Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/z9pQ_GrqoroMLoKfNJh2IanbZMI.roa
File: z9pQ_GrqoroMLoKfNJh2IanbZMI.roa (raw, json)
Hash identifier: onTzDNwM22tABwdh+HzMUZMNUczube/ZUjnosA2wong=
Subject key identifier: CF:DA:50:FC:6A:EA:A2:BA:0C:2E:82:9F:34:98:76:21:A9:DB:64:C2
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01864CD45C124F0502D9B7D4D4A261D4BD2E
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/z9pQ_GrqoroMLoKfNJh2IanbZMI.roa
Signing time: Mon 13 Feb 2023 22:10:30 +0000
ROA not before: Mon 13 Feb 2023 22:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51345
IP address blocks: 2a13:1c46::/32 maxlen: 48
2a13:1c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Mar 2023 12:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:d4:5c:12:4f:05:02:d9:b7:d4:d4:a2:61:d4:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Feb 13 22:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfda50fc6aeaa2ba0c2e829f34987621a9db64c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:63:20:de:c5:72:3c:01:7d:46:6a:6d:44:
87:e3:75:f7:6f:bd:b5:f4:4e:9c:99:55:e0:73:d7:
f7:45:61:42:63:12:0f:19:fa:83:4e:ba:5d:7d:32:
3e:de:c3:6e:b3:f8:d5:84:9a:18:12:7f:2f:c3:bb:
7f:40:aa:72:c8:3e:1f:3c:f7:34:50:a9:16:5b:24:
49:24:65:2a:fe:9e:cc:5c:93:60:de:52:c6:dd:4e:
88:a8:8a:ea:f8:1b:fb:e8:d3:36:00:45:ea:12:1f:
f4:34:95:92:e4:16:45:ea:d4:38:e4:70:71:d5:f8:
36:5e:96:57:38:d9:fa:e6:0e:6a:01:32:3d:98:c7:
66:57:6a:c8:a2:8f:b9:d0:83:a9:2e:4f:95:41:86:
23:38:9c:cd:b5:b8:e4:b1:72:d6:f0:24:56:78:eb:
31:38:53:80:93:b9:eb:8b:e3:61:72:73:41:3a:e8:
03:d4:f0:21:2d:89:72:08:e3:1b:03:a8:78:3f:a2:
24:78:d1:93:da:f9:d9:ae:49:52:2b:0b:16:12:f5:
1c:59:2e:ca:e7:61:ab:a5:5f:aa:7e:d9:66:76:87:
bd:2a:6c:5c:a5:77:35:1f:20:63:41:90:a6:4a:ea:
78:2c:32:47:ac:9e:69:5c:df:ec:b5:b9:e2:10:df:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:50:FC:6A:EA:A2:BA:0C:2E:82:9F:34:98:76:21:A9:DB:64:C2
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/z9pQ_GrqoroMLoKfNJh2IanbZMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
c7:9c:46:d5:3d:80:45:ac:15:a2:c7:93:07:18:c3:4f:5c:34:
b7:e9:3b:90:b4:de:ac:84:4b:43:e0:f9:d9:c9:06:bf:89:cd:
54:23:03:12:69:07:93:b5:04:38:27:e3:bf:b8:e9:fb:fd:92:
0f:8e:14:63:79:3a:91:18:52:e9:c9:8f:61:e5:16:a4:da:9b:
3b:ee:f0:72:87:aa:fd:6e:63:fa:9a:d0:eb:86:b1:6b:49:94:
63:96:3e:96:62:16:34:a3:8e:d0:b5:8d:f3:dd:36:0b:73:f4:
00:52:4e:b8:45:ba:c2:60:de:44:fb:d2:e3:f7:6d:fe:53:f9:
9f:bd:dd:ab:fb:17:ef:3a:92:61:8d:54:4b:6e:64:2c:af:bb:
2d:83:53:cb:6a:02:16:f1:d4:d5:cc:74:bd:49:fc:ee:ba:3e:
c9:e7:d2:08:f2:f3:eb:1a:d5:42:cf:d1:21:e5:cd:ba:cb:2b:
19:df:4a:de:3b:37:2c:3e:63:f3:53:3a:03:59:ea:04:44:9a:
d4:95:8a:56:bb:96:c1:04:a8:94:16:27:df:8d:b3:bc:6e:2f:
da:56:4f:c8:66:68:5a:94:b8:a9:8f:fe:80:ae:be:c3:93:78:
0d:72:77:65:f3:8c:9e:4e:54:b4:f1:77:3c:d3:98:f5:63:2d:
65:e9:2d:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZM1FwSTwUC2bfU1KJh1L0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh
NTU2MDEwHhcNMjMwMjEzMjIxMDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmRhNTBmYzZhZWFhMmJhMGMyZTgyOWYzNDk4NzYyMWE5ZGI2NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllZjIN7FcjwBfUZqbUSH43X3b721
9E6cmVXgc9f3RWFCYxIPGfqDTrpdfTI+3sNus/jVhJoYEn8vw7t/QKpyyD4fPPc0
UKkWWyRJJGUq/p7MXJNg3lLG3U6IqIrq+Bv76NM2AEXqEh/0NJWS5BZF6tQ45HBx
1fg2XpZXONn65g5qATI9mMdmV2rIoo+50IOpLk+VQYYjOJzNtbjksXLW8CRWeOsx
OFOAk7nri+NhcnNBOugD1PAhLYlyCOMbA6h4P6IkeNGT2vnZrklSKwsWEvUcWS7K
52GrpV+qftlmdoe9KmxcpXc1HyBjQZCmSup4LDJHrJ5pXN/stbniEN/F3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM/aUPxq6qK6DC6CnzSYdiGp22TCMB8GA1UdIwQY
MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt
NjJjMDFkYzY5Y2NhLzEvejlwUV9HcnFvcm9NTG9LZk5KaDJJYW5iWk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh
LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMcQDAN
BgkqhkiG9w0BAQsFAAOCAQEAx5xG1T2ARawVoseTBxjDT1w0t+k7kLTerIRLQ+D5
2ckGv4nNVCMDEmkHk7UEOCfjv7jp+/2SD44UY3k6kRhS6cmPYeUWpNqbO+7wcoeq
/W5j+prQ64axa0mUY5Y+lmIWNKOO0LWN8902C3P0AFJOuEW6wmDeRPvS4/dt/lP5
n73dq/sX7zqSYY1US25kLK+7LYNTy2oCFvHU1cx0vUn87ro+yefSCPLz6xrVQs/R
IeXNussrGd9K3js3LD5j81M6A1nqBESa1JWKVruWwQSolBYn342zvG4v2lZPyGZo
WpS4qY/+gK6+w5N4DXJ3ZfOMnk5UtPF3PNOY9WMtZektGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org