Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3_6KvU1TldjaTw8mW1ctOJzQzWU.roa
File: 3_6KvU1TldjaTw8mW1ctOJzQzWU.roa (raw, json)
Hash identifier: qBnWpktKi3XzTYKx2CP2K9MjTX0rYYpDKHEebQf8H+E=
Subject key identifier: DF:FE:8A:BD:4D:53:95:D8:DA:4F:0F:26:5B:57:2D:38:9C:D0:CD:65
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01857227F7FC99B6DF63166D37C073D42633
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3_6KvU1TldjaTw8mW1ctOJzQzWU.roa
Signing time: Mon 02 Jan 2023 11:04:59 +0000
ROA not before: Mon 02 Jan 2023 11:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57080
IP address blocks: 2a10:4646:1c0::/48 maxlen: 48
2a10:4646:1c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f7:fc:99:b6:df:63:16:6d:37:c0:73:d4:26:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 11:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dffe8abd4d5395d8da4f0f265b572d389cd0cd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:d7:6a:10:48:af:a6:87:1c:e6:82:0d:33:
3d:09:97:df:a0:26:fe:51:72:4c:48:03:e1:db:3c:
4e:c1:c5:35:54:03:87:ab:44:99:7e:df:49:e7:20:
ec:15:c1:1d:13:95:d6:6a:67:ff:9a:e8:2e:8d:cd:
ac:57:8b:75:5c:9e:91:2c:4a:b1:50:02:19:9a:7d:
c8:0a:a2:a6:79:94:1d:d6:88:46:12:4e:c2:36:00:
30:4d:59:af:1e:31:60:ae:36:48:8e:3b:1e:17:87:
70:b7:ae:a9:3b:d8:11:78:6d:bc:19:37:c5:0a:e6:
d8:fe:51:27:53:0e:c5:f2:96:0e:3e:9d:67:ce:af:
eb:31:4a:cf:50:df:41:3d:3a:4d:2b:ad:80:4d:25:
ce:fd:4d:8f:2e:29:81:d9:7a:d0:4c:fb:83:5c:83:
31:51:da:43:42:4a:a8:04:f3:56:4d:df:56:59:58:
93:93:45:a6:ae:c4:94:c2:af:8f:6d:ac:a8:69:1b:
fa:5d:f6:bb:dd:24:bd:89:88:7a:e7:a8:f7:3c:60:
91:77:91:75:1c:be:65:f3:26:a7:ed:7b:a7:1e:83:
68:a4:5c:83:d3:82:a0:f3:3c:f9:0e:c0:54:47:02:
19:9c:22:ba:fc:52:3b:56:96:55:2e:b9:3b:90:b5:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FE:8A:BD:4D:53:95:D8:DA:4F:0F:26:5B:57:2D:38:9C:D0:CD:65
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3_6KvU1TldjaTw8mW1ctOJzQzWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1c0::/47
Signature Algorithm: sha256WithRSAEncryption
c1:31:af:ef:85:53:6a:70:08:ee:9e:ec:6f:cc:f1:aa:85:78:
08:4b:14:0a:4c:62:3d:e8:c9:f4:ff:00:cf:86:0b:7f:55:41:
42:56:af:07:c8:be:d8:d2:97:6c:81:25:48:93:bb:cd:d4:d6:
f6:64:d3:e3:ea:02:88:75:46:c2:97:02:05:93:c6:bd:f0:d0:
4a:a6:24:96:75:ed:c0:b2:8e:a7:1d:82:bc:ec:5a:fd:f4:4d:
29:7a:00:bc:12:88:86:07:af:a9:d6:5a:ac:90:00:5b:65:6c:
c4:b9:01:d9:8b:e5:3c:ed:8f:3b:cd:e4:54:46:d0:da:dd:a6:
dd:af:e4:00:c6:2a:af:cd:35:38:a2:ab:48:6f:95:ef:f5:1b:
4e:1a:53:36:77:1c:79:d1:6a:f8:be:29:37:eb:0b:5e:f8:71:
4e:71:86:62:81:37:c6:63:5e:3f:d0:a6:60:6c:df:6a:40:c3:
18:77:a4:8d:53:9a:2a:68:b4:b2:57:f3:46:ce:fd:49:ce:eb:
57:26:ef:f0:ea:85:f5:0e:b2:8e:f0:7f:96:af:8b:d0:0b:a1:
b6:4f:de:d4:ee:d1:47:d0:29:b1:c4:36:9a:04:98:28:0e:a2:
da:7e:ff:fc:95:03:a4:21:84:0f:30:52:c6:65:ac:3c:b1:ef:
d0:a6:2e:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyJ/f8mbbfYxZtN8Bz1CYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjMwMTAyMTEwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmZlOGFiZDRkNTM5NWQ4ZGE0ZjBmMjY1YjU3MmQzODljZDBjZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgDXahBIr6aHHOaCDTM9CZffoCb+
UXJMSAPh2zxOwcU1VAOHq0SZft9J5yDsFcEdE5XWamf/mugujc2sV4t1XJ6RLEqx
UAIZmn3ICqKmeZQd1ohGEk7CNgAwTVmvHjFgrjZIjjseF4dwt66pO9gReG28GTfF
CubY/lEnUw7F8pYOPp1nzq/rMUrPUN9BPTpNK62ATSXO/U2PLimB2XrQTPuDXIMx
UdpDQkqoBPNWTd9WWViTk0WmrsSUwq+PbayoaRv6Xfa73SS9iYh656j3PGCRd5F1
HL5l8yan7XunHoNopFyD04Kg8zz5DsBURwIZnCK6/FI7VpZVLrk7kLVMrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN/+ir1NU5XY2k8PJltXLTic0M1lMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvM182S3ZVMVRsZGphVHc4bVcxY3RPSnpReldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhBGRgHA
MA0GCSqGSIb3DQEBCwUAA4IBAQDBMa/vhVNqcAjunuxvzPGqhXgISxQKTGI96Mn0
/wDPhgt/VUFCVq8HyL7Y0pdsgSVIk7vN1Nb2ZNPj6gKIdUbClwIFk8a98NBKpiSW
de3Aso6nHYK87Fr99E0pegC8EoiGB6+p1lqskABbZWzEuQHZi+U87Y87zeRURtDa
3abdr+QAxiqvzTU4oqtIb5Xv9RtOGlM2dxx50Wr4vik36wte+HFOcYZigTfGY14/
0KZgbN9qQMMYd6SNU5oqaLSyV/NGzv1JzutXJu/w6oX1DrKO8H+Wr4vQC6G2T97U
7tFH0CmxxDaaBJgoDqLafv/8lQOkIYQPMFLGZaw8se/Qpi7y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org