Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8w1_soiM0RUrNrPq-dXesJIcW88.roa
File: 8w1_soiM0RUrNrPq-dXesJIcW88.roa (raw, json)
Hash identifier: yi9mahxINOu9BsT9a05vQzBdNQJF02NkkV730oJFV+g=
Subject key identifier: F3:0D:7F:B2:88:8C:D1:15:2B:36:B3:EA:F9:D5:DE:B0:92:1C:5B:CF
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 01856CF87B6FB864DFD849141C7C347EE35B
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8w1_soiM0RUrNrPq-dXesJIcW88.roa
Signing time: Sun 01 Jan 2023 10:55:01 +0000
ROA not before: Sun 01 Jan 2023 10:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207649
IP address blocks: 2a07:22c1:c002::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7b:6f:b8:64:df:d8:49:14:1c:7c:34:7e:e3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 10:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30d7fb2888cd1152b36b3eaf9d5deb0921c5bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5b:c0:09:52:56:8b:a9:4a:a3:81:48:4c:56:
4f:e1:2e:69:4b:84:e7:e2:55:39:4c:32:92:65:67:
7b:5e:40:5d:3e:d2:66:33:c9:2f:5b:f9:0b:2b:06:
9e:87:2e:8c:7c:ac:b8:4a:63:ec:c9:9f:8b:f9:a6:
b8:c3:32:38:d6:9d:e1:10:78:76:9f:70:ce:33:23:
e2:a1:49:ca:b5:6b:93:f1:46:72:31:ac:22:9b:03:
75:e5:82:31:de:93:87:67:1c:3d:19:10:9f:01:7c:
b4:8e:f3:7a:56:a4:bf:a3:fc:98:98:d4:29:b2:ef:
0b:ee:aa:ac:9a:0e:fb:0b:54:59:7c:29:20:d3:a4:
f9:97:9c:ff:2a:1b:b1:5f:c2:04:45:cd:7f:03:40:
af:b1:09:1f:37:8f:84:16:16:51:e0:24:6d:68:9c:
a3:df:eb:8e:bb:a3:cd:07:13:44:c8:8d:eb:34:75:
90:69:1e:6d:24:8a:c1:6f:88:72:54:aa:62:a3:e9:
fa:26:13:5f:29:75:ef:3d:ae:4f:87:51:54:9e:4f:
74:a3:99:b3:2f:57:a2:6d:d4:66:6e:56:80:3c:46:
51:32:db:5d:0d:57:15:ef:15:3d:a0:94:f7:2b:3d:
85:c8:fe:ae:cf:6a:dc:a7:84:48:5a:0d:25:1c:cb:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0D:7F:B2:88:8C:D1:15:2B:36:B3:EA:F9:D5:DE:B0:92:1C:5B:CF
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8w1_soiM0RUrNrPq-dXesJIcW88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:c002::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b6:1f:ef:63:91:66:b4:69:f1:28:d1:d1:d0:a7:b0:06:17:
06:4b:ef:ec:c4:2c:a8:b9:23:3e:a1:6c:b7:36:80:63:fb:ca:
7f:b3:0f:5a:d9:ee:8a:cf:63:29:0e:74:d2:39:35:76:d5:f0:
4d:cb:a2:d8:fa:ec:42:76:2c:ac:6d:f2:a2:d8:14:99:47:be:
bb:dc:17:74:e4:60:95:23:05:52:65:7d:38:75:a5:1e:08:fc:
a5:65:d3:79:f1:0d:cc:1d:76:b8:47:63:ae:ff:ee:32:ba:a5:
d9:f1:bd:95:7c:e4:1d:50:b6:b7:1f:67:13:de:36:09:ba:57:
88:28:4b:cc:81:12:02:ba:e1:b5:4f:ee:02:e2:96:c4:57:85:
7d:ef:ea:c7:a0:68:59:37:e0:b4:01:1d:6b:fc:b5:b2:b9:e2:
4b:7e:43:d8:17:97:26:4b:b1:ad:12:e9:df:97:18:58:c5:bd:
1d:68:5d:34:52:f6:78:0e:15:4d:fe:d4:84:bf:4d:3b:97:9d:
1c:39:3e:6a:86:d9:58:e7:05:c4:45:74:6c:8a:ac:4a:65:be:
d9:18:c9:df:67:55:d4:1c:dc:37:3f:ed:4f:db:1c:50:66:b7:
7d:dc:f7:90:bf:59:1f:02:eb:74:df:49:63:5a:53:cc:eb:6d:
a6:ca:24:2c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVs+HtvuGTf2EkUHHw0fuNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjMwMTAxMTA1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzBkN2ZiMjg4OGNkMTE1MmIzNmIzZWFmOWQ1ZGViMDkyMWM1YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FvACVJWi6lKo4FITFZP4S5pS4Tn
4lU5TDKSZWd7XkBdPtJmM8kvW/kLKwaehy6MfKy4SmPsyZ+L+aa4wzI41p3hEHh2
n3DOMyPioUnKtWuT8UZyMawimwN15YIx3pOHZxw9GRCfAXy0jvN6VqS/o/yYmNQp
su8L7qqsmg77C1RZfCkg06T5l5z/KhuxX8IERc1/A0CvsQkfN4+EFhZR4CRtaJyj
3+uOu6PNBxNEyI3rNHWQaR5tJIrBb4hyVKpio+n6JhNfKXXvPa5Ph1FUnk90o5mz
L1eibdRmblaAPEZRMttdDVcV7xU9oJT3Kz2FyP6uz2rcp4RIWg0lHMuVvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPMNf7KIjNEVKzaz6vnV3rCSHFvPMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvOHcxX3NvaU0wUlVyTnJQcS1kWGVzSkljVzg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwcAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAOth/vY5FmtGnxKNHR0KewBhcGS+/sxCyouSM+
oWy3NoBj+8p/sw9a2e6Kz2MpDnTSOTV21fBNy6LY+uxCdiysbfKi2BSZR7673Bd0
5GCVIwVSZX04daUeCPylZdN58Q3MHXa4R2Ou/+4yuqXZ8b2VfOQdULa3H2cT3jYJ
uleIKEvMgRICuuG1T+4C4pbEV4V97+rHoGhZN+C0AR1r/LWyueJLfkPYF5cmS7Gt
EunflxhYxb0daF00UvZ4DhVN/tSEv007l50cOT5qhtlY5wXERXRsiqxKZb7ZGMnf
Z1XUHNw3P+1P2xxQZrd93PeQv1kfAut030ljWlPM622myiQs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org