Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t7N7L6Amm7DR93EsB_egIM1eRu4.roa
File: t7N7L6Amm7DR93EsB_egIM1eRu4.roa (raw, json)
Hash identifier: 4OTbR+QINntCvjMsjpsmQEnMHVfQqcU88oqFv2M11tY=
Subject key identifier: B7:B3:7B:2F:A0:26:9B:B0:D1:F7:71:2C:07:F7:A0:20:CD:5E:46:EE
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018B9641CB9FC783AE955ED67944C05A9AA9
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t7N7L6Amm7DR93EsB_egIM1eRu4.roa
Signing time: Fri 03 Nov 2023 17:36:16 +0000
ROA not before: Fri 03 Nov 2023 17:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 2a0d:c103::/32 maxlen: 32
2a0d:afc2::/32 maxlen: 32
2a01:48a0:4001::/48 maxlen: 48
2a0a:b381::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:41:cb:9f:c7:83:ae:95:5e:d6:79:44:c0:5a:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 3 17:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b37b2fa0269bb0d1f7712c07f7a020cd5e46ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:45:31:6c:aa:3e:22:7d:bb:ef:11:3b:af:
a8:bc:c6:44:9a:67:46:3c:af:b2:1e:49:33:e8:1a:
fc:32:42:ad:87:6d:0b:5c:25:a4:5e:18:4a:c2:bb:
f4:c8:da:73:c6:9f:fb:87:48:34:3b:b2:13:49:71:
91:df:4a:58:52:ee:12:16:76:5e:8a:36:db:b9:76:
a2:9e:56:1a:e5:70:13:b8:58:eb:8e:58:32:3d:93:
37:6c:22:0b:5d:19:4e:0d:e0:7c:e4:ae:57:b5:a1:
e8:fe:7e:e0:8b:32:79:f2:99:38:7f:5d:cc:fa:43:
df:29:c1:ee:42:b7:f8:c3:1c:f8:7a:30:11:87:b2:
bc:4e:d9:5e:00:d4:95:43:5b:67:7a:1d:f6:19:50:
91:80:1c:82:d9:46:10:1c:58:26:9f:de:05:8d:85:
0a:5e:03:38:8b:9a:2c:0a:d1:78:99:75:6b:bf:04:
60:07:76:b7:20:c5:dd:b8:14:ae:05:17:67:04:1b:
ce:1d:a5:d6:a9:0a:1f:dd:75:96:ed:e5:36:71:a9:
74:0c:3c:98:ee:82:b1:d1:31:e9:ad:d8:1b:27:97:
ce:a7:b6:21:a5:f6:1b:0e:67:6c:eb:c6:0d:3b:34:
f7:6b:2f:4c:0c:b9:0e:59:ef:12:97:15:a2:71:26:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:7B:2F:A0:26:9B:B0:D1:F7:71:2C:07:F7:A0:20:CD:5E:46:EE
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t7N7L6Amm7DR93EsB_egIM1eRu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4001::/48
2a0a:b381::/32
2a0d:afc2::/32
2a0d:c103::/32
Signature Algorithm: sha256WithRSAEncryption
80:6c:f4:0c:fe:56:19:c5:b8:1b:ad:c3:0e:63:4f:68:df:2c:
73:cf:14:45:a7:b7:cc:69:55:e1:03:d2:63:ff:c4:56:fc:a9:
ba:36:d7:ff:4c:35:b1:1b:d1:cc:ef:42:42:8a:1f:1d:38:15:
80:1b:96:8b:4a:fd:50:18:87:e1:75:24:5f:38:05:f6:a8:cf:
76:91:bd:3f:27:c9:ec:c1:61:99:92:57:6d:63:b8:6c:4e:69:
85:be:a3:99:89:07:b6:ec:4a:70:c9:38:22:53:b0:11:fa:7d:
ba:b4:75:90:d1:b5:17:1b:47:57:63:6c:22:1c:0c:cc:cf:37:
82:5f:6b:a9:6d:a2:76:d6:4c:dd:cd:dd:6b:a4:37:96:44:9f:
96:b6:0f:96:ea:1b:96:d3:0b:14:1e:ea:23:10:34:ef:6d:f8:
53:0d:ba:21:7f:89:77:6a:58:0c:8e:42:22:a4:26:22:5c:f0:
8f:c7:b3:ed:22:e8:26:45:58:f1:0a:fc:d3:6a:14:2e:c7:f5:
77:c3:e1:e1:35:99:7d:9c:7b:87:ee:1b:46:8a:22:93:fb:ae:
3e:ef:2a:d8:d6:4f:7d:36:54:d6:b3:4e:71:02:8b:13:53:3f:
62:6d:78:37:c0:46:b4:b3:2f:c5:74:dc:1b:3f:ae:10:2e:50:
85:00:0e:f7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYuWQcufx4OulV7WeUTAWpqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMxMTAzMTczNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2IzN2IyZmEwMjY5YmIwZDFmNzcxMmMwN2Y3YTAyMGNkNWU0NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogpFMWyqPiJ9u+8RO6+ovMZEmmdG
PK+yHkkz6Br8MkKth20LXCWkXhhKwrv0yNpzxp/7h0g0O7ITSXGR30pYUu4SFnZe
ijbbuXainlYa5XATuFjrjlgyPZM3bCILXRlODeB85K5XtaHo/n7gizJ58pk4f13M
+kPfKcHuQrf4wxz4ejARh7K8TtleANSVQ1tneh32GVCRgByC2UYQHFgmn94FjYUK
XgM4i5osCtF4mXVrvwRgB3a3IMXduBSuBRdnBBvOHaXWqQof3XWW7eU2cal0DDyY
7oKx0THprdgbJ5fOp7YhpfYbDmds68YNOzT3ay9MDLkOWe8SlxWicSZY8QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLezey+gJpuw0fdxLAf3oCDNXkbuMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvdDdON0w2QW1tN0RSOTNFc0JfZWdJTTFlUnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwcAKgFIoEAB
AwUAKgqzgQMFACoNr8IDBQAqDcEDMA0GCSqGSIb3DQEBCwUAA4IBAQCAbPQM/lYZ
xbgbrcMOY09o3yxzzxRFp7fMaVXhA9Jj/8RW/Km6Ntf/TDWxG9HM70JCih8dOBWA
G5aLSv1QGIfhdSRfOAX2qM92kb0/J8nswWGZkldtY7hsTmmFvqOZiQe27EpwyTgi
U7AR+n26tHWQ0bUXG0dXY2wiHAzMzzeCX2upbaJ21kzdzd1rpDeWRJ+Wtg+W6huW
0wsUHuojEDTvbfhTDbohf4l3algMjkIipCYiXPCPx7PtIugmRVjxCvzTahQux/V3
w+HhNZl9nHuH7htGiiKT+64+7yrY1k99NlTWs05xAosTUz9ibXg3wEa0sy/FdNwb
P64QLlCFAA73
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org