Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/lSYo1e8zmhZB_7c_27r6QSv96-s.roa
File: lSYo1e8zmhZB_7c_27r6QSv96-s.roa (raw, json)
Hash identifier: Z9S3m2F+9sBnIARdIcv5ZLNWU8DC7vsJnP1oU/73FYY=
Subject key identifier: 95:26:28:D5:EF:33:9A:16:41:FF:B7:3F:DB:BA:FA:41:2B:FD:EB:EB
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019302268E9EEE4A7E50E05052875333E7F0
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/lSYo1e8zmhZB_7c_27r6QSv96-s.roa
Signing time: Wed 06 Nov 2024 15:45:01 +0000
ROA not before: Wed 06 Nov 2024 15:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2001:3500::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 22 Nov 2024 00:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:26:8e:9e:ee:4a:7e:50:e0:50:52:87:53:33:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Nov 6 15:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=952628d5ef339a1641ffb73fdbbafa412bfdebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:cc:4d:8f:76:19:c6:50:78:a4:23:c1:f3:
a8:c7:e4:35:84:d3:68:df:95:61:54:7b:7c:07:c8:
d2:0a:8f:27:01:8d:62:5c:b2:6b:78:43:b6:2a:c3:
e5:13:e2:98:9b:f4:d2:13:b0:3d:6f:45:2b:a8:fd:
3b:14:3d:ba:60:e9:fa:cd:e7:56:21:7a:f2:43:f5:
f8:94:18:62:c7:a6:b5:47:4e:d4:1b:40:55:8a:41:
a7:94:0f:98:99:55:ea:dc:76:b4:a3:37:8c:a8:95:
3e:cb:2a:e6:ee:e1:3e:46:91:c0:f7:36:03:12:78:
06:bd:90:b6:2a:12:ae:f3:3a:f5:91:85:fc:2a:0b:
3e:50:82:2e:7e:55:4f:6d:1f:db:d3:3c:92:53:bc:
d0:83:ce:f3:20:86:4d:34:56:24:70:ae:b3:5b:d8:
8b:12:77:1c:20:99:82:b1:91:61:32:df:de:a8:c3:
1d:b0:69:2c:ff:f8:0a:b5:17:d0:a1:a2:49:db:86:
ff:1c:70:73:30:d2:f2:52:75:b4:48:e0:61:4a:55:
84:0a:ff:41:8c:ce:e8:7d:7f:e8:3b:1e:3a:d3:5c:
a1:e2:e8:5c:34:73:22:03:27:ef:a9:c0:aa:9b:d7:
33:04:5f:4d:3d:93:25:e4:e3:52:cc:8e:3a:5f:81:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:26:28:D5:EF:33:9A:16:41:FF:B7:3F:DB:BA:FA:41:2B:FD:EB:EB
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/lSYo1e8zmhZB_7c_27r6QSv96-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3500::/29
Signature Algorithm: sha256WithRSAEncryption
84:c5:70:81:ac:a7:54:35:0d:7f:ab:88:20:21:2e:7e:9e:ea:
47:bd:1c:68:b2:30:7e:10:1d:06:7b:8e:7b:54:ab:3a:8a:56:
e7:1e:01:e4:71:25:10:d2:99:fb:55:ef:9a:bd:08:19:66:16:
8c:3a:c4:31:ea:10:d1:9a:65:c4:05:1b:2a:e5:e9:b1:1c:e3:
d5:24:86:de:f5:48:b5:ae:a4:d0:b5:0b:ea:13:58:a4:5b:7a:
e8:31:b7:e5:3c:02:c2:b9:f0:45:98:fb:cf:26:66:df:34:e7:
1f:fd:f3:d7:da:32:e0:5e:4d:ac:13:9a:eb:25:df:df:66:51:
14:b8:85:22:39:0e:f7:80:5c:c7:ef:bd:a8:6d:f8:e0:91:cb:
32:04:97:9f:97:6d:7f:c3:de:cc:fb:68:9a:dd:f4:d8:4b:f6:
7d:5f:84:fb:01:04:dc:55:62:9a:ff:6b:46:68:43:3c:a2:06:
32:6e:07:a5:28:28:7f:e8:9b:51:58:0b:aa:95:dc:8a:91:4b:
20:a1:d4:a0:57:7a:8c:71:da:8b:85:29:00:ce:ed:6f:4d:84:
f2:c7:8c:82:27:65:10:fc:47:a4:00:7f:75:65:f1:47:89:74:
b7:01:4e:25:7f:68:4f:8f:25:03:05:c5:1f:e8:b4:91:91:00:
d7:46:0e:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZMCJo6e7kp+UOBQUodTM+fwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjQxMTA2MTU0NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTI2MjhkNWVmMzM5YTE2NDFmZmI3M2ZkYmJhZmE0MTJiZmRlYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGLMTY92GcZQeKQjwfOox+Q1hNNo
35VhVHt8B8jSCo8nAY1iXLJreEO2KsPlE+KYm/TSE7A9b0UrqP07FD26YOn6zedW
IXryQ/X4lBhix6a1R07UG0BVikGnlA+YmVXq3Ha0ozeMqJU+yyrm7uE+RpHA9zYD
EngGvZC2KhKu8zr1kYX8Kgs+UIIuflVPbR/b0zySU7zQg87zIIZNNFYkcK6zW9iL
EnccIJmCsZFhMt/eqMMdsGks//gKtRfQoaJJ24b/HHBzMNLyUnW0SOBhSlWECv9B
jM7ofX/oOx4601yh4uhcNHMiAyfvqcCqm9czBF9NPZMl5ONSzI46X4HZ/wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJUmKNXvM5oWQf+3P9u6+kEr/evrMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvbFNZbzFlOHptaFpCXzdjXzI3cjZRU3Y5Ni1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE1ADAN
BgkqhkiG9w0BAQsFAAOCAQEAhMVwgaynVDUNf6uIICEufp7qR70caLIwfhAdBnuO
e1SrOopW5x4B5HElENKZ+1Xvmr0IGWYWjDrEMeoQ0ZplxAUbKuXpsRzj1SSG3vVI
ta6k0LUL6hNYpFt66DG35TwCwrnwRZj7zyZm3zTnH/3z19oy4F5NrBOa6yXf32ZR
FLiFIjkO94Bcx++9qG344JHLMgSXn5dtf8PezPtomt302Ev2fV+E+wEE3FVimv9r
RmhDPKIGMm4HpSgof+ibUVgLqpXcipFLIKHUoFd6jHHai4UpAM7tb02E8seMgidl
EPxHpAB/dWXxR4l0twFOJX9oT48lAwXFH+i0kZEA10YO+w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:47:25 2024 by rpki-client on console-fra.rpki-client.org