Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/6cfJE43wLoeR7DFUXf-thky3Zj4.roa
File: 6cfJE43wLoeR7DFUXf-thky3Zj4.roa (raw, json)
Hash identifier: u0JSN1qSOi1ABq/x0DWrx5fRi5crGE4l0tuJ0weLiHU=
Subject key identifier: E9:C7:C9:13:8D:F0:2E:87:91:EC:31:54:5D:FF:AD:86:4C:B7:66:3E
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01862822BCD6D6272D04CD4CBDA2BF1CBA84
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/6cfJE43wLoeR7DFUXf-thky3Zj4.roa
Signing time: Mon 06 Feb 2023 19:10:10 +0000
ROA not before: Mon 06 Feb 2023 19:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:ef45::/32 maxlen: 32
2a12:ef42::/32 maxlen: 32
2a12:ef40::/29 maxlen: 48
2a12:ef46::/32 maxlen: 32
2a12:ef41::/32 maxlen: 32
2a12:ef43::/32 maxlen: 32
2a12:ef44::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 09 Feb 2023 14:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:28:22:bc:d6:d6:27:2d:04:cd:4c:bd:a2:bf:1c:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Feb 6 19:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c7c9138df02e8791ec31545dffad864cb7663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:58:13:1c:97:0d:41:d2:03:73:1b:7c:23:
d2:20:43:80:ce:ce:06:e2:37:42:77:6c:78:de:fd:
d0:34:11:71:14:2c:66:bb:f0:30:c4:1d:1b:f8:c2:
64:db:60:a8:80:cb:56:0d:2f:1a:38:c8:3c:06:bc:
ec:e1:e3:d8:3a:e9:ae:c1:b6:8e:b2:ba:e4:5f:1b:
77:53:e2:09:80:75:0b:04:f6:7d:c4:eb:83:0d:ad:
d8:5f:fc:c5:ac:95:9f:53:3e:34:35:db:cb:9b:78:
01:29:1d:6b:f8:bf:ef:3d:69:6a:3c:2e:18:41:0e:
7d:cb:db:ce:d2:80:ea:bf:74:c7:81:27:33:39:1b:
3c:21:2c:eb:4b:99:85:8b:e0:cb:d4:6d:3b:85:95:
f8:1b:32:b1:bc:5f:a3:8d:f8:e6:21:07:64:b8:43:
66:83:4c:fc:bd:f8:76:6a:90:67:e2:ae:92:fd:d9:
19:84:c9:f9:b6:31:42:3c:df:3e:4e:b9:62:72:54:
99:5a:27:e1:e0:06:e1:e5:87:d6:c7:f3:11:c1:1e:
63:ce:71:e8:08:ee:02:51:fd:35:c4:4c:41:bc:89:
98:b7:41:16:23:db:3e:69:08:3a:75:1a:fa:b3:85:
02:9b:78:ad:4e:ee:04:71:ad:a6:46:02:4b:56:94:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:C9:13:8D:F0:2E:87:91:EC:31:54:5D:FF:AD:86:4C:B7:66:3E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/6cfJE43wLoeR7DFUXf-thky3Zj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
b1:43:a9:cf:a6:a1:65:26:12:2c:38:15:a3:b9:6d:e5:2b:a0:
e6:37:62:10:49:81:0e:a0:5e:e6:21:01:82:d3:49:84:c8:2d:
2d:60:8c:bf:b7:1e:d0:67:33:ba:0f:2b:13:0c:37:2d:16:41:
19:0e:4a:57:83:54:c3:e9:70:52:93:98:0f:18:17:16:c0:8c:
1a:f0:07:a7:b7:c7:8f:eb:ce:09:08:31:45:62:52:65:9e:fa:
30:06:36:1c:53:ae:b9:a3:ca:66:1f:5b:8c:4a:a7:e6:9a:09:
cf:bc:8b:0c:70:57:5c:76:0a:ab:58:76:ec:c4:b3:e3:d6:8c:
ab:45:c7:f5:43:b1:28:7b:4e:d6:5a:22:46:ff:36:07:54:4c:
3c:bd:c2:6e:28:9a:d1:43:cb:8f:9f:07:d8:27:d5:9a:4f:42:
f4:17:03:86:c8:df:9f:65:8d:3e:0a:14:69:42:12:3a:92:a4:
01:ac:c8:65:6b:bb:09:3d:85:63:6d:37:13:b2:43:2b:30:db:
9f:ac:a1:0d:51:77:de:1c:2e:1d:be:35:f5:bb:d3:d7:6d:aa:
3d:2c:3e:51:c3:89:d2:cf:dc:7e:17:09:19:6f:fb:c1:4a:4c:
17:ae:46:51:99:ca:8d:10:7f:99:50:57:17:c0:d5:d0:0e:b6:
43:0a:f8:f0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYYoIrzW1ictBM1MvaK/HLqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjMwMjA2MTkxMDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM3YzkxMzhkZjAyZTg3OTFlYzMxNTQ1ZGZmYWQ4NjRjYjc2NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBYExyXDUHSA3MbfCPSIEOAzs4G
4jdCd2x43v3QNBFxFCxmu/AwxB0b+MJk22CogMtWDS8aOMg8Brzs4ePYOumuwbaO
srrkXxt3U+IJgHULBPZ9xOuDDa3YX/zFrJWfUz40NdvLm3gBKR1r+L/vPWlqPC4Y
QQ59y9vO0oDqv3THgSczORs8ISzrS5mFi+DL1G07hZX4GzKxvF+jjfjmIQdkuENm
g0z8vfh2apBn4q6S/dkZhMn5tjFCPN8+TrliclSZWifh4Abh5YfWx/MRwR5jznHo
CO4CUf01xExBvImYt0EWI9s+aQg6dRr6s4UCm3itTu4Eca2mRgJLVpR1iQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOnHyRON8C6HkewxVF3/rYZMt2Y+MB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvNmNmSkU0M3dMb2VSN0RGVVhmLXRoa3kzWmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLvQDAN
BgkqhkiG9w0BAQsFAAOCAQEAsUOpz6ahZSYSLDgVo7lt5Sug5jdiEEmBDqBe5iEB
gtNJhMgtLWCMv7ce0Gczug8rEww3LRZBGQ5KV4NUw+lwUpOYDxgXFsCMGvAHp7fH
j+vOCQgxRWJSZZ76MAY2HFOuuaPKZh9bjEqn5poJz7yLDHBXXHYKq1h27MSz49aM
q0XH9UOxKHtO1loiRv82B1RMPL3Cbiia0UPLj58H2CfVmk9C9BcDhsjfn2WNPgoU
aUISOpKkAazIZWu7CT2FY203E7JDKzDbn6yhDVF33hwuHb419bvT122qPSw+UcOJ
0s/cfhcJGW/7wUpMF65GUZnKjRB/mVBXF8DV0A62Qwr48A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:22 2024 by rpki-client on console-fra.rpki-client.org