Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/aGCIT64GZTvqIA0baO_eAAujr8U.roa
File: aGCIT64GZTvqIA0baO_eAAujr8U.roa (raw, json)
Hash identifier: YXVuI4gaZF0yywAzAdlwG3gKok96Tv/2JMvJetTKQ08=
Subject key identifier: 68:60:88:4F:AE:06:65:3B:EA:20:0D:1B:68:EF:DE:00:0B:A3:AF:C5
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 01856CCB03E5AF21D5671E327AC691880323
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/aGCIT64GZTvqIA0baO_eAAujr8U.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211338
IP address blocks: 2a0d:2406:3000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:03:e5:af:21:d5:67:1e:32:7a:c6:91:88:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6860884fae06653bea200d1b68efde000ba3afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b5:31:c9:a9:45:ee:de:bf:f7:8c:46:c9:77:
dd:c9:d9:37:86:b0:44:ee:b2:e0:00:78:a1:ea:bb:
df:70:1c:ea:0f:a0:07:a3:df:85:ae:5b:06:d0:76:
b3:e1:76:80:8b:df:c2:21:a0:ff:2e:f4:31:2f:3b:
53:7b:8a:d0:ee:7e:54:5b:a1:a4:48:2b:fe:64:1a:
f7:25:5e:2f:13:4e:89:d9:83:1c:27:ae:d0:86:ad:
20:b8:da:d1:d0:fc:72:1e:19:68:b6:2b:04:e1:86:
91:f7:a5:7f:49:8f:5f:b6:cb:48:56:06:1d:e9:f8:
c7:3f:aa:5b:d1:c4:12:62:a1:4b:62:ff:b0:5c:e9:
b4:c5:f1:78:0d:74:e7:78:94:b1:ea:a6:66:26:ac:
17:12:c1:99:54:2d:a3:41:9d:28:31:52:66:f4:dc:
ad:da:94:64:6c:c4:10:59:0d:df:80:21:66:0d:ed:
51:15:df:56:a5:03:8b:37:f0:63:01:7a:4f:5f:16:
2e:f9:b7:0a:b0:0f:fb:e0:3b:80:25:6f:c8:7b:10:
73:51:0b:f3:fc:89:d8:99:4c:68:b6:7f:06:0c:cc:
33:4e:a6:b5:6a:c5:49:0f:03:e9:ad:4b:50:af:c1:
a5:be:82:ea:27:af:e7:5d:f0:e8:83:c8:35:91:1c:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:60:88:4F:AE:06:65:3B:EA:20:0D:1B:68:EF:DE:00:0B:A3:AF:C5
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/aGCIT64GZTvqIA0baO_eAAujr8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:3000::/48
Signature Algorithm: sha256WithRSAEncryption
11:e3:f1:50:fe:65:16:3a:da:5d:74:14:b3:d5:06:61:de:bc:
d1:33:6b:a7:be:1c:3e:07:61:6e:16:b9:d0:27:a2:cf:d6:ac:
75:ae:84:6a:d9:ec:dd:69:07:ac:0a:02:17:24:44:22:d4:1a:
5a:62:12:2a:1d:35:60:02:40:56:00:31:79:3a:b1:02:3e:21:
f3:8b:df:1b:5b:24:27:02:b4:18:6c:12:9c:51:2c:b7:af:1e:
a1:62:f1:24:6e:ed:c9:f8:fc:84:94:13:5f:26:30:ba:7b:72:
c1:7f:af:21:24:ce:ca:2b:01:63:b6:0d:a1:be:2a:36:43:51:
a0:62:fe:a6:d2:33:7d:06:9a:2c:84:d7:19:f7:7c:42:68:7a:
09:68:80:b2:7b:ef:ac:a9:ee:4f:2a:1f:19:2d:00:14:ad:6e:
dc:65:8a:f9:05:d3:5b:48:5a:de:f0:24:5c:36:70:b8:65:63:
68:35:eb:5e:66:76:60:29:21:0e:3d:99:24:4f:06:f7:51:92:
de:cf:ed:a8:13:7c:0a:c2:b6:1c:bb:e2:55:01:84:cb:66:84:
8c:71:35:bd:80:69:0e:72:c6:58:17:a4:bf:b4:bb:30:b5:ac:
d8:11:9b:17:2e:8a:1a:2a:33:65:39:fa:53:14:8e:5c:61:f8:
fc:77:79:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsywPlryHVZx4yesaRiAMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjMwMTAxMTAwNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODYwODg0ZmFlMDY2NTNiZWEyMDBkMWI2OGVmZGUwMDBiYTNhZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7UxyalF7t6/94xGyXfdydk3hrBE
7rLgAHih6rvfcBzqD6AHo9+FrlsG0Haz4XaAi9/CIaD/LvQxLztTe4rQ7n5UW6Gk
SCv+ZBr3JV4vE06J2YMcJ67Qhq0guNrR0PxyHhlotisE4YaR96V/SY9ftstIVgYd
6fjHP6pb0cQSYqFLYv+wXOm0xfF4DXTneJSx6qZmJqwXEsGZVC2jQZ0oMVJm9Nyt
2pRkbMQQWQ3fgCFmDe1RFd9WpQOLN/BjAXpPXxYu+bcKsA/74DuAJW/IexBzUQvz
/InYmUxotn8GDMwzTqa1asVJDwPprUtQr8GlvoLqJ6/nXfDog8g1kRw+jwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGhgiE+uBmU76iANG2jv3gALo6/FMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvYUdDSVQ2NEdaVHZxSUEwYmFPX2VBQXVqcjhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0kBjAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAR4/FQ/mUWOtpddBSz1QZh3rzRM2unvhw+B2Fu
FrnQJ6LP1qx1roRq2ezdaQesCgIXJEQi1BpaYhIqHTVgAkBWADF5OrECPiHzi98b
WyQnArQYbBKcUSy3rx6hYvEkbu3J+PyElBNfJjC6e3LBf68hJM7KKwFjtg2hvio2
Q1GgYv6m0jN9BposhNcZ93xCaHoJaICye++sqe5PKh8ZLQAUrW7cZYr5BdNbSFre
8CRcNnC4ZWNoNeteZnZgKSEOPZkkTwb3UZLez+2oE3wKwrYcu+JVAYTLZoSMcTW9
gGkOcsZYF6S/tLswtazYEZsXLooaKjNlOfpTFI5cYfj8d3nI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:00 2024 by rpki-client on console-ams.rpki-client.org