Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/L60cKINBiO4lsCndEjcx-IrBJHc.roa
File: L60cKINBiO4lsCndEjcx-IrBJHc.roa (raw, json)
Hash identifier: feb0ByTk8cqx0hm3mNrFYnHvHEl/k5CleJJBWqvLPaU=
Subject key identifier: 2F:AD:1C:28:83:41:88:EE:25:B0:29:DD:12:37:31:F8:8A:C1:24:77
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 01856FD4F8EB359610421CBB3175D653BB8D
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/L60cKINBiO4lsCndEjcx-IrBJHc.roa
Signing time: Mon 02 Jan 2023 00:15:06 +0000
ROA not before: Mon 02 Jan 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200334
IP address blocks: 2a0c:f587:ffff::/48 maxlen: 48
2a0c:f587:fffe::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f8:eb:35:96:10:42:1c:bb:31:75:d6:53:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jan 2 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fad1c28834188ee25b029dd123731f88ac12477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:2e:96:2c:bd:44:0b:9a:90:8b:a5:97:ff:
b1:6c:10:b0:f3:30:68:fb:4c:70:f9:77:0f:9b:fd:
10:18:46:25:4b:1f:82:10:01:2a:84:b5:8a:b0:5f:
8e:41:f7:bb:c5:fb:d3:f5:f8:05:97:6c:29:97:02:
9f:cc:cc:e0:7a:3e:b2:a9:09:ac:ee:19:bd:15:06:
5d:22:4e:61:92:cc:d7:e3:cc:76:a0:c2:1d:72:f8:
f8:ca:b4:8f:8d:c8:58:8a:a5:c0:62:47:98:d0:ef:
26:d5:1a:a3:9a:26:ea:4f:8a:63:b6:21:ff:d0:72:
72:3e:81:d6:5e:e7:27:e5:8b:6d:0a:b2:43:41:ea:
48:ce:a7:6a:f6:b9:f6:a4:c0:b1:13:a8:b5:ca:71:
7e:79:93:b2:e7:a1:0a:f5:30:04:6a:77:27:b7:a9:
66:b6:46:e0:ba:45:78:76:c1:40:64:93:f3:22:67:
f0:62:d3:0e:0b:81:d8:3c:25:38:b6:87:ab:fd:d0:
9f:cd:03:d1:22:20:5f:0b:8a:e0:f2:ae:b0:06:6c:
fa:79:e1:81:45:98:00:78:89:aa:fd:12:44:01:c9:
51:fb:f6:37:a6:6b:d1:f5:35:8d:f8:b4:ab:dc:6d:
fe:f8:fd:d1:9a:58:36:01:f4:b6:9f:21:24:e7:14:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:1C:28:83:41:88:EE:25:B0:29:DD:12:37:31:F8:8A:C1:24:77
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/L60cKINBiO4lsCndEjcx-IrBJHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f587:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
8f:0e:58:d2:32:0e:d6:11:61:fd:5a:20:07:d2:a1:11:11:2c:
7b:79:09:32:53:15:f1:cf:ae:87:45:ff:62:df:c2:5d:d1:4e:
db:82:4a:d4:bf:ff:19:e0:41:c5:63:12:70:fd:b0:15:86:f4:
3c:86:4b:f6:16:10:73:72:45:86:cc:fc:49:af:d3:0e:61:6a:
0a:e3:67:d4:8a:2d:18:ff:33:ce:7b:9a:86:12:5f:c8:77:04:
1b:75:43:44:18:b7:22:70:fd:b8:2a:4d:82:44:a7:5f:dd:f4:
f6:c5:b4:2f:17:c1:19:82:da:0c:94:4e:15:c0:4c:56:a3:89:
46:20:e9:bd:8c:70:df:fe:f1:3e:91:cc:2d:63:6d:46:15:4c:
b9:73:c9:6a:64:cc:c1:bc:db:c4:50:20:35:21:56:7a:cb:51:
93:fc:e1:a9:03:b0:4a:86:b6:42:e0:57:f8:83:43:be:9c:38:
31:72:25:64:d5:14:33:ff:5b:6e:d9:28:89:75:df:b0:95:04:
25:cb:15:ab:9c:3f:03:85:07:0b:cf:db:80:da:b4:40:d0:22:
76:77:5e:97:8c:b9:bc:2c:a0:3f:c5:19:bb:2a:53:44:33:8f:
d1:1d:c8:a7:2f:82:30:4c:d0:b8:18:18:cc:d4:23:6a:ff:af:
ff:81:3f:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVv1PjrNZYQQhy7MXXWU7uNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzUxODY1Yjc2N2RkN2I5YzIyMzE0YmZjODA1NWJkNTdk
YjAwNjUwHhcNMjMwMTAyMDAxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmFkMWMyODgzNDE4OGVlMjViMDI5ZGQxMjM3MzFmODhhYzEyNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqculiy9RAuakIull/+xbBCw8zBo
+0xw+XcPm/0QGEYlSx+CEAEqhLWKsF+OQfe7xfvT9fgFl2wplwKfzMzgej6yqQms
7hm9FQZdIk5hkszX48x2oMIdcvj4yrSPjchYiqXAYkeY0O8m1RqjmibqT4pjtiH/
0HJyPoHWXucn5YttCrJDQepIzqdq9rn2pMCxE6i1ynF+eZOy56EK9TAEancnt6lm
tkbgukV4dsFAZJPzImfwYtMOC4HYPCU4toer/dCfzQPRIiBfC4rg8q6wBmz6eeGB
RZgAeImq/RJEAclR+/Y3pmvR9TWN+LSr3G3++P3Rmlg2AfS2nyEk5xS0XQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC+tHCiDQYjuJbAp3RI3MfiKwSR3MB8GA1UdIwQY
MBaAFCE1GGW3Z917nCIxS/yAVb1X2wBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAt
MWU0ZTA0MDA4NDRiLzEvTDYwY0tJTkJpTzRsc0NuZEVqY3gtSXJCSkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lNTJiMDctZjJhNC00N2MxLTk0NjAtMWU0ZTA0MDA4NDRi
LzEvSVRVWVpiZG4zWHVjSWpGTF9JQlZ2VmZiQUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgz1h//+
MA0GCSqGSIb3DQEBCwUAA4IBAQCPDljSMg7WEWH9WiAH0qERESx7eQkyUxXxz66H
Rf9i38Jd0U7bgkrUv/8Z4EHFYxJw/bAVhvQ8hkv2FhBzckWGzPxJr9MOYWoK42fU
ii0Y/zPOe5qGEl/IdwQbdUNEGLcicP24Kk2CRKdf3fT2xbQvF8EZgtoMlE4VwExW
o4lGIOm9jHDf/vE+kcwtY21GFUy5c8lqZMzBvNvEUCA1IVZ6y1GT/OGpA7BKhrZC
4Ff4g0O+nDgxciVk1RQz/1tu2SiJdd+wlQQlyxWrnD8DhQcLz9uA2rRA0CJ2d16X
jLm8LKA/xRm7KlNEM4/RHcinL4IwTNC4GBjM1CNq/6//gT9L
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:26 2024 by rpki-client on console-fra.rpki-client.org