Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/wsZ-NuFcRkJK1YAap6X910CKpcA.roa
File: wsZ-NuFcRkJK1YAap6X910CKpcA.roa (raw, json)
Hash identifier: snZZ3NiQK9uUSjGg0hWgkHxnoc+gql0Vkk5daxwqqo4=
Subject key identifier: C2:C6:7E:36:E1:5C:46:42:4A:D5:80:1A:A7:A5:FD:D7:40:8A:A5:C0
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 018BF2BAAAD5351744D03E7638DE1929A191
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/wsZ-NuFcRkJK1YAap6X910CKpcA.roa
Signing time: Tue 21 Nov 2023 16:33:21 +0000
ROA not before: Tue 21 Nov 2023 16:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212828
IP address blocks: 2a10:9903:602::/48 maxlen: 48
2a10:9903:607::/48 maxlen: 48
2a10:9903:604::/48 maxlen: 48
2a10:9903:609::/48 maxlen: 48
2a10:9903:601::/48 maxlen: 48
2a10:9903:606::/48 maxlen: 48
2a10:9903:603::/48 maxlen: 48
2a10:9903:608::/48 maxlen: 48
2a10:9903:600::/48 maxlen: 48
2a10:9903:605::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:ba:aa:d5:35:17:44:d0:3e:76:38:de:19:29:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Nov 21 16:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c67e36e15c46424ad5801aa7a5fdd7408aa5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:87:37:23:41:26:52:dc:b9:c5:4c:71:ab:
a8:a5:b3:ce:b4:5b:de:4a:ce:7d:f9:db:c8:05:5f:
03:1b:74:eb:98:fd:bc:e7:53:d0:3c:e2:45:a0:4a:
0e:2f:f9:25:39:a9:db:05:b1:fe:b6:8e:df:4d:cb:
62:06:76:98:55:43:31:e9:be:eb:fe:63:55:c4:59:
48:b7:2d:db:f6:c7:9d:b7:5e:7b:bd:30:35:c5:2a:
e7:04:9e:44:b3:e8:64:cd:9b:dd:a0:8f:f5:84:fd:
c3:6e:c1:f1:08:80:3a:5b:e7:a6:9b:3b:92:fa:93:
ca:cd:90:15:01:c2:06:df:41:0b:0b:7b:5b:71:ff:
cb:cd:b9:71:92:c5:cc:0c:4c:a5:ec:70:b7:f0:24:
39:f3:aa:e0:09:39:f2:bf:17:1d:76:b3:11:b8:e1:
3f:49:5a:cb:fa:6e:02:6e:93:09:91:4e:60:5c:2a:
02:1c:89:ce:2b:8e:c4:67:9b:c7:72:5e:f8:63:e6:
25:2d:21:d6:5c:4a:a7:6e:6c:7d:f2:d9:38:d2:22:
56:ed:b6:41:ed:88:c0:17:bc:66:11:cc:05:53:4c:
4d:b4:1f:4c:d0:bc:cd:68:88:03:2f:b9:c9:0b:09:
54:7a:dc:3a:60:a7:87:c2:35:c4:9a:28:26:22:b8:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:7E:36:E1:5C:46:42:4A:D5:80:1A:A7:A5:FD:D7:40:8A:A5:C0
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/wsZ-NuFcRkJK1YAap6X910CKpcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9903:600::-2a10:9903:609:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:61:27:ce:9e:0e:35:76:3a:17:0f:1f:93:d0:71:9e:10:34:
77:fc:03:e2:a1:6a:0c:81:5c:d0:ea:27:59:15:6b:f6:14:21:
d9:37:62:69:19:02:18:43:49:d5:2e:bd:d0:28:3b:a5:9b:bb:
90:5a:c8:54:40:d7:bb:40:1d:89:5e:49:cd:6d:e1:74:4d:b2:
87:18:28:0a:5c:38:ba:34:57:cd:c7:b3:78:7d:55:07:10:ea:
fe:f7:b9:0f:5b:a7:f6:2a:32:2d:a2:78:b2:cd:92:fa:61:23:
f2:a4:c6:09:86:44:cf:7e:ed:b6:e4:45:a3:2d:55:33:83:3a:
cd:d5:ce:71:f5:68:f0:fb:db:12:71:2b:1a:97:1d:75:d2:c5:
b1:57:e6:d3:8a:96:96:06:f8:b2:03:8b:41:34:2c:30:1f:68:
fe:52:3d:b4:cd:c2:ee:00:23:34:f6:e2:0c:8d:42:dd:45:fd:
29:61:9f:1c:34:34:7b:20:5a:da:f0:e9:e8:46:e9:f1:bd:6f:
e4:75:6f:4b:be:e0:7f:f4:3f:69:93:40:8c:36:d6:ef:cc:27:
44:2d:63:06:df:ca:28:27:24:12:f4:db:28:38:d4:fc:bd:47:
9e:d5:09:0e:d7:54:79:77:5b:0b:11:03:e7:a0:60:8e:87:c3:
a7:6a:5f:c2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYvyuqrVNRdE0D52ON4ZKaGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0
MzI2MTIwHhcNMjMxMTIxMTYzMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM2N2UzNmUxNWM0NjQyNGFkNTgwMWFhN2E1ZmRkNzQwOGFhNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LyHNyNBJlLcucVMcauopbPOtFve
Ss59+dvIBV8DG3TrmP2851PQPOJFoEoOL/klOanbBbH+to7fTctiBnaYVUMx6b7r
/mNVxFlIty3b9sedt157vTA1xSrnBJ5Es+hkzZvdoI/1hP3DbsHxCIA6W+emmzuS
+pPKzZAVAcIG30ELC3tbcf/LzblxksXMDEyl7HC38CQ586rgCTnyvxcddrMRuOE/
SVrL+m4CbpMJkU5gXCoCHInOK47EZ5vHcl74Y+YlLSHWXEqnbmx98tk40iJW7bZB
7YjAF7xmEcwFU0xNtB9M0LzNaIgDL7nJCwlUetw6YKeHwjXEmigmIriDwQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMLGfjbhXEZCStWAGqel/ddAiqXAMB8GA1UdIwQY
MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt
MmNkZTY1ZjMxMTJhLzEvd3NaLU51RmNSa0pLMVlBYXA2WDkxMENLcGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh
LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgEqEJkD
BgMHASoQmQMGCDANBgkqhkiG9w0BAQsFAAOCAQEAlWEnzp4ONXY6Fw8fk9BxnhA0
d/wD4qFqDIFc0OonWRVr9hQh2TdiaRkCGENJ1S690Cg7pZu7kFrIVEDXu0AdiV5J
zW3hdE2yhxgoClw4ujRXzcezeH1VBxDq/ve5D1un9ioyLaJ4ss2S+mEj8qTGCYZE
z37ttuRFoy1VM4M6zdXOcfVo8PvbEnErGpcdddLFsVfm04qWlgb4sgOLQTQsMB9o
/lI9tM3C7gAjNPbiDI1C3UX9KWGfHDQ0eyBa2vDp6Ebp8b1v5HVvS77gf/Q/aZNA
jDbW78wnRC1jBt/KKCckEvTbKDjU/L1HntUJDtdUeXdbCxED56BgjofDp2pfwg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:45 2024 by rpki-client on console-ams.rpki-client.org