Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KBFyOYauW2OFt9jyD9BhjkUU6Gk.roa
File: KBFyOYauW2OFt9jyD9BhjkUU6Gk.roa (raw, json)
Hash identifier: LEkH6xeIb7RV7w2hUBuEPa07i+nQ1qUWKY+wTXwoN14=
Subject key identifier: 28:11:72:39:86:AE:5B:63:85:B7:D8:F2:0F:D0:61:8E:45:14:E8:69
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E809279A6EF5B4B3DEBB05B75493E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KBFyOYauW2OFt9jyD9BhjkUU6Gk.roa
Signing time: Mon 02 Jan 2023 06:15:02 +0000
ROA not before: Mon 02 Jan 2023 06:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211317
IP address blocks: 2a0c:b641:1b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jan 2023 22:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:80:92:79:a6:ef:5b:4b:3d:eb:b0:5b:75:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2811723986ae5b6385b7d8f20fd0618e4514e869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:58:fc:a5:7c:7a:48:d2:9d:8f:fb:b7:65:
60:7b:c6:ad:be:eb:b4:b8:be:60:c1:b7:c9:1a:c2:
4f:c1:7c:72:cb:df:8a:85:d6:e3:bb:68:0e:02:b0:
86:7c:e5:a3:91:f5:8f:5a:dd:b6:a7:e3:d3:0d:53:
fc:54:db:18:c2:c7:69:2f:a6:ca:0c:5a:96:ab:6d:
0e:55:67:93:f3:ad:f6:5a:b0:1a:74:67:e6:23:40:
66:9f:03:ff:6e:ed:48:4a:60:77:c1:12:5b:10:ea:
95:41:06:1f:68:77:5c:9b:4e:db:66:1c:54:7a:a4:
f0:e6:5b:56:33:5d:74:66:54:71:62:fc:59:b8:6c:
03:41:85:d4:3e:91:1a:95:ca:42:9f:76:9d:88:19:
66:89:aa:c1:e0:3e:06:44:f6:f7:8c:34:ce:9e:cb:
4b:bf:a7:d0:53:d3:df:13:7e:12:3a:0f:06:12:28:
b2:d9:e0:36:fa:d9:26:7b:22:23:ac:84:ca:91:a8:
4d:6d:c5:f2:32:16:2c:70:df:f2:5d:e9:de:5f:d6:
11:65:63:41:f9:cc:55:08:64:3d:cd:f8:86:14:d3:
7c:fa:e5:28:f8:22:81:96:1d:48:09:23:97:39:58:
36:42:44:00:b9:eb:f2:27:b2:0e:47:67:8b:5a:a6:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:72:39:86:AE:5B:63:85:B7:D8:F2:0F:D0:61:8E:45:14:E8:69
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KBFyOYauW2OFt9jyD9BhjkUU6Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
5a:c2:f4:d1:5b:b9:f8:97:94:7c:bd:84:f4:1b:fa:07:b3:40:
ac:9d:59:86:95:ba:95:d8:20:db:45:7a:8b:0d:9d:5a:fc:19:
45:81:88:cc:5a:b1:3c:c0:2a:fd:9c:3a:35:0c:1a:28:35:3b:
ec:2f:df:7d:50:60:14:76:04:db:82:1b:f2:db:c4:ff:09:1d:
e6:86:d1:d1:2c:ca:48:fe:bd:f1:38:5d:48:74:c0:b1:88:99:
3e:7c:7f:32:42:a4:6a:4e:a0:74:66:11:51:59:44:e7:5f:5a:
42:cd:91:64:f1:b9:54:5e:1a:b0:0b:e5:53:31:df:2e:6c:df:
8e:32:3d:27:33:9b:bb:a0:c9:10:2e:d3:0e:bd:20:35:a3:12:
b3:a2:8f:97:94:57:ac:ec:01:04:d7:a4:b2:cc:62:96:6d:d5:
59:92:19:9c:be:a8:b6:76:b9:ce:11:d6:e7:79:97:97:5d:7d:
26:84:01:91:8a:54:08:c4:47:19:e8:e8:7c:f7:41:57:2d:88:
73:82:47:a4:c4:e7:a1:99:4a:42:bd:82:6e:a9:ca:b4:f4:95:
4a:e8:2d:74:27:28:50:a3:f2:6b:f9:6e:55:22:05:7c:34:3a:
c9:24:b2:0f:5e:c8:df:42:ed:b4:90:a3:ac:66:e4:18:6c:36:
47:80:8c:30
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHoCSeabvW0s967BbdUk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODExNzIzOTg2YWU1YjYzODViN2Q4ZjIwZmQwNjE4ZTQ1MTRlODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldNY/KV8ekjSnY/7t2Vge8atvuu0
uL5gwbfJGsJPwXxyy9+Khdbju2gOArCGfOWjkfWPWt22p+PTDVP8VNsYwsdpL6bK
DFqWq20OVWeT8632WrAadGfmI0BmnwP/bu1ISmB3wRJbEOqVQQYfaHdcm07bZhxU
eqTw5ltWM110ZlRxYvxZuGwDQYXUPpEalcpCn3adiBlmiarB4D4GRPb3jDTOnstL
v6fQU9PfE34SOg8GEiiy2eA2+tkmeyIjrITKkahNbcXyMhYscN/yXeneX9YRZWNB
+cxVCGQ9zfiGFNN8+uUo+CKBlh1ICSOXOVg2QkQAuevyJ7IOR2eLWqYhYQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCgRcjmGrltjhbfY8g/QYY5FFOhpMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvS0JGeU9ZYXVXMk9GdDlqeUQ5Qmhqa1VVNkdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGw
MA0GCSqGSIb3DQEBCwUAA4IBAQBawvTRW7n4l5R8vYT0G/oHs0CsnVmGlbqV2CDb
RXqLDZ1a/BlFgYjMWrE8wCr9nDo1DBooNTvsL999UGAUdgTbghvy28T/CR3mhtHR
LMpI/r3xOF1IdMCxiJk+fH8yQqRqTqB0ZhFRWUTnX1pCzZFk8blUXhqwC+VTMd8u
bN+OMj0nM5u7oMkQLtMOvSA1oxKzoo+XlFes7AEE16SyzGKWbdVZkhmcvqi2drnO
EdbneZeXXX0mhAGRilQIxEcZ6Oh890FXLYhzgkekxOehmUpCvYJuqcq09JVK6C10
JyhQo/Jr+W5VIgV8NDrJJLIPXsjfQu20kKOsZuQYbDZHgIww
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org