Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/yEjDLB3rT6Upry1TzAq0nyeax3o.roa
File: yEjDLB3rT6Upry1TzAq0nyeax3o.roa (raw, json)
Hash identifier: d/Tm7K2ZeGvsOl3yyWuH3HpuRZ8v3SyGLraJC9Nc1lk=
Subject key identifier: C8:48:C3:2C:1D:EB:4F:A5:29:AF:2D:53:CC:0A:B4:9F:27:9A:C7:7A
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 018CC9BC1CB1D85BAB96ED6B097263F9FE07
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/yEjDLB3rT6Upry1TzAq0nyeax3o.roa
Signing time: Tue 02 Jan 2024 10:33:17 +0000
ROA not before: Tue 02 Jan 2024 10:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216313
IP address blocks: 2a13:cd80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Aug 2024 10:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1c:b1:d8:5b:ab:96:ed:6b:09:72:63:f9:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c848c32c1deb4fa529af2d53cc0ab49f279ac77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:bf:a3:fc:ad:5b:59:2f:8a:11:7c:39:f2:
22:c9:4a:dd:64:4a:b8:8a:a6:60:96:6d:80:00:06:
54:6e:4b:74:18:d6:4b:a3:77:58:5f:d3:1a:93:4d:
36:0c:17:fa:d0:5c:f1:58:9b:23:68:52:37:88:86:
24:7c:c2:3b:3d:7b:fe:87:03:3d:d9:9e:5c:a8:03:
34:56:6f:a3:a1:0b:9e:ad:9c:f4:22:c8:6b:80:60:
e9:26:ad:ed:cc:75:a1:4b:84:f6:ca:52:d6:dd:6e:
dd:8a:19:f4:41:44:01:da:46:97:09:6e:89:44:13:
58:de:eb:d2:77:32:f1:4a:1f:17:5f:9e:7a:2a:be:
a0:5b:33:19:3b:12:ba:0f:fa:d3:85:0e:b1:9b:fb:
5c:c2:d5:20:86:1d:3a:e6:05:d9:be:24:d3:b7:ee:
78:68:d1:24:1b:10:c8:72:b2:de:c9:01:c6:de:c2:
83:43:f7:dc:ec:76:9c:90:1e:22:48:73:25:20:bb:
07:71:62:a8:2d:e7:80:65:d6:5a:ae:01:8a:3d:c9:
cc:48:1f:e2:4f:a2:43:06:20:ab:e8:da:ee:4d:93:
e5:0e:28:88:a4:b5:5a:92:1e:06:fd:69:7f:7f:8e:
7a:2b:1b:a0:f3:9c:e6:e6:c7:59:7c:2e:e8:cd:ee:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:C3:2C:1D:EB:4F:A5:29:AF:2D:53:CC:0A:B4:9F:27:9A:C7:7A
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/yEjDLB3rT6Upry1TzAq0nyeax3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:8d:a5:4f:44:c2:15:1b:7b:f5:a4:1d:11:d4:44:b2:0a:45:
ed:25:e0:c4:14:18:52:46:20:8b:7f:38:26:92:3b:76:0e:13:
86:76:9f:1f:b2:ee:d7:46:c5:6f:bb:2f:be:88:46:74:ac:8f:
77:6f:75:8d:7f:9a:c8:8a:fa:d9:72:f0:c7:c1:d9:03:dc:a3:
23:ca:e4:ce:09:86:f7:35:95:1f:9a:d3:5a:6a:ac:82:ee:14:
47:97:61:ae:5e:90:bd:71:9e:7f:e0:d2:04:e1:00:ea:60:19:
fe:ac:af:ef:af:3c:36:2e:88:f1:ab:c8:cd:46:ec:b2:00:cf:
95:90:db:da:c5:e2:52:5c:24:8b:a1:5e:01:25:d4:1f:a9:b9:
11:01:0f:9d:c9:88:d5:5f:8a:49:db:97:d0:64:fe:8d:fd:80:
24:a9:e8:a5:03:d8:18:87:dc:36:68:cf:e0:93:94:27:8e:ba:
72:9a:a5:ee:d1:70:42:fe:d9:9e:6b:6c:89:da:2c:f8:da:33:
3d:e3:bc:3b:37:7b:1b:24:7b:93:df:a0:80:79:0b:2d:e1:f3:
27:ce:87:89:43:79:10:42:48:1f:be:84:19:da:26:7c:ea:d6:
86:f3:f6:e5:c4:f3:96:cc:58:f3:c7:bd:8e:c9:d0:7d:43:2a:
bd:80:b2:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvByx2Furlu1rCXJj+f4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQ4NTBjN2FiMzBiYmI4YWY4MGRjZjlhYWJjNmI5NTFh
YTY1YTQwHhcNMjQwMTAyMTAzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ4YzMyYzFkZWI0ZmE1MjlhZjJkNTNjYzBhYjQ5ZjI3OWFjNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0q/o/ytW1kvihF8OfIiyUrdZEq4
iqZglm2AAAZUbkt0GNZLo3dYX9Mak002DBf60FzxWJsjaFI3iIYkfMI7PXv+hwM9
2Z5cqAM0Vm+joQuerZz0IshrgGDpJq3tzHWhS4T2ylLW3W7dihn0QUQB2kaXCW6J
RBNY3uvSdzLxSh8XX556Kr6gWzMZOxK6D/rThQ6xm/tcwtUghh065gXZviTTt+54
aNEkGxDIcrLeyQHG3sKDQ/fc7HackB4iSHMlILsHcWKoLeeAZdZargGKPcnMSB/i
T6JDBiCr6NruTZPlDiiIpLVakh4G/Wl/f456Kxug85zm5sdZfC7oze55bwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMhIwywd60+lKa8tU8wKtJ8nmsd6MB8GA1UdIwQY
MBaAFPikhQx6swu7ivgNz5qrxrlRqmWkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LU0ZESHF6Qzd1Sy1BM1BtcXZHdVZHcVphUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFj
LTcyODZhYzBhOTA3Yi8xL3lFakRMQjNyVDZVcHJ5MVR6QXEwbnllYXgzby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzEvMzg5NjlkLTcyNzYtNGYyNy05ZTFjLTcyODZhYzBhOTA3
Yi8xLzEtS1NGREhxekM3dUstQTNQbXF2R3VWR3FaYVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqE82A
MA0GCSqGSIb3DQEBCwUAA4IBAQA/jaVPRMIVG3v1pB0R1ESyCkXtJeDEFBhSRiCL
fzgmkjt2DhOGdp8fsu7XRsVvuy++iEZ0rI93b3WNf5rIivrZcvDHwdkD3KMjyuTO
CYb3NZUfmtNaaqyC7hRHl2GuXpC9cZ5/4NIE4QDqYBn+rK/vrzw2Lojxq8jNRuyy
AM+VkNvaxeJSXCSLoV4BJdQfqbkRAQ+dyYjVX4pJ25fQZP6N/YAkqeilA9gYh9w2
aM/gk5QnjrpymqXu0XBC/tmea2yJ2iz42jM947w7N3sbJHuT36CAeQst4fMnzoeJ
Q3kQQkgfvoQZ2iZ86taG8/blxPOWzFjzx72OydB9Qyq9gLI7
-----END CERTIFICATE-----
Generated at Mon Aug 19 14:03:26 2024 by rpki-client on console-fra.rpki-client.org