdomZU3JZVyLVoSRGJehQBcNGF6Jnoy53YwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJ7nH90s4s+59KfCczS2LlZM18ChMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEvbnVjZjNTeml6N24wcDhKek5MWXVWa3pYd0tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxMw
DQYJKoZIhvcNAQELBQADggEBAByZtuNisSCghMwy9p1I3k1KsAh2/I+nPIXLT5t2
AlcBP/xTq+CzkpR1l5cLrpJpPGNWsgusZWUGPTkZRj68DYP8LPGhPj+8w1vehOr8
xzJNGzbqgi3LD407plUuA5np6vQaAskeq5oLngx2F2JbVxzGqrU2z2kYGfb/Ic1/
8dcHFZe7y6o0xMCBOKMYVjNh8Q34JqoggXshkLlf4Mf4Dys43mFxuQa102KPfxA4
b3UGBZbOkOQ3p6DqvZnfZPWnkQVXxUO5b91UFAroR5msAGcgTByY54xYX0r55yqC
VmIbrP7gSfN63yfWuFO7jwSlXeblkS1zmckap0QReHsrEbw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org