Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/18-NqZjyJBIZmr7yhKA4AXSVd5g.roa
File: 18-NqZjyJBIZmr7yhKA4AXSVd5g.roa (raw, json)
Hash identifier: ETPAXS+GbZjOIAFpGwXLrLDy4FnBUEZWTf31Rn2ctqg=
Subject key identifier: D7:CF:8D:A9:98:F2:24:12:19:9A:BE:F2:84:A0:38:01:74:95:77:98
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0189D13A2D21A6E794149A7F4A78DCDC4439
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/18-NqZjyJBIZmr7yhKA4AXSVd5g.roa
Signing time: Mon 07 Aug 2023 18:19:58 +0000
ROA not before: Mon 07 Aug 2023 18:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212832
IP address blocks: 2a13:1c46::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:3a:2d:21:a6:e7:94:14:9a:7f:4a:78:dc:dc:44:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Aug 7 18:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7cf8da998f22412199abef284a0380174957798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:b6:e7:ff:d1:fe:73:49:92:0d:6e:3b:d5:
ec:d9:ec:23:3a:ed:0c:35:90:cf:5e:f8:49:78:4c:
ad:83:2e:ee:18:4c:ad:bc:e2:6d:75:d1:bc:ac:2c:
d2:53:84:df:ac:45:e0:07:51:42:03:b3:b3:f5:94:
96:6f:7f:e0:56:53:a3:aa:68:00:cd:2e:e6:e4:09:
28:3e:23:ce:9b:63:07:74:86:dc:a4:80:de:5e:62:
af:1f:aa:65:b3:99:58:86:a5:01:a5:04:21:0c:17:
dc:a0:e4:44:64:1b:cc:42:05:88:49:34:78:c9:ab:
bf:74:01:5f:9b:52:9e:cb:c2:06:f2:b9:7d:6f:7c:
6d:2a:2d:e8:ed:86:ad:63:c7:03:4b:02:ab:84:e4:
10:c1:b7:84:3d:5b:69:0e:18:73:d5:94:1d:07:b5:
38:08:79:9c:f2:f7:19:52:cb:89:d3:8d:3c:ed:a4:
23:32:34:07:fc:f4:86:fc:9b:a2:b8:73:74:79:3c:
40:e3:b8:2c:f5:2b:28:3b:d1:ed:98:fc:5e:f0:14:
57:61:c4:32:33:f5:3e:af:26:98:03:d3:3c:6d:4d:
31:59:36:1f:24:5f:04:aa:95:62:03:fe:82:88:9c:
de:e9:26:d1:76:c6:b0:6f:a6:52:bd:01:bb:b4:3f:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:8D:A9:98:F2:24:12:19:9A:BE:F2:84:A0:38:01:74:95:77:98
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/18-NqZjyJBIZmr7yhKA4AXSVd5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c46::/32
Signature Algorithm: sha256WithRSAEncryption
9e:aa:6c:92:f0:4e:69:e9:07:32:e7:90:d8:d2:36:9c:e1:ed:
0c:11:72:de:a7:5b:e1:59:6b:88:5d:1f:63:5c:12:9b:e4:22:
e2:5f:f2:c8:cd:ab:b5:b3:0f:87:dc:4f:95:db:b2:a6:84:54:
fb:be:9b:08:c0:b3:06:fe:6f:fc:cf:64:cc:95:b5:ef:13:8e:
c2:4a:16:45:46:71:13:44:fd:be:07:17:a4:45:ea:54:fa:2d:
e2:98:1e:ac:25:08:65:a3:83:44:6e:79:8a:f3:12:73:46:7c:
24:53:51:0b:bf:96:f6:e5:6f:2f:ad:45:2c:77:a6:19:75:ac:
fc:66:61:ac:78:34:c5:d4:1f:64:ba:6b:de:2d:da:57:47:d8:
08:dd:1c:20:82:45:13:5e:6d:38:40:fa:e6:73:a8:4a:7d:66:
1d:a4:ff:ba:f5:1a:bc:59:f7:12:ca:c8:2c:f2:b0:e2:a4:8e:
74:50:ec:d3:5e:ed:62:a1:4e:f3:5c:5d:8f:f4:f3:d1:c7:5c:
70:50:42:ee:dd:97:12:99:fb:9a:dd:d5:06:56:96:2f:42:05:
bc:8a:f3:3b:d7:f4:b0:85:13:b3:fc:0d:68:d3:fd:4f:ec:74:
2b:15:75:fd:cb:5f:06:8f:09:13:3c:23:03:17:f7:f5:15:b5:
4e:c4:64:1b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYnROi0hpueUFJp/Snjc3EQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh
NTU2MDEwHhcNMjMwODA3MTgxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2NmOGRhOTk4ZjIyNDEyMTk5YWJlZjI4NGEwMzgwMTc0OTU3Nzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbu25//R/nNJkg1uO9Xs2ewjOu0M
NZDPXvhJeEytgy7uGEytvOJtddG8rCzSU4TfrEXgB1FCA7Oz9ZSWb3/gVlOjqmgA
zS7m5AkoPiPOm2MHdIbcpIDeXmKvH6pls5lYhqUBpQQhDBfcoOREZBvMQgWISTR4
yau/dAFfm1Key8IG8rl9b3xtKi3o7YatY8cDSwKrhOQQwbeEPVtpDhhz1ZQdB7U4
CHmc8vcZUsuJ04087aQjMjQH/PSG/JuiuHN0eTxA47gs9SsoO9HtmPxe8BRXYcQy
M/U+ryaYA9M8bU0xWTYfJF8EqpViA/6CiJze6SbRdsawb6ZSvQG7tD8FBwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNfPjamY8iQSGZq+8oSgOAF0lXeYMB8GA1UdIwQY
MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt
NjJjMDFkYzY5Y2NhLzEvMTgtTnFaanlKQklabXI3eWhLQTRBWFNWZDVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh
LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMcRjAN
BgkqhkiG9w0BAQsFAAOCAQEAnqpskvBOaekHMueQ2NI2nOHtDBFy3qdb4VlriF0f
Y1wSm+Qi4l/yyM2rtbMPh9xPlduypoRU+76bCMCzBv5v/M9kzJW17xOOwkoWRUZx
E0T9vgcXpEXqVPot4pgerCUIZaODRG55ivMSc0Z8JFNRC7+W9uVvL61FLHemGXWs
/GZhrHg0xdQfZLpr3i3aV0fYCN0cIIJFE15tOED65nOoSn1mHaT/uvUavFn3EsrI
LPKw4qSOdFDs017tYqFO81xdj/Tz0cdccFBC7t2XEpn7mt3VBlaWL0IFvIrzO9f0
sIUTs/wNaNP9T+x0KxV1/ctfBo8JEzwjAxf39RW1TsRkGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org