Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/8_P2N6G_7pTHPUurvzJb-Y0Uza4.roa
File: 8_P2N6G_7pTHPUurvzJb-Y0Uza4.roa (raw, json)
Hash identifier: LmXX0Gu4XQhxl5gWzqvae1Je+6TOdFHqfnkogwTjwbU=
Subject key identifier: F3:F3:F6:37:A1:BF:EE:94:C7:3D:4B:AB:BF:32:5B:F9:8D:14:CD:AE
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 01870E17FA5C20ADD532F88BE65C73EFCAB6
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/8_P2N6G_7pTHPUurvzJb-Y0Uza4.roa
Signing time: Thu 23 Mar 2023 10:51:05 +0000
ROA not before: Thu 23 Mar 2023 10:51:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2200
IP address blocks: 2a07:2e40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:17:fa:5c:20:ad:d5:32:f8:8b:e6:5c:73:ef:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Mar 23 10:51:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3f3f637a1bfee94c73d4babbf325bf98d14cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:4d:f7:44:09:d5:7a:18:a4:53:6e:68:00:
b3:43:63:3e:b4:4b:8c:2d:27:e7:a2:8e:53:39:95:
9e:d7:c2:9a:1f:3a:90:78:bb:05:66:f0:b3:ec:5a:
9b:a0:cc:91:06:5a:db:69:a7:b2:85:bd:bb:cb:26:
60:34:68:47:23:80:e5:48:a1:f0:c3:8c:c0:e8:6d:
16:0e:a1:d8:6c:07:91:0f:42:a5:3e:18:fa:f1:98:
a0:2b:0f:ad:81:30:97:17:e9:fd:e2:65:d0:3e:6c:
73:7c:f3:2e:2d:ab:62:15:c3:17:18:46:58:b4:50:
8b:12:08:62:4b:5c:b0:24:87:4e:10:cf:d8:60:08:
3c:b8:ba:cf:b2:fc:14:8c:52:49:67:d4:6d:7d:34:
89:e0:a3:d1:48:1c:fe:0c:b4:74:01:9f:3d:65:ca:
c0:f9:9e:60:08:30:90:d8:5e:2d:1d:87:f9:50:5c:
4f:00:20:9e:02:40:fc:4a:70:ef:b1:b9:94:fe:4d:
09:99:de:9b:f8:4d:d0:a7:b6:53:40:49:8f:2a:bb:
e0:56:11:33:42:15:a9:01:a6:98:ca:45:d4:25:89:
42:f4:b1:37:eb:72:f0:bc:5e:91:d1:4e:8b:c6:6a:
46:d8:f7:ff:1e:ae:89:44:d6:32:8e:3a:2b:78:c3:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:F6:37:A1:BF:EE:94:C7:3D:4B:AB:BF:32:5B:F9:8D:14:CD:AE
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/8_P2N6G_7pTHPUurvzJb-Y0Uza4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:b5:7c:25:e1:f0:ee:bf:fe:0c:85:1e:f2:29:6d:a6:89:d6:
3d:41:b2:1c:64:e2:09:9e:e7:10:96:cf:98:41:4c:75:15:b1:
4d:59:db:6c:a2:f0:60:b3:47:e6:92:18:3b:e8:2b:99:16:12:
7e:1d:c5:3f:08:e8:05:f1:ba:a1:56:c8:f2:f6:d2:28:9c:eb:
21:30:47:8c:6a:6b:86:73:7c:5d:5f:7f:a6:2e:6b:5c:4c:0a:
10:e5:29:b6:08:77:96:5d:fc:eb:ba:39:1b:b3:5e:5f:cd:d5:
d2:c7:12:38:2f:2c:6c:5c:68:71:b9:cb:dd:d4:0f:e6:76:ee:
c0:f7:6d:ee:f3:d7:4e:c7:df:62:4a:62:bf:6b:ea:cb:b1:f8:
a8:5e:db:7b:d1:5c:47:93:f6:99:b6:6c:1e:da:15:96:e0:13:
ab:8e:54:9b:55:e9:e8:e1:a1:5c:e4:c8:f0:91:a1:c5:bf:ed:
55:76:94:6f:b7:97:ac:f5:87:84:3e:27:6d:62:04:78:16:10:
b7:f8:9a:47:b7:c4:c9:67:53:77:41:66:54:84:55:fb:b9:c6:
d8:a7:ac:25:73:94:b0:7f:25:25:25:42:33:2b:56:09:e0:eb:
ec:c8:82:bb:5c:fd:41:f7:81:ac:58:42:5a:e8:73:dd:1e:9c:
3c:b1:88:c8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYcOF/pcIK3VMviL5lxz78q2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk
ZGRlOGMwHhcNMjMwMzIzMTA1MTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2YzZjYzN2ExYmZlZTk0YzczZDRiYWJiZjMyNWJmOThkMTRjZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldlN90QJ1XoYpFNuaACzQ2M+tEuM
LSfnoo5TOZWe18KaHzqQeLsFZvCz7FqboMyRBlrbaaeyhb27yyZgNGhHI4DlSKHw
w4zA6G0WDqHYbAeRD0KlPhj68ZigKw+tgTCXF+n94mXQPmxzfPMuLatiFcMXGEZY
tFCLEghiS1ywJIdOEM/YYAg8uLrPsvwUjFJJZ9RtfTSJ4KPRSBz+DLR0AZ89ZcrA
+Z5gCDCQ2F4tHYf5UFxPACCeAkD8SnDvsbmU/k0Jmd6b+E3Qp7ZTQEmPKrvgVhEz
QhWpAaaYykXUJYlC9LE363LwvF6R0U6LxmpG2Pf/Hq6JRNYyjjoreMOVkQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPPz9jehv+6Uxz1Lq78yW/mNFM2uMB8GA1UdIwQY
MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt
M2JiOTI2ODc2MDJjLzEvOF9QMk42R183cFRIUFV1cnZ6SmItWTBVemE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj
LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgcuQDAN
BgkqhkiG9w0BAQsFAAOCAQEAf7V8JeHw7r/+DIUe8iltponWPUGyHGTiCZ7nEJbP
mEFMdRWxTVnbbKLwYLNH5pIYO+grmRYSfh3FPwjoBfG6oVbI8vbSKJzrITBHjGpr
hnN8XV9/pi5rXEwKEOUptgh3ll3867o5G7NeX83V0scSOC8sbFxocbnL3dQP5nbu
wPdt7vPXTsffYkpiv2vqy7H4qF7be9FcR5P2mbZsHtoVluATq45Um1Xp6OGhXOTI
8JGhxb/tVXaUb7eXrPWHhD4nbWIEeBYQt/iaR7fEyWdTd0FmVIRV+7nG2KesJXOU
sH8lJSVCMytWCeDr7MiCu1z9QfeBrFhCWuhz3R6cPLGIyA==
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:18 2024 by rpki-client on console-fra.rpki-client.org