Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/XCVfZKIrebACAg6fWKQCw0Wem94.roa
File: XCVfZKIrebACAg6fWKQCw0Wem94.roa (raw, json)
Hash identifier: Y1jFS2W7W/xYF3J5c1n8/wII/B8Bm9Ex90k7G4pciDY=
Subject key identifier: 5C:25:5F:64:A2:2B:79:B0:02:02:0E:9F:58:A4:02:C3:45:9E:9B:DE
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 018572712709DFB0B353F269935943909B20
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/XCVfZKIrebACAg6fWKQCw0Wem94.roa
Signing time: Mon 02 Jan 2023 12:24:55 +0000
ROA not before: Mon 02 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:2e02::/36 maxlen: 48
2a13:2e01::/36 maxlen: 48
2a13:2e00::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:27:09:df:b0:b3:53:f2:69:93:59:43:90:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jan 2 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c255f64a22b79b002020e9f58a402c3459e9bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:b3:a9:e4:96:ea:49:9d:83:00:3b:c4:37:
70:04:4b:43:1a:c0:d7:e8:9e:ff:f2:36:fb:0d:f0:
a8:bc:05:8d:09:4a:fb:ec:aa:57:e3:89:b5:fa:80:
0b:7c:5a:d3:93:52:8a:9a:f7:a5:7f:d8:4a:1b:a6:
01:41:ee:d7:24:cf:ed:7a:d3:03:ab:ea:ae:03:1f:
0b:06:71:a8:11:42:4b:7b:36:f3:66:19:1b:c2:26:
43:48:65:ea:58:2f:45:78:95:97:c6:7f:7e:ae:bc:
58:4a:d2:f0:44:58:b6:c0:02:db:67:68:fd:71:96:
77:8f:04:26:ab:26:b4:57:e2:34:49:46:51:b3:45:
dd:14:f5:88:2f:fb:df:8b:6a:65:a9:2b:23:d7:6c:
a3:dc:e9:9d:71:cf:3c:a3:69:e5:1d:3e:90:89:d3:
0d:09:5b:b7:6c:ef:0f:3f:4d:86:fa:6b:e6:fd:bf:
ac:33:d7:15:42:af:5f:d0:82:ad:21:4e:34:4d:46:
0e:a9:14:2e:51:67:d5:7b:fe:6a:19:a4:39:91:55:
f5:8f:e4:e7:13:a2:9b:89:36:42:31:b3:6d:01:1b:
31:91:1a:2b:aa:07:9c:32:04:80:96:ed:c3:61:96:
17:87:e0:1a:2e:1a:f1:65:83:ac:9d:34:39:e3:43:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:5F:64:A2:2B:79:B0:02:02:0E:9F:58:A4:02:C3:45:9E:9B:DE
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/XCVfZKIrebACAg6fWKQCw0Wem94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
2a13:2e01::/36
2a13:2e02::/36
Signature Algorithm: sha256WithRSAEncryption
37:86:73:4b:96:2f:f8:f0:7c:86:16:67:b3:b8:52:54:5e:7b:
a0:28:cf:75:f1:1e:d0:80:96:39:d7:0d:d7:d3:04:c0:a6:e4:
ac:22:2a:3e:5d:84:e4:25:82:cb:f3:89:be:f1:4f:5f:7f:28:
fe:a2:c0:0d:1d:27:1f:48:8e:59:fe:b1:1e:9c:5d:f8:d1:5f:
73:ad:47:5b:fd:f9:51:ce:3a:ac:bf:69:13:fc:02:e2:0f:33:
96:e1:b2:bc:93:a9:d5:35:fa:5c:80:48:45:8a:a2:26:24:fd:
15:f4:2e:00:4f:08:86:a1:6e:ac:5d:80:d8:c6:19:42:26:bc:
4a:d6:c1:a2:a4:64:81:05:d8:df:85:8c:64:19:a3:f2:b4:86:
bf:aa:f6:74:1b:5b:bc:6c:02:84:d4:3d:10:d2:27:7b:2f:49:
a0:fa:47:e6:74:74:67:9b:c3:c8:82:eb:66:ed:cd:47:94:91:
dd:e7:3c:6c:c3:46:6b:a5:3f:26:d0:fc:17:7d:1d:15:df:71:
07:87:f3:41:06:e0:02:c5:a1:4c:ea:20:f2:2a:8b:f3:4d:fa:
80:21:93:b7:80:22:32:02:c9:ce:02:90:a7:69:f7:73:76:79:
da:3d:16:1a:72:e4:f1:17:de:a3:48:de:da:07:19:76:f7:5f:
11:c8:ca:66
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVycScJ37CzU/Jpk1lDkJsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjMwMTAyMTIyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzI1NWY2NGEyMmI3OWIwMDIwMjBlOWY1OGE0MDJjMzQ1OWU5YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzezqeSW6kmdgwA7xDdwBEtDGsDX
6J7/8jb7DfCovAWNCUr77KpX44m1+oALfFrTk1KKmvelf9hKG6YBQe7XJM/tetMD
q+quAx8LBnGoEUJLezbzZhkbwiZDSGXqWC9FeJWXxn9+rrxYStLwRFi2wALbZ2j9
cZZ3jwQmqya0V+I0SUZRs0XdFPWIL/vfi2plqSsj12yj3Omdcc88o2nlHT6QidMN
CVu3bO8PP02G+mvm/b+sM9cVQq9f0IKtIU40TUYOqRQuUWfVe/5qGaQ5kVX1j+Tn
E6KbiTZCMbNtARsxkRorqgecMgSAlu3DYZYXh+AaLhrxZYOsnTQ540NFuwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFwlX2SiK3mwAgIOn1ikAsNFnpveMB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvWENWZlpLSXJlYkFDQWc2ZldLUUN3MFdlbTk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYEKhMuAAAD
BgQqEy4BAAMGBCoTLgIAMA0GCSqGSIb3DQEBCwUAA4IBAQA3hnNLli/48HyGFmez
uFJUXnugKM918R7QgJY51w3X0wTApuSsIio+XYTkJYLL84m+8U9ffyj+osANHScf
SI5Z/rEenF340V9zrUdb/flRzjqsv2kT/ALiDzOW4bK8k6nVNfpcgEhFiqImJP0V
9C4ATwiGoW6sXYDYxhlCJrxK1sGipGSBBdjfhYxkGaPytIa/qvZ0G1u8bAKE1D0Q
0id7L0mg+kfmdHRnm8PIgutm7c1HlJHd5zxsw0ZrpT8m0PwXfR0V33EHh/NBBuAC
xaFM6iDyKovzTfqAIZO3gCIyAsnOApCnafdzdnnaPRYacuTxF96jSN7aBxl2918R
yMpm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:37 2024 by rpki-client on console-ams.rpki-client.org