Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/nX8kId2YchRjA2rA9BIbV7SnuLQ.roa
File: nX8kId2YchRjA2rA9BIbV7SnuLQ.roa (raw, json)
Hash identifier: Nwd0wKDGT0DNlXtL0kkUW2nQW17NuoplZVsVdF5tp4Q=
Subject key identifier: 9D:7F:24:21:DD:98:72:14:63:03:6A:C0:F4:12:1B:57:B4:A7:B8:B4
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 01856D5CFB1F28970F2832E54801844F8FC5
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/nX8kId2YchRjA2rA9BIbV7SnuLQ.roa
Signing time: Sun 01 Jan 2023 12:44:48 +0000
ROA not before: Sun 01 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51011
IP address blocks: 2a03:5a00:2e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:fb:1f:28:97:0f:28:32:e5:48:01:84:4f:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jan 1 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d7f2421dd98721463036ac0f4121b57b4a7b8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:13:5e:ca:dd:f6:53:f4:31:25:0c:5f:18:
36:9b:9f:bb:c3:d1:c0:3a:f5:7d:97:98:50:f3:1f:
0a:23:05:1e:89:54:bb:b2:69:43:9e:85:d2:eb:63:
15:35:77:99:ad:88:77:81:10:d6:9a:3f:6f:21:51:
2e:bc:e5:5a:9a:60:cb:01:23:80:b9:dc:5d:7f:75:
6f:8d:38:9f:57:4c:68:ce:9f:f5:97:84:04:e7:1e:
05:90:ac:12:ca:00:7f:36:ee:6d:f7:47:94:90:65:
a5:dc:c0:00:63:13:53:42:aa:10:42:7a:bc:b6:d1:
31:24:57:c5:4b:f8:ee:b2:cf:ed:82:a7:aa:e7:cb:
e9:eb:7f:eb:18:73:9a:9c:e8:3d:e7:49:dd:4b:a5:
7f:14:dd:e6:c9:68:e1:9f:87:a8:ad:92:8f:fa:1c:
03:3d:b8:b5:4c:12:f8:a0:77:e8:22:a0:88:76:f5:
e7:b5:8a:29:77:e4:89:38:e9:23:67:5f:e4:d0:61:
18:14:0a:8a:3b:d2:29:9b:5a:fa:06:5a:47:29:75:
6a:0d:02:cc:aa:7c:f9:2a:e0:89:10:76:c8:1d:40:
58:38:f8:10:7e:87:25:2d:20:b8:4a:e0:e4:2a:9f:
20:98:4a:2f:bc:80:09:d6:46:3a:4a:7b:be:35:57:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:24:21:DD:98:72:14:63:03:6A:C0:F4:12:1B:57:B4:A7:B8:B4
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/nX8kId2YchRjA2rA9BIbV7SnuLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5a00:2e::/48
Signature Algorithm: sha256WithRSAEncryption
30:55:7f:c6:e4:57:cd:e1:a9:86:92:cb:f7:26:a8:9b:41:19:
0a:0a:37:8e:8f:56:7c:d0:25:38:05:8b:45:fd:b1:fb:f2:49:
f0:a7:1d:dc:1b:ba:28:7c:3b:94:ce:96:19:ec:13:e2:b6:dd:
1f:28:3b:72:cf:48:58:74:f0:d6:df:6f:4b:d3:7d:22:88:f3:
4c:71:cd:0d:b4:30:ee:ba:26:fc:f6:7b:8a:16:bd:ac:01:e1:
8c:1e:49:f1:6d:6c:54:9a:48:18:67:1d:a5:d1:5e:f1:32:01:
f0:d5:15:af:73:8d:ad:71:67:d5:8e:66:03:69:7c:7c:94:75:
02:da:b4:60:6e:09:0e:15:33:9e:0b:80:88:c5:ec:a7:1c:e9:
a0:0a:75:be:32:50:d5:83:df:e2:e7:dd:57:a0:3e:19:7f:2f:
59:d2:19:b5:95:cb:e6:8f:8a:dd:56:8e:fb:5a:ce:1a:0b:36:
09:94:55:01:54:b9:26:c8:f0:11:e3:eb:a0:04:91:83:2b:62:
fa:85:76:28:03:d4:19:46:ba:a1:15:69:d5:f5:cd:11:f1:d7:
3a:88:7d:a7:af:f7:7d:b5:cb:98:35:01:fa:e7:5c:f6:88:38:
56:c9:19:63:da:ea:4a:49:66:a3:bb:29:51:d8:11:40:fb:40:
4e:95:7b:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtXPsfKJcPKDLlSAGET4/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMzk4MjViMjY3NzVlMTU1MTA3MmY0NTdkMWVkZmQ5ZDBl
YmUyZGYwHhcNMjMwMTAxMTI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDdmMjQyMWRkOTg3MjE0NjMwMzZhYzBmNDEyMWI1N2I0YTdiOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5QTXsrd9lP0MSUMXxg2m5+7w9HA
OvV9l5hQ8x8KIwUeiVS7smlDnoXS62MVNXeZrYh3gRDWmj9vIVEuvOVammDLASOA
udxdf3VvjTifV0xozp/1l4QE5x4FkKwSygB/Nu5t90eUkGWl3MAAYxNTQqoQQnq8
ttExJFfFS/juss/tgqeq58vp63/rGHOanOg950ndS6V/FN3myWjhn4eorZKP+hwD
Pbi1TBL4oHfoIqCIdvXntYopd+SJOOkjZ1/k0GEYFAqKO9Ipm1r6BlpHKXVqDQLM
qnz5KuCJEHbIHUBYOPgQfoclLSC4SuDkKp8gmEovvIAJ1kY6Snu+NVf+9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ1/JCHdmHIUYwNqwPQSG1e0p7i0MB8GA1UdIwQY
MBaAFH45glsmd14VUQcvRX0e39nQ6+LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvblg4a0lkMlljaFJqQTJyQTlCSWJWN1NudUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvZmptQ1d5WjNYaFZSQnk5RmZSN2YyZERyNHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNaAAAu
MA0GCSqGSIb3DQEBCwUAA4IBAQAwVX/G5FfN4amGksv3JqibQRkKCjeOj1Z80CU4
BYtF/bH78knwpx3cG7oofDuUzpYZ7BPitt0fKDtyz0hYdPDW329L030iiPNMcc0N
tDDuuib89nuKFr2sAeGMHknxbWxUmkgYZx2l0V7xMgHw1RWvc42tcWfVjmYDaXx8
lHUC2rRgbgkOFTOeC4CIxeynHOmgCnW+MlDVg9/i591XoD4Zfy9Z0hm1lcvmj4rd
Vo77Ws4aCzYJlFUBVLkmyPAR4+ugBJGDK2L6hXYoA9QZRrqhFWnV9c0R8dc6iH2n
r/d9tcuYNQH651z2iDhWyRlj2upKSWajuylR2BFA+0BOlXvn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org