Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/t2zAoOFKW6T6N_EwFrnel3TQd28.roa
File: t2zAoOFKW6T6N_EwFrnel3TQd28.roa (raw, json)
Hash identifier: FIEdGuL+TC473cSlc0CpSAb2QL2g0R8WLVZ/KiMXTSc=
Subject key identifier: B7:6C:C0:A0:E1:4A:5B:A4:FA:37:F1:30:16:B9:DE:97:74:D0:77:6F
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 018D0CA9A5005C592626EA5569EE095039ED
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/t2zAoOFKW6T6N_EwFrnel3TQd28.roa
Signing time: Mon 15 Jan 2024 10:27:40 +0000
ROA not before: Mon 15 Jan 2024 10:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215733
IP address blocks: 2a01:ac::/32 maxlen: 32
2a01:ad::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Jan 2024 23:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:a9:a5:00:5c:59:26:26:ea:55:69:ee:09:50:39:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Jan 15 10:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b76cc0a0e14a5ba4fa37f13016b9de9774d0776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:c3:f0:99:78:81:bc:09:50:ea:9b:6c:62:
ed:51:1a:3a:d2:13:8f:aa:0b:5e:1d:95:ae:55:13:
b2:8f:86:a5:3c:ad:90:16:31:52:bd:de:f9:1d:71:
bd:35:e4:4c:de:bb:a2:ca:cf:c0:69:0a:d2:90:e0:
dc:a2:f9:6e:20:8f:25:84:8b:c3:76:3d:f0:1c:de:
e8:fd:20:ab:6f:5f:b3:20:c5:c7:0c:cb:ad:1f:ec:
4d:61:58:14:2c:cc:fe:66:08:42:f4:31:11:c1:af:
06:01:ec:a0:07:78:10:26:a5:e5:e4:53:93:8c:0c:
7e:5a:f5:23:2d:7d:50:9f:19:e9:14:00:64:67:3f:
b4:6c:a2:63:b8:d0:5f:24:07:60:28:7e:c4:97:cc:
83:57:5d:61:dd:c9:12:b7:7e:b9:0d:d5:b1:cd:e4:
7b:cc:d6:09:ce:7b:67:3a:fc:0a:95:be:fd:f1:45:
b7:d8:80:65:93:0e:94:2f:49:03:88:c8:97:60:e5:
64:c3:13:f1:98:f0:c1:ef:0f:fc:d7:18:80:54:6d:
d4:61:10:8b:31:23:c2:cc:de:e6:23:a8:58:3b:5f:
f3:27:f9:48:fd:6f:36:14:50:ca:e5:8a:db:c5:90:
bf:8a:83:48:6b:46:03:21:5c:24:4d:a8:23:ca:da:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:C0:A0:E1:4A:5B:A4:FA:37:F1:30:16:B9:DE:97:74:D0:77:6F
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/t2zAoOFKW6T6N_EwFrnel3TQd28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ac::/31
Signature Algorithm: sha256WithRSAEncryption
37:49:cb:72:40:6f:f0:17:c8:0c:46:c7:c4:a9:a6:1e:0a:e8:
60:93:fb:65:24:2b:2b:2c:63:f4:3e:dc:02:fe:08:bd:9c:e1:
54:66:bc:89:82:a3:4c:5c:41:9f:36:85:4e:04:a3:f0:fd:3e:
2c:0b:d0:eb:14:75:5c:fb:49:f9:1d:be:91:f2:06:5c:aa:f6:
49:ba:72:5d:d5:70:0c:42:43:e0:3b:f7:33:6e:1c:37:cd:a1:
6d:59:30:f2:ad:7b:b1:80:d6:cd:6a:98:14:2f:a7:d8:be:cc:
67:f2:db:20:3c:a4:38:84:ce:a3:12:a7:fd:73:bb:5a:90:5d:
88:f7:23:f9:ca:0a:c4:ae:ed:4e:00:38:de:9a:d7:b7:ea:9b:
af:17:3c:3e:ae:86:84:6a:e5:59:b7:1d:51:fe:b5:06:d4:cb:
2d:02:1f:16:ae:52:15:68:89:fc:ee:bb:ec:a7:7a:1e:9a:43:
0f:da:29:be:ed:b9:ed:d7:bb:84:7b:26:8e:55:fb:b3:94:74:
12:33:42:23:d2:d8:17:43:ad:1e:46:6b:e0:86:2e:2f:fc:6d:
62:84:07:7f:86:3b:58:77:3b:3e:e0:ad:78:b3:bf:7f:2e:3c:
92:93:87:8e:22:bc:15:61:b5:46:4b:46:0c:f6:3b:8f:82:24:
46:f3:b6:a5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY0MqaUAXFkmJupVae4JUDntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZhZWE2YmFiNzljNDhmNWRkZWU0YTQ2YmY0YWI2NGQ4
NjMxNjAwHhcNMjQwMTE1MTAyNzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzZjYzBhMGUxNGE1YmE0ZmEzN2YxMzAxNmI5ZGU5Nzc0ZDA3NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGDD8Jl4gbwJUOqbbGLtURo60hOP
qgteHZWuVROyj4alPK2QFjFSvd75HXG9NeRM3ruiys/AaQrSkODcovluII8lhIvD
dj3wHN7o/SCrb1+zIMXHDMutH+xNYVgULMz+ZghC9DERwa8GAeygB3gQJqXl5FOT
jAx+WvUjLX1QnxnpFABkZz+0bKJjuNBfJAdgKH7El8yDV11h3ckSt365DdWxzeR7
zNYJzntnOvwKlb798UW32IBlkw6UL0kDiMiXYOVkwxPxmPDB7w/81xiAVG3UYRCL
MSPCzN7mI6hYO1/zJ/lI/W82FFDK5YrbxZC/ioNIa0YDIVwkTagjytod0QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLdswKDhSluk+jfxMBa53pd00HdvMB8GA1UdIwQY
MBaAFGaWrqa6t5xI9d3uSka/SrZNhjFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2Qt
ZjAxOThjNmMyNDc0LzEvdDJ6QW9PRktXNlQ2Tl9Fd0ZybmVsM1RRZDI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NTJjMmItZjJjZi00YTkyLWExY2QtZjAxOThjNmMyNDc0
LzEvWnBhdXBycTNuRWoxM2U1S1JyOUt0azJHTVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgEArDAN
BgkqhkiG9w0BAQsFAAOCAQEAN0nLckBv8BfIDEbHxKmmHgroYJP7ZSQrKyxj9D7c
Av4IvZzhVGa8iYKjTFxBnzaFTgSj8P0+LAvQ6xR1XPtJ+R2+kfIGXKr2SbpyXdVw
DEJD4Dv3M24cN82hbVkw8q17sYDWzWqYFC+n2L7MZ/LbIDykOITOoxKn/XO7WpBd
iPcj+coKxK7tTgA43prXt+qbrxc8Pq6GhGrlWbcdUf61BtTLLQIfFq5SFWiJ/O67
7Kd6HppDD9opvu257de7hHsmjlX7s5R0EjNCI9LYF0OtHkZr4IYuL/xtYoQHf4Y7
WHc7PuCteLO/fy48kpOHjiK8FWG1RktGDPY7j4IkRvO2pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org