Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Q1mmy2E8gd-dlShhRgOieO-2LhA.roa
File: Q1mmy2E8gd-dlShhRgOieO-2LhA.roa (raw, json)
Hash identifier: vgRsUvbPpfrhvjQEnrT68hxqQsqLyiWloH9mElm61pE=
Subject key identifier: 43:59:A6:CB:61:3C:81:DF:9D:95:28:61:46:03:A2:78:EF:B6:2E:10
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018C1BD4D32A1FACD2E8940BB0FA98C93114
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Q1mmy2E8gd-dlShhRgOieO-2LhA.roa
Signing time: Wed 29 Nov 2023 16:06:21 +0000
ROA not before: Wed 29 Nov 2023 16:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215926
IP address blocks: 2a13:a5c7:1700::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:d4:d3:2a:1f:ac:d2:e8:94:0b:b0:fa:98:c9:31:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Nov 29 16:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4359a6cb613c81df9d9528614603a278efb62e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:08:b9:dd:7e:19:aa:b2:71:58:7c:ab:e2:
c6:39:9f:5a:a5:15:a6:14:2b:df:91:4e:91:d8:1a:
a8:6e:23:dd:59:3e:83:b3:17:52:90:94:bb:2d:49:
da:5a:c6:ad:3c:07:9f:32:f5:ea:5a:fb:72:87:15:
3f:66:9a:2a:21:56:35:a3:92:17:03:a0:a2:18:ab:
a7:48:3e:90:c4:91:ac:a4:ea:c1:5d:a2:ea:e2:13:
2b:8b:0f:d6:52:b3:4c:4a:4d:72:d9:12:51:c5:64:
7b:2b:30:99:15:19:56:41:08:0a:a2:19:6e:b3:b5:
cc:3f:20:7c:de:ea:59:e5:e0:9b:09:98:0d:e0:a1:
11:a1:04:6c:0c:e4:43:1e:10:10:aa:b0:3c:98:cf:
a2:a9:cf:66:4a:a3:95:51:a8:cf:e4:ea:9c:ca:0c:
f2:be:29:c4:5a:1f:ea:56:ce:a8:e9:01:85:9b:03:
c6:da:50:62:e1:dd:24:91:ce:6c:71:7a:41:9c:1b:
06:d7:da:ba:30:e2:81:12:f2:f2:26:41:9b:c0:ad:
f3:16:c5:0e:c5:9a:16:48:e3:e3:91:1d:d6:0a:91:
47:65:c1:3e:2c:68:f6:31:e5:44:6b:be:9f:bf:23:
30:de:23:d6:a8:6c:9e:98:c9:cc:c6:4f:4b:09:bf:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:A6:CB:61:3C:81:DF:9D:95:28:61:46:03:A2:78:EF:B6:2E:10
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Q1mmy2E8gd-dlShhRgOieO-2LhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1700::/40
Signature Algorithm: sha256WithRSAEncryption
9d:c2:64:f5:3a:f3:a7:38:e2:69:f6:4f:f4:4d:80:6c:dc:a6:
44:eb:ab:34:34:b4:45:b7:b3:6d:d2:cf:64:cb:f6:d2:01:59:
35:4b:ed:7f:64:4e:a7:46:7e:b9:ff:7f:51:e7:69:d9:f8:66:
94:80:97:b0:43:44:bf:2c:2a:93:e4:18:39:03:3e:a3:b9:29:
85:c8:3e:64:ce:07:90:3b:ee:5a:7c:cf:c2:4f:22:64:eb:78:
5b:56:76:00:47:1f:5c:3e:00:7d:c7:d2:48:a2:66:97:33:6c:
43:c1:a4:d4:50:e4:f0:15:c9:37:a5:44:61:c3:02:df:4f:30:
bc:08:0e:81:55:85:46:53:a3:ac:4d:7f:2e:e0:21:10:9d:65:
2c:20:ad:2e:00:66:49:01:af:0e:78:de:f6:d0:ef:ec:fe:16:
b4:a9:62:58:bb:8d:40:bb:0d:38:93:9b:12:47:09:e1:69:d6:
e4:02:e6:88:35:c1:e7:81:3e:18:c8:4b:67:08:4e:58:5b:7d:
9c:64:e9:50:5d:ce:04:f3:2e:79:2d:1d:9e:a5:5b:ac:57:1f:
52:aa:7a:ae:61:11:57:b7:49:b0:26:f0:d7:fa:c2:cf:9a:ed:
f7:78:6f:49:ef:41:b3:90:52:8e:c1:08:70:88:56:91:90:f9:
8b:7c:d3:6e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYwb1NMqH6zS6JQLsPqYyTEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjMxMTI5MTYwNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzU5YTZjYjYxM2M4MWRmOWQ5NTI4NjE0NjAzYTI3OGVmYjYyZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBMIud1+GaqycVh8q+LGOZ9apRWm
FCvfkU6R2BqobiPdWT6DsxdSkJS7LUnaWsatPAefMvXqWvtyhxU/ZpoqIVY1o5IX
A6CiGKunSD6QxJGspOrBXaLq4hMriw/WUrNMSk1y2RJRxWR7KzCZFRlWQQgKohlu
s7XMPyB83upZ5eCbCZgN4KERoQRsDORDHhAQqrA8mM+iqc9mSqOVUajP5Oqcygzy
vinEWh/qVs6o6QGFmwPG2lBi4d0kkc5scXpBnBsG19q6MOKBEvLyJkGbwK3zFsUO
xZoWSOPjkR3WCpFHZcE+LGj2MeVEa76fvyMw3iPWqGyemMnMxk9LCb+MCQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFENZpsthPIHfnZUoYUYDonjvti4QMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvUTFtbXkyRThnZC1kbFNoaFJnT2llTy0yTGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxcw
DQYJKoZIhvcNAQELBQADggEBAJ3CZPU686c44mn2T/RNgGzcpkTrqzQ0tEW3s23S
z2TL9tIBWTVL7X9kTqdGfrn/f1Hnadn4ZpSAl7BDRL8sKpPkGDkDPqO5KYXIPmTO
B5A77lp8z8JPImTreFtWdgBHH1w+AH3H0kiiZpczbEPBpNRQ5PAVyTelRGHDAt9P
MLwIDoFVhUZTo6xNfy7gIRCdZSwgrS4AZkkBrw543vbQ7+z+FrSpYli7jUC7DTiT
mxJHCeFp1uQC5og1weeBPhjIS2cITlhbfZxk6VBdzgTzLnktHZ6lW6xXH1Kqeq5h
EVe3SbAm8Nf6ws+a7fd4b0nvQbOQUo7BCHCIVpGQ+Yt8024=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org