Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lUFZy_XPe5Yp4U8INN7FfhIn7As.roa
File: lUFZy_XPe5Yp4U8INN7FfhIn7As.roa (raw, json)
Hash identifier: Q4TZpejkPuuRjgODfA4eskoejeZSwmTKuznAoLrwU9Q=
Subject key identifier: 95:41:59:CB:F5:CF:7B:96:29:E1:4F:08:34:DE:C5:7E:12:27:EC:0B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01885F012D4AD110C44F2B3DDFBCBCEE6F29
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lUFZy_XPe5Yp4U8INN7FfhIn7As.roa
Signing time: Sat 27 May 2023 20:58:12 +0000
ROA not before: Sat 27 May 2023 20:58:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210281
IP address blocks: 2a0c:b641:820::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:01:2d:4a:d1:10:c4:4f:2b:3d:df:bc:bc:ee:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: May 27 20:58:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=954159cbf5cf7b9629e14f0834dec57e1227ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:54:15:8c:74:75:08:5e:0f:91:fb:f6:d2:
ed:71:83:d3:eb:a7:d1:2b:e7:57:e8:6b:7a:92:39:
b5:99:59:a1:fa:4f:47:85:3c:f7:95:59:20:91:5a:
d6:79:37:92:ae:0b:31:d7:d5:3b:84:fa:17:e7:13:
82:66:02:59:ac:1b:1c:7a:8b:d3:30:a8:6a:cb:1a:
b9:bc:fd:34:0c:6e:86:db:8b:17:cf:d2:96:3a:8a:
94:b7:a6:14:f1:21:4f:bb:d7:b5:29:06:e6:26:90:
2b:1b:ae:3d:e6:10:e2:a0:f1:8b:a5:1d:de:91:b6:
ab:ed:30:1c:ec:1a:5d:62:7f:d2:4e:42:53:01:22:
37:29:57:1e:6b:fd:3c:e8:e7:5e:f1:cb:af:79:94:
a7:40:bd:1f:5d:fe:32:15:de:46:8b:d4:a5:63:6f:
89:14:c5:70:5c:1e:8e:33:ba:93:c7:28:3d:02:13:
79:70:dd:3a:9c:cc:5d:49:29:1d:00:bd:74:f9:81:
f9:58:73:55:a9:1c:52:fa:c5:b8:92:7e:ce:cc:cd:
69:67:33:9d:ab:ba:28:8c:b0:b0:40:61:cd:c5:b6:
ab:a7:bd:b2:ca:c9:bc:8f:0c:fa:a9:7f:3e:59:2f:
5b:e2:c3:83:c3:56:63:2c:91:a0:53:6b:0a:a1:c0:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:59:CB:F5:CF:7B:96:29:E1:4F:08:34:DE:C5:7E:12:27:EC:0B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/lUFZy_XPe5Yp4U8INN7FfhIn7As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:820::/44
Signature Algorithm: sha256WithRSAEncryption
2a:98:b7:e6:99:fa:5e:34:1f:72:f6:1d:80:51:c7:57:82:71:
6d:5d:7e:28:23:a7:95:f4:0c:e9:03:f1:fa:6d:a5:1d:bf:9f:
42:c4:1f:81:7b:ad:17:3a:bd:23:09:4c:91:22:bf:4e:7d:e7:
aa:73:ba:10:a7:cc:c4:90:f7:20:2f:6a:a0:d1:7e:4c:be:b9:
cc:75:22:93:5e:83:2f:11:5f:1d:d5:ee:e9:91:ac:23:66:e8:
37:f5:ac:da:0b:61:a7:7d:63:7e:2a:18:18:4d:5a:65:29:6a:
17:80:5a:75:ff:aa:06:a3:76:7b:db:41:15:fe:25:f1:85:e2:
84:45:48:63:00:88:a8:9a:ae:58:32:42:16:f4:a5:d6:89:08:
b2:bc:11:76:56:88:2e:28:50:b3:61:7b:19:b9:7e:c4:2f:20:
26:cc:c5:28:d7:21:53:bd:1c:6c:e1:b3:9b:3d:5c:8a:60:be:
db:26:b8:d5:40:55:82:a7:f3:7f:31:ec:0d:f4:58:0e:15:7d:
ec:96:e3:87:9c:c5:b4:3f:ac:55:93:a5:43:ec:ca:43:3f:47:
3a:a1:82:9c:d9:41:71:16:7f:48:cd:d3:91:ee:31:fd:3a:b8:
54:9d:0e:f2:4d:4f:36:3a:3c:ca:91:2c:5f:22:b5:3b:14:26:
24:fb:3f:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYhfAS1K0RDETys937y87m8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwNTI3MjA1ODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTQxNTljYmY1Y2Y3Yjk2MjllMTRmMDgzNGRlYzU3ZTEyMjdlYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFBUFYx0dQheD5H79tLtcYPT66fR
K+dX6Gt6kjm1mVmh+k9HhTz3lVkgkVrWeTeSrgsx19U7hPoX5xOCZgJZrBsceovT
MKhqyxq5vP00DG6G24sXz9KWOoqUt6YU8SFPu9e1KQbmJpArG6495hDioPGLpR3e
kbar7TAc7BpdYn/STkJTASI3KVcea/086Ode8cuveZSnQL0fXf4yFd5Gi9SlY2+J
FMVwXB6OM7qTxyg9AhN5cN06nMxdSSkdAL10+YH5WHNVqRxS+sW4kn7OzM1pZzOd
q7oojLCwQGHNxbarp72yysm8jwz6qX8+WS9b4sODw1ZjLJGgU2sKocDzWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJVBWcv1z3uWKeFPCDTexX4SJ+wLMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvbFVGWnlfWFBlNVlwNFU4SU5ON0ZmaEluN0FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgg
MA0GCSqGSIb3DQEBCwUAA4IBAQAqmLfmmfpeNB9y9h2AUcdXgnFtXX4oI6eV9Azp
A/H6baUdv59CxB+Be60XOr0jCUyRIr9Ofeeqc7oQp8zEkPcgL2qg0X5MvrnMdSKT
XoMvEV8d1e7pkawjZug39azaC2GnfWN+KhgYTVplKWoXgFp1/6oGo3Z720EV/iXx
heKERUhjAIiomq5YMkIW9KXWiQiyvBF2VoguKFCzYXsZuX7ELyAmzMUo1yFTvRxs
4bObPVyKYL7bJrjVQFWCp/N/MewN9FgOFX3sluOHnMW0P6xVk6VD7MpDP0c6oYKc
2UFxFn9IzdOR7jH9OrhUnQ7yTU82OjzKkSxfIrU7FCYk+z/F
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org