Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iC5KVqG2lLaF5IO8_fgfrxAVy9c.roa
File: iC5KVqG2lLaF5IO8_fgfrxAVy9c.roa (raw, json)
Hash identifier: oi2FwYTrHAVycgPf2DtNqhiQjh1d0cqok84fVNXgqGA=
Subject key identifier: 88:2E:4A:56:A1:B6:94:B6:85:E4:83:BC:FD:F8:1F:AF:10:15:CB:D7
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018B1EE4D7A68DB844AA04735F955CE8AAF4
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iC5KVqG2lLaF5IO8_fgfrxAVy9c.roa
Signing time: Wed 11 Oct 2023 13:19:55 +0000
ROA not before: Wed 11 Oct 2023 13:19:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 2a12:6900:1000::/40 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:e4:d7:a6:8d:b8:44:aa:04:73:5f:95:5c:e8:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Oct 11 13:19:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=882e4a56a1b694b685e483bcfdf81faf1015cbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:16:14:cf:f7:84:f2:ea:8a:3c:ad:e2:01:
20:85:09:dc:d5:42:27:15:62:bd:c0:b8:56:40:13:
7c:3e:66:02:b4:35:b0:8b:1e:6a:f8:41:6d:20:fe:
26:e3:32:ad:7f:bb:c6:6c:32:d3:d5:f3:74:14:b7:
84:0b:8c:d9:a7:b6:38:aa:0c:68:37:c8:26:19:55:
bb:67:6a:43:5b:83:cd:d9:42:b0:b9:d4:ad:87:2d:
28:5b:9c:be:19:f1:98:aa:fb:8c:0f:e4:a9:ff:7e:
b3:80:8e:b6:d8:65:a3:ef:e7:63:e0:18:f9:fd:1e:
97:46:61:17:91:e0:49:3d:5c:94:5a:48:d4:22:87:
4e:45:bc:c1:ed:71:04:ee:d1:cc:cb:a5:0b:47:09:
91:3b:dd:e0:d8:b9:9d:6b:e0:70:9d:46:c8:5e:2f:
87:77:51:e3:06:00:bf:fb:9d:14:ef:91:28:09:a0:
37:fb:06:d3:69:54:c6:82:18:e3:3a:5b:e2:3f:cd:
47:6b:38:a3:e9:ed:6f:de:9a:c7:a3:d0:b9:cf:2a:
8e:db:56:6c:07:94:72:91:2e:bb:49:09:e3:93:29:
7a:8a:ba:46:b1:9d:14:e3:75:b9:8e:1e:32:c0:6b:
8b:3a:96:a0:76:e4:73:67:5b:9d:cd:a9:45:81:e0:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:4A:56:A1:B6:94:B6:85:E4:83:BC:FD:F8:1F:AF:10:15:CB:D7
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/iC5KVqG2lLaF5IO8_fgfrxAVy9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1000::/40
Signature Algorithm: sha256WithRSAEncryption
34:f9:3d:06:fb:71:71:81:8f:90:97:58:ba:ef:f2:bc:ab:c5:
8b:d9:38:29:46:96:b0:7a:07:1e:48:60:96:67:f3:13:5d:f4:
7e:65:f4:53:05:d1:93:af:a1:ca:ee:8f:47:7b:5b:9d:ef:2c:
c9:01:3f:b8:f7:7b:e8:1f:ee:77:e7:39:bf:ce:09:3d:f2:de:
52:71:45:80:31:32:57:9d:f1:31:53:f7:39:b2:5b:fa:4e:95:
20:ff:46:c0:61:cc:d8:de:a7:0a:ce:1e:d0:75:4e:32:98:49:
83:e2:e0:ec:77:b3:14:93:7b:c4:a3:f8:46:fd:c3:59:bf:39:
17:28:dd:7d:15:b8:c2:a6:1c:30:c2:18:ec:38:81:91:ef:a3:
9b:ee:17:b3:0c:6b:2a:b3:c4:6a:1c:f3:1d:e4:7b:e2:03:98:
df:bb:18:34:dc:05:82:37:b9:2f:61:e6:cb:d9:f2:83:34:e4:
0a:e2:f5:de:8f:bb:2a:9c:ca:4a:a6:18:e2:e7:dd:5b:60:7f:
4b:cd:2f:43:0c:53:bb:3d:1e:f8:50:c4:79:ba:d7:d2:d2:20:
ff:4d:99:35:89:eb:12:1a:c4:8d:1c:b2:d5:87:f8:3f:65:d0:
f9:2a:2d:c4:0e:a4:7e:8f:8d:d2:87:f3:c8:b1:c0:c9:a2:bd:
b3:4e:45:85
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYse5NemjbhEqgRzX5Vc6Kr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4
YjVjMDUwHhcNMjMxMDExMTMxOTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODJlNGE1NmExYjY5NGI2ODVlNDgzYmNmZGY4MWZhZjEwMTVjYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdcWFM/3hPLqijyt4gEghQnc1UIn
FWK9wLhWQBN8PmYCtDWwix5q+EFtIP4m4zKtf7vGbDLT1fN0FLeEC4zZp7Y4qgxo
N8gmGVW7Z2pDW4PN2UKwudSthy0oW5y+GfGYqvuMD+Sp/36zgI622GWj7+dj4Bj5
/R6XRmEXkeBJPVyUWkjUIodORbzB7XEE7tHMy6ULRwmRO93g2Lmda+BwnUbIXi+H
d1HjBgC/+50U75EoCaA3+wbTaVTGghjjOlviP81Hazij6e1v3prHo9C5zyqO21Zs
B5RykS67SQnjkyl6irpGsZ0U43W5jh4ywGuLOpagduRzZ1udzalFgeD+vQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIguSlahtpS2heSDvP34H68QFcvXMB8GA1UdIwQY
MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt
MjFhNzAwYzcxMTlmLzEvaUM1S1ZxRzJsTGFGNUlPOF9mZ2ZyeEFWeTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm
LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhJpABAw
DQYJKoZIhvcNAQELBQADggEBADT5PQb7cXGBj5CXWLrv8ryrxYvZOClGlrB6Bx5I
YJZn8xNd9H5l9FMF0ZOvocruj0d7W53vLMkBP7j3e+gf7nfnOb/OCT3y3lJxRYAx
Mled8TFT9zmyW/pOlSD/RsBhzNjepwrOHtB1TjKYSYPi4Ox3sxSTe8Sj+Eb9w1m/
ORco3X0VuMKmHDDCGOw4gZHvo5vuF7MMayqzxGoc8x3ke+IDmN+7GDTcBYI3uS9h
5svZ8oM05Ari9d6PuyqcykqmGOLn3Vtgf0vNL0MMU7s9HvhQxHm619LSIP9NmTWJ
6xIaxI0cstWH+D9l0PkqLcQOpH6PjdKH88ixwMmivbNORYU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org