Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/_3n58DUZDFvGtivyfaxtlHjw-zk.roa
File: _3n58DUZDFvGtivyfaxtlHjw-zk.roa (raw, json)
Hash identifier: 5mgZjT/jYcTqqkW+BisHOMgZ49CXJOZ1RhJviqMGT+M=
Subject key identifier: FF:79:F9:F0:35:19:0C:5B:C6:B6:2B:F2:7D:AC:6D:94:78:F0:FB:39
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018F15FE39D8E7EF8DB6D40034F35F78F8D9
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/_3n58DUZDFvGtivyfaxtlHjw-zk.roa
Signing time: Thu 25 Apr 2024 16:02:13 +0000
ROA not before: Thu 25 Apr 2024 16:02:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204093
IP address blocks: 2a0a:db80::/29 maxlen: 40
Validation: Failed, certificate revoked on Mon 29 Apr 2024 09:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:fe:39:d8:e7:ef:8d:b6:d4:00:34:f3:5f:78:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Apr 25 16:02:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff79f9f035190c5bc6b62bf27dac6d9478f0fb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:9d:38:6f:c5:a8:96:1b:18:5a:cc:4a:c7:
5c:99:a0:97:7e:2f:87:28:c5:c6:dc:6b:8f:5f:8e:
cc:58:82:c5:e6:43:65:05:12:ea:5d:69:0b:87:4a:
61:42:38:29:8f:d4:0f:cd:b5:3b:ed:6d:d6:96:07:
ef:7b:79:05:54:50:c1:d3:ef:a1:c1:df:f8:e7:45:
2e:ba:da:f8:89:d8:25:f6:f2:1c:3e:c8:d9:5a:33:
fa:3f:e0:ec:b7:25:10:5f:bf:af:2d:87:55:75:80:
15:4f:c6:d4:37:76:9d:0f:d5:05:e3:c7:d6:74:55:
f2:ba:b7:7c:7b:d6:6d:4f:f6:e9:18:bd:ab:26:88:
5c:80:5e:d4:2a:0a:b7:a3:5c:2a:75:b4:84:37:7f:
5b:cc:6e:b7:6b:81:d0:4a:95:ff:7a:63:0b:f9:c0:
d8:bb:dd:7a:ea:84:5e:93:fa:ee:c6:29:f4:dd:71:
24:ab:ed:36:e9:27:52:09:67:7f:77:b1:47:0f:c9:
42:d6:57:13:55:7d:fc:13:02:7b:4c:1c:a1:f9:d0:
08:70:ed:a3:f4:30:7b:91:76:eb:9d:a5:f5:e3:df:
0f:31:37:87:4b:85:01:25:46:1b:6f:7f:f8:96:c0:
16:87:db:77:93:76:9b:58:e0:08:f9:74:b5:53:4a:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:F9:F0:35:19:0C:5B:C6:B6:2B:F2:7D:AC:6D:94:78:F0:FB:39
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/_3n58DUZDFvGtivyfaxtlHjw-zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:db80::/29
Signature Algorithm: sha256WithRSAEncryption
96:93:5a:d3:0e:46:8f:ba:c0:a7:9f:ec:88:b6:70:48:af:64:
ea:7e:e9:df:21:51:6a:1f:69:0c:02:e5:7b:e0:ec:0d:c7:4d:
f6:9f:c9:ce:f4:c2:62:33:7a:bb:8c:54:8c:4c:34:88:1b:e1:
0b:65:8a:30:20:9f:f8:bb:dd:c4:35:7f:00:2a:74:27:d5:52:
fc:8a:ac:2e:66:7f:7a:d2:9c:f3:12:29:76:0e:76:04:00:e2:
9a:6f:eb:97:6c:bd:68:78:02:85:c9:ee:99:19:5c:63:ee:92:
99:f2:78:60:8e:43:90:c6:78:d9:93:e8:a6:74:7d:37:0e:b6:
aa:16:d2:50:d7:79:62:d4:6a:4e:27:40:5b:8d:51:fa:90:13:
49:21:52:93:51:c0:9c:4f:4a:59:e1:f3:15:1c:d1:42:1c:af:
5f:46:09:cc:d3:6c:bf:41:92:c3:5b:c3:34:17:d8:f6:f1:0b:
4b:13:1a:1a:3b:ec:0b:7f:61:a5:c3:d1:7a:c6:a7:1a:27:18:
41:67:ec:0c:13:9a:31:db:e0:45:e9:9a:7f:b9:3e:7d:de:87:
f2:78:39:1b:43:24:06:7e:03:ba:a9:87:17:ff:90:1c:a8:86:
02:dd:50:03:63:ff:d6:fb:a3:ab:26:90:66:59:3c:75:96:01:
fc:8e:ce:66
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY8V/jnY5++NttQANPNfePjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjQwNDI1MTYwMjEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjc5ZjlmMDM1MTkwYzViYzZiNjJiZjI3ZGFjNmQ5NDc4ZjBmYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBKdOG/FqJYbGFrMSsdcmaCXfi+H
KMXG3GuPX47MWILF5kNlBRLqXWkLh0phQjgpj9QPzbU77W3Wlgfve3kFVFDB0++h
wd/450Uuutr4idgl9vIcPsjZWjP6P+DstyUQX7+vLYdVdYAVT8bUN3adD9UF48fW
dFXyurd8e9ZtT/bpGL2rJohcgF7UKgq3o1wqdbSEN39bzG63a4HQSpX/emML+cDY
u9166oRek/ruxin03XEkq+026SdSCWd/d7FHD8lC1lcTVX38EwJ7TByh+dAIcO2j
9DB7kXbrnaX1498PMTeHS4UBJUYbb3/4lsAWh9t3k3abWOAI+XS1U0pJ9wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP95+fA1GQxbxrYr8n2sbZR48Ps5MB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvXzNuNThEVVpERnZHdGl2eWZheHRsSGp3LXprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrbgDAN
BgkqhkiG9w0BAQsFAAOCAQEAlpNa0w5Gj7rAp5/siLZwSK9k6n7p3yFRah9pDALl
e+DsDcdN9p/JzvTCYjN6u4xUjEw0iBvhC2WKMCCf+LvdxDV/ACp0J9VS/IqsLmZ/
etKc8xIpdg52BADimm/rl2y9aHgChcnumRlcY+6SmfJ4YI5DkMZ42ZPopnR9Nw62
qhbSUNd5YtRqTidAW41R+pATSSFSk1HAnE9KWeHzFRzRQhyvX0YJzNNsv0GSw1vD
NBfY9vELSxMaGjvsC39hpcPResanGicYQWfsDBOaMdvgRemaf7k+fd6H8ng5G0Mk
Bn4DuqmHF/+QHKiGAt1QA2P/1vujqyaQZlk8dZYB/I7OZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org