Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/3K-DZA4tiH3-V2RuG6I0wJGHJOI.roa
File: 3K-DZA4tiH3-V2RuG6I0wJGHJOI.roa (raw, json)
Hash identifier: vKIA6L0msTuOXnEHESio1skyZr6AagQ4EHdRDWDV9BA=
Subject key identifier: DC:AF:83:64:0E:2D:88:7D:FE:57:64:6E:1B:A2:34:C0:91:87:24:E2
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 0187B847BC669CE86970A24D58DDAB52AFAB
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/3K-DZA4tiH3-V2RuG6I0wJGHJOI.roa
Signing time: Tue 25 Apr 2023 11:58:41 +0000
ROA not before: Tue 25 Apr 2023 11:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15922
IP address blocks: 217.18.64.0/20 maxlen: 20
178.255.192.0/21 maxlen: 21
2a00:19c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:47:bc:66:9c:e8:69:70:a2:4d:58:dd:ab:52:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Apr 25 11:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcaf83640e2d887dfe57646e1ba234c0918724e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:0a:47:ac:4f:46:3f:99:22:18:b3:fc:bf:
df:8c:02:9a:54:0c:f1:0b:b5:53:78:9c:26:a5:7a:
c8:7e:bd:62:9e:cc:51:9d:a6:78:45:40:94:80:48:
54:a5:bd:3c:1d:fd:a2:2a:83:36:f1:41:87:6e:ee:
c4:eb:5b:6d:f8:f4:5c:3f:a1:f3:fb:3f:75:32:77:
51:58:85:17:d3:d7:ab:a2:6f:7a:24:b4:d8:c7:70:
94:06:26:48:b5:a6:0e:7b:cf:d9:9e:85:cc:d9:ad:
d9:f2:5a:9c:d6:77:1e:69:28:9c:6c:70:1f:10:c4:
0e:b7:55:f3:f3:88:48:2c:5c:fe:f8:07:3e:37:58:
44:3f:5e:cb:ca:fc:a5:16:0a:99:0b:8c:5c:f8:5c:
1c:31:0b:2c:2d:76:c5:e0:5f:e7:d2:b0:5f:38:dd:
95:86:95:57:e3:b7:6f:5e:6f:2c:8b:3e:70:36:29:
07:c2:ea:c5:e1:01:9f:74:ca:4f:c7:55:7e:f0:9e:
df:c9:4e:b7:f3:f3:ee:d7:4b:82:a0:0c:e1:5d:e9:
f5:be:b0:ca:dc:2d:1b:e1:47:6c:0c:89:94:97:cf:
31:53:d6:a2:57:65:b1:5e:8f:f1:ea:d5:5e:43:0b:
b3:68:ce:73:95:48:4d:1c:37:41:c7:f7:98:75:41:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AF:83:64:0E:2D:88:7D:FE:57:64:6E:1B:A2:34:C0:91:87:24:E2
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/3K-DZA4tiH3-V2RuG6I0wJGHJOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.192.0/21
217.18.64.0/20
IPv6:
2a00:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
28:be:fa:15:29:57:16:70:d4:b2:dc:aa:2d:5e:6e:50:ef:ea:
30:64:df:9b:0c:6d:77:06:78:95:0a:4e:45:cd:d7:6e:c3:32:
32:16:ee:32:6c:64:a7:d9:be:35:6b:a1:ec:b3:21:c5:d8:dd:
6f:f3:68:b5:d3:d8:35:a5:03:93:5b:66:76:ed:ee:eb:e6:ca:
0d:c2:bb:86:4b:a3:0c:16:ce:b2:d3:f9:bb:27:2c:37:b1:37:
b7:de:d9:3b:f1:aa:e6:7d:d2:98:8d:6c:f1:c2:ee:52:1e:87:
2e:6e:41:7f:42:02:22:25:05:d5:bd:db:19:6c:e1:03:73:5d:
6f:2a:2b:72:3b:5f:79:e2:5f:e1:b0:c9:2c:27:03:a8:20:79:
33:7a:ec:41:77:af:a5:72:aa:7a:cc:02:7f:c3:e3:8a:c1:20:
ba:04:67:96:bc:3a:73:7e:af:60:e7:2b:69:47:ba:dc:4a:fd:
ac:ed:25:c8:60:ed:6d:a3:8d:62:3f:13:e4:1e:a1:16:e5:64:
e0:e7:4e:5c:0f:c6:44:e7:6b:94:e2:c3:20:be:46:be:25:af:
33:12:a3:37:54:15:b3:5e:8e:38:c7:09:78:a7:50:37:53:bb:
af:56:f8:6b:bf:91:81:fc:6c:4e:bf:b9:4e:b3:a5:0a:c6:51:
81:75:31:b2
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYe4R7xmnOhpcKJNWN2rUq+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YThlOTNkM2Y1OTBmNDQ1MGQxZGIzYzIwNzQ1OTgyNDQz
NTNlOTMwHhcNMjMwNDI1MTE1ODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2FmODM2NDBlMmQ4ODdkZmU1NzY0NmUxYmEyMzRjMDkxODcyNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPYKR6xPRj+ZIhiz/L/fjAKaVAzx
C7VTeJwmpXrIfr1insxRnaZ4RUCUgEhUpb08Hf2iKoM28UGHbu7E61tt+PRcP6Hz
+z91MndRWIUX09erom96JLTYx3CUBiZItaYOe8/ZnoXM2a3Z8lqc1nceaSicbHAf
EMQOt1Xz84hILFz++Ac+N1hEP17LyvylFgqZC4xc+FwcMQssLXbF4F/n0rBfON2V
hpVX47dvXm8siz5wNikHwurF4QGfdMpPx1V+8J7fyU638/Pu10uCoAzhXen1vrDK
3C0b4UdsDImUl88xU9aiV2WxXo/x6tVeQwuzaM5zlUhNHDdBx/eYdUH3RwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNyvg2QOLYh9/ldkbhuiNMCRhyTiMB8GA1UdIwQY
MBaAFGio6T0/WQ9EUNHbPCB0WYJENT6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMt
MjVkZDRjYmIzNjk4LzEvM0stRFpBNHRpSDMtVjJSdUc2STB3SkdISk9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYjNiMjktODFlNS00NWEyLTgxZWMtMjVkZDRjYmIzNjk4
LzEvYUtqcFBUOVpEMFJRMGRzOElIUlpna1ExUHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsv/AAwQE
2RJAMA0EAgACMAcDBQAqABnAMA0GCSqGSIb3DQEBCwUAA4IBAQAovvoVKVcWcNSy
3KotXm5Q7+owZN+bDG13BniVCk5FzdduwzIyFu4ybGSn2b41a6HssyHF2N1v82i1
09g1pQOTW2Z27e7r5soNwruGS6MMFs6y0/m7Jyw3sTe33tk78armfdKYjWzxwu5S
HocubkF/QgIiJQXVvdsZbOEDc11vKityO1954l/hsMksJwOoIHkzeuxBd6+lcqp6
zAJ/w+OKwSC6BGeWvDpzfq9g5ytpR7rcSv2s7SXIYO1to41iPxPkHqEW5WTg505c
D8ZE52uU4sMgvka+Ja8zEqM3VBWzXo44xwl4p1A3U7uvVvhrv5GB/GxOv7lOs6UK
xlGBdTGy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org