Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/aR6wJ_57kS7su2d4UeZPiNpKTgk.roa
File: aR6wJ_57kS7su2d4UeZPiNpKTgk.roa (raw, json)
Hash identifier: he9u2xExOyielqvG4U7VMyJQKsf4PF08bpN+um9jvEo=
Subject key identifier: 69:1E:B0:27:FE:7B:91:2E:EC:BB:67:78:51:E6:4F:88:DA:4A:4E:09
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 018B6D3389DDE1A42E0CBA2035BCDE121B50
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/aR6wJ_57kS7su2d4UeZPiNpKTgk.roa
Signing time: Thu 26 Oct 2023 18:16:16 +0000
ROA not before: Thu 26 Oct 2023 18:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216333
IP address blocks: 2a13:d6c0:20::/48 maxlen: 48
2a13:d6c0:110::/48 maxlen: 48
2a13:d6c0:100::/48 maxlen: 48
2a13:d6c0:101::/48 maxlen: 48
2a13:d6c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:33:89:dd:e1:a4:2e:0c:ba:20:35:bc:de:12:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Oct 26 18:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=691eb027fe7b912eecbb677851e64f88da4a4e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:17:f1:d2:4f:54:cb:99:56:0d:5d:71:cf:
bf:31:cf:a8:08:f6:4e:9e:5f:10:66:7b:8b:05:dd:
67:c0:e0:3e:f2:1b:35:86:a2:73:50:b0:62:59:51:
2b:4b:3b:da:33:7b:29:c3:d4:ed:99:b2:1d:fa:ac:
6e:96:3d:ad:1c:01:f1:a3:0b:8f:57:e5:53:17:30:
0a:22:1f:63:cd:3b:d3:5d:a7:2a:ec:5a:d8:1c:f0:
ef:a2:6a:12:ef:64:c4:01:c8:94:03:db:5c:0e:0c:
b1:85:ab:87:72:b6:00:8a:f8:2b:2b:85:3a:ed:aa:
44:89:a8:ae:e1:8f:9c:30:5a:54:56:dc:cf:c7:98:
2c:72:34:b6:89:21:48:0c:62:98:9b:2b:ec:dd:55:
ca:89:ba:a8:34:ad:af:a7:42:5d:f2:3b:fb:15:59:
90:a8:9c:12:5f:71:45:8f:13:cb:04:5f:46:fd:6c:
08:61:63:43:56:5d:ff:88:65:8f:15:94:81:4c:71:
37:bf:d3:21:5f:93:48:f0:33:36:36:c6:59:f8:66:
c8:b2:73:84:25:b1:35:4b:c0:49:4f:f3:85:3c:5c:
33:8c:f6:74:ba:53:51:37:31:1e:7f:b5:64:a1:30:
2e:f1:67:df:d3:13:97:73:2d:5e:02:6e:0d:58:d4:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:B0:27:FE:7B:91:2E:EC:BB:67:78:51:E6:4F:88:DA:4A:4E:09
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/aR6wJ_57kS7su2d4UeZPiNpKTgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d6c0:1::/48
2a13:d6c0:20::/48
2a13:d6c0:100::/47
2a13:d6c0:110::/48
Signature Algorithm: sha256WithRSAEncryption
94:a6:b0:b0:6f:55:8a:8a:38:a4:67:24:03:e3:78:ce:b8:d8:
8f:13:a6:65:b7:72:75:34:d5:bb:c1:4c:2a:75:6b:2e:be:64:
c2:4e:48:3a:4e:41:2d:fd:aa:c2:8e:d6:75:77:d6:fc:e0:af:
7b:52:1a:3f:61:30:6a:46:0f:bc:ed:d3:c1:d2:65:54:af:b3:
98:5e:99:d2:4f:2d:d1:fa:6a:95:e0:a2:7a:1d:21:1a:c9:a9:
9f:f0:e5:ab:a8:22:a7:87:79:e4:1c:2e:ae:f1:4d:d2:c9:9f:
6b:42:77:a8:43:d0:22:83:86:7a:69:e9:b4:e9:d8:0c:35:d7:
53:f1:c3:b0:b1:6d:c5:ab:44:23:00:93:67:23:87:5f:02:6b:
70:a5:44:14:bc:0a:5e:18:ea:8f:eb:c0:2c:d9:03:ab:a5:49:
f8:62:79:d3:80:53:34:77:5c:58:96:2f:48:8b:ae:e0:12:80:
9e:9a:f9:b4:8c:58:4a:f6:6e:42:ca:38:f9:67:ac:03:2f:30:
8b:fb:b6:8f:82:0f:d2:d7:ef:01:ad:61:a9:de:d8:0b:99:03:
af:3b:25:89:f2:f5:bd:cd:20:2b:d8:d2:c4:76:52:6b:83:5b:
32:7f:1a:2d:33:40:be:54:87:13:a3:98:d1:c7:30:9b:1c:12:
2b:da:43:64
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYttM4nd4aQuDLogNbzeEhtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MTg2MTlhZTNjOWI1OWQ4NjhiY2RmY2M3ZTczZDgxM2Y4
NTA0ZTUwHhcNMjMxMDI2MTgxNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTFlYjAyN2ZlN2I5MTJlZWNiYjY3Nzg1MWU2NGY4OGRhNGE0ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPMX8dJPVMuZVg1dcc+/Mc+oCPZO
nl8QZnuLBd1nwOA+8hs1hqJzULBiWVErSzvaM3spw9TtmbId+qxulj2tHAHxowuP
V+VTFzAKIh9jzTvTXacq7FrYHPDvomoS72TEAciUA9tcDgyxhauHcrYAivgrK4U6
7apEiaiu4Y+cMFpUVtzPx5gscjS2iSFIDGKYmyvs3VXKibqoNK2vp0Jd8jv7FVmQ
qJwSX3FFjxPLBF9G/WwIYWNDVl3/iGWPFZSBTHE3v9MhX5NI8DM2NsZZ+GbIsnOE
JbE1S8BJT/OFPFwzjPZ0ulNRNzEef7VkoTAu8Wff0xOXcy1eAm4NWNQkUwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGkesCf+e5Eu7LtneFHmT4jaSk4JMB8GA1UdIwQY
MBaAFPYYYZrjybWdhovN/MfnPYE/hQTlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQt
ZDk3N2IzODlkNWFiLzEvYVI2d0pfNTdrUzdzdTJkNFVlWlBpTnBLVGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQtZDk3N2IzODlkNWFi
LzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKhPWwAAB
AwcAKhPWwAAgAwcBKhPWwAEAAwcAKhPWwAEQMA0GCSqGSIb3DQEBCwUAA4IBAQCU
prCwb1WKijikZyQD43jOuNiPE6Zlt3J1NNW7wUwqdWsuvmTCTkg6TkEt/arCjtZ1
d9b84K97Uho/YTBqRg+87dPB0mVUr7OYXpnSTy3R+mqV4KJ6HSEayamf8OWrqCKn
h3nkHC6u8U3SyZ9rQneoQ9Aig4Z6aem06dgMNddT8cOwsW3Fq0QjAJNnI4dfAmtw
pUQUvApeGOqP68As2QOrpUn4YnnTgFM0d1xYli9Ii67gEoCemvm0jFhK9m5Cyjj5
Z6wDLzCL+7aPgg/S1+8BrWGp3tgLmQOvOyWJ8vW9zSAr2NLEdlJrg1syfxotM0C+
VIcTo5jRxzCbHBIr2kNk
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org