Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/0pqeqisG8bSFlCY7YGUuHOVJUjw.roa
File: 0pqeqisG8bSFlCY7YGUuHOVJUjw.roa (raw, json)
Hash identifier: 0eXIg417fMp7/Dk0mqcf3MxzYtLa/UnlLeX5BaVQ/Cw=
Subject key identifier: D2:9A:9E:AA:2B:06:F1:B4:85:94:26:3B:60:65:2E:1C:E5:49:52:3C
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0188A06BCA7774AA56F6DCC14446096C1B71
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/0pqeqisG8bSFlCY7YGUuHOVJUjw.roa
Signing time: Fri 09 Jun 2023 13:49:58 +0000
ROA not before: Fri 09 Jun 2023 13:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57467
IP address blocks: 2a12:8fc6:800::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:6b:ca:77:74:aa:56:f6:dc:c1:44:46:09:6c:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jun 9 13:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d29a9eaa2b06f1b48594263b60652e1ce549523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:58:f1:8d:55:55:8b:c8:b4:84:8d:21:63:
d3:2b:4b:31:1a:b0:bd:55:5b:b5:d9:e1:11:6c:0c:
1a:0b:a1:a0:e8:b7:52:21:5f:3f:71:15:94:76:66:
cd:11:a0:3c:05:b2:51:ef:ae:d2:18:20:e9:dd:11:
69:4e:52:5b:74:1f:fd:c0:bb:1a:b0:85:42:15:8c:
12:c4:2a:c2:30:4c:a7:89:58:bf:17:69:18:66:3f:
30:24:7a:bf:bb:bd:3b:d3:77:b9:da:3d:33:44:0f:
ac:6a:66:d1:46:aa:87:81:1d:01:46:c6:21:60:1f:
c1:11:03:a8:97:de:0a:33:02:59:25:3d:90:4b:ba:
f1:d1:d5:d6:20:63:f5:b9:e5:a6:a7:0d:de:3a:bd:
03:91:32:07:39:31:b9:bc:55:0c:a1:0e:65:8e:cf:
ac:ce:a0:ba:80:5a:0f:53:87:22:88:c0:53:3d:f7:
e9:ff:3c:49:77:39:7b:36:9a:c7:9b:ef:c6:b8:c4:
f5:26:d8:50:45:8b:76:93:ba:4f:40:a6:2d:53:fc:
f2:0a:01:ce:56:7b:4a:62:82:1e:ad:8d:cb:1f:18:
79:e3:94:15:d0:13:5d:62:ca:fe:94:ee:a9:3a:a5:
08:5f:e3:2c:59:76:9d:69:eb:f6:81:24:07:3e:45:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:9E:AA:2B:06:F1:B4:85:94:26:3B:60:65:2E:1C:E5:49:52:3C
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/0pqeqisG8bSFlCY7YGUuHOVJUjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:800::/48
Signature Algorithm: sha256WithRSAEncryption
7d:6c:91:6c:a9:9f:a8:ce:61:10:9f:8f:14:31:a8:88:2f:8d:
bd:38:d1:be:f1:d7:3a:fb:d2:53:a4:90:80:03:bd:cd:e7:ba:
c4:0c:dc:cf:56:a0:6f:c7:c1:73:a7:bd:30:bb:d5:fc:ba:ce:
c3:4f:79:73:a3:03:ae:eb:a1:20:88:32:33:87:5c:ce:37:65:
3c:a3:61:23:60:80:1e:59:f1:51:96:7b:69:98:cd:5e:66:85:
5f:ec:1b:72:b9:51:3f:c4:74:36:31:7a:45:7e:41:ce:a7:20:
0a:04:86:93:91:1b:02:47:08:13:dc:9a:1b:4e:42:5b:d6:3b:
db:2f:73:32:43:5d:7a:d7:f4:8a:e8:f3:12:1c:77:78:64:cc:
28:54:b1:e2:17:93:a2:44:d3:cb:81:d1:a5:d9:69:4e:c7:1c:
11:b2:4e:af:7d:f3:9f:38:48:76:8e:ce:c0:c3:c1:0c:9b:b4:
07:01:d9:8a:ce:65:94:23:11:a1:6c:a2:d6:2f:46:8c:2e:d8:
49:1a:92:66:73:8e:40:e7:73:b6:c2:f9:75:a5:0a:3f:ef:92:
88:06:25:c1:01:0e:fa:dc:6a:8c:19:95:36:06:30:f1:25:f8:
c9:99:5f:b4:0d:17:90:0c:18:42:aa:ac:56:fc:bf:f3:25:f3:
fb:57:0f:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYiga8p3dKpW9tzBREYJbBtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1
ODkxMGIwHhcNMjMwNjA5MTM0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjlhOWVhYTJiMDZmMWI0ODU5NDI2M2I2MDY1MmUxY2U1NDk1MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDdY8Y1VVYvItISNIWPTK0sxGrC9
VVu12eERbAwaC6Gg6LdSIV8/cRWUdmbNEaA8BbJR767SGCDp3RFpTlJbdB/9wLsa
sIVCFYwSxCrCMEyniVi/F2kYZj8wJHq/u70703e52j0zRA+sambRRqqHgR0BRsYh
YB/BEQOol94KMwJZJT2QS7rx0dXWIGP1ueWmpw3eOr0DkTIHOTG5vFUMoQ5ljs+s
zqC6gFoPU4ciiMBTPffp/zxJdzl7NprHm+/GuMT1JthQRYt2k7pPQKYtU/zyCgHO
VntKYoIerY3LHxh545QV0BNdYsr+lO6pOqUIX+MsWXadaev2gSQHPkV3jwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNKanqorBvG0hZQmO2BlLhzlSVI8MB8GA1UdIwQY
MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt
NThjOTZkNjZmMGExLzEvMHBxZXFpc0c4YlNGbENZN1lHVXVIT1ZKVWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx
LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKPxggA
MA0GCSqGSIb3DQEBCwUAA4IBAQB9bJFsqZ+ozmEQn48UMaiIL429ONG+8dc6+9JT
pJCAA73N57rEDNzPVqBvx8Fzp70wu9X8us7DT3lzowOu66EgiDIzh1zON2U8o2Ej
YIAeWfFRlntpmM1eZoVf7BtyuVE/xHQ2MXpFfkHOpyAKBIaTkRsCRwgT3JobTkJb
1jvbL3MyQ1161/SK6PMSHHd4ZMwoVLHiF5OiRNPLgdGl2WlOxxwRsk6vffOfOEh2
js7Aw8EMm7QHAdmKzmWUIxGhbKLWL0aMLthJGpJmc45A53O2wvl1pQo/75KIBiXB
AQ763GqMGZU2BjDxJfjJmV+0DReQDBhCqqxW/L/zJfP7Vw/I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org