Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/tx7H35EfWUHCZK-1bx-A4mC-Cfw.roa
File: tx7H35EfWUHCZK-1bx-A4mC-Cfw.roa (raw, json)
Hash identifier: GyK0vtTTjA+6yDGQrXA+Mrcekoi3GwoHBqM7cg48J58=
Subject key identifier: B7:1E:C7:DF:91:1F:59:41:C2:64:AF:B5:6F:1F:80:E2:60:BE:09:FC
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 018570395D43447158BD3F594FFFA030C9F5
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/tx7H35EfWUHCZK-1bx-A4mC-Cfw.roa
Signing time: Mon 02 Jan 2023 02:04:45 +0000
ROA not before: Mon 02 Jan 2023 02:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206459
IP address blocks: 2a12:bd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:5d:43:44:71:58:bd:3f:59:4f:ff:a0:30:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: Jan 2 02:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71ec7df911f5941c264afb56f1f80e260be09fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:fd:6a:27:9b:4e:a0:1c:44:de:e5:ed:20:
c2:e8:e1:8d:b9:b3:0e:9c:e9:ea:65:67:fc:e5:2a:
d6:35:45:e4:67:84:ab:55:ca:75:58:fc:67:2a:29:
d1:a8:7b:f6:6d:05:c1:e7:3d:62:0d:a7:10:75:9b:
2c:3f:90:5c:c0:b4:90:c2:70:52:a2:c8:6d:ae:6f:
cd:a3:73:6b:bf:4f:5b:a4:93:3b:24:53:89:19:2e:
2c:9b:03:09:8b:8d:1f:0e:52:ac:30:c1:92:9e:95:
c3:43:f1:35:d7:72:a6:e9:51:86:a7:da:6a:52:e5:
64:51:92:a5:1d:de:39:e8:d2:cb:10:e3:ad:dd:b7:
32:69:92:0e:da:bf:33:1c:cc:b6:8d:b9:2c:1e:38:
80:9f:3e:83:23:87:7e:ec:f4:cb:87:5b:bf:73:a5:
15:31:23:a1:d0:b0:15:c9:50:a4:c7:e7:56:37:34:
82:42:a2:b1:7e:04:27:1a:56:4c:7c:44:3d:b6:2a:
8e:82:09:8a:db:0e:7b:c2:87:32:53:29:e1:20:13:
1e:06:e2:a4:9c:b4:c2:3f:11:0c:52:89:2f:32:47:
9d:45:37:f1:df:ac:f5:a8:f4:92:2d:ab:80:4f:26:
88:47:4a:bb:b6:0d:df:18:bd:66:1b:31:78:2f:b1:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:C7:DF:91:1F:59:41:C2:64:AF:B5:6F:1F:80:E2:60:BE:09:FC
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/tx7H35EfWUHCZK-1bx-A4mC-Cfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:8c:d9:23:c2:ff:f5:94:80:c9:2a:0f:81:39:b4:81:d8:3c:
ad:28:8f:3f:86:11:57:0a:c6:c8:b4:2e:da:cd:4e:ec:17:27:
d9:54:a1:26:3e:76:97:91:6e:2c:6e:3e:5b:6f:60:13:a7:cd:
c0:f3:5e:a9:10:6d:ce:a8:7d:61:06:7d:d7:f8:11:3b:ed:68:
2c:d4:0b:da:03:44:e0:b6:f5:c8:d6:b0:9e:87:37:5f:f0:1d:
9a:13:ac:6c:f8:45:7c:01:df:e4:7d:81:34:f3:9d:5e:23:19:
69:5c:f8:cc:1e:64:21:ee:86:a3:1d:aa:9e:3e:4a:a3:63:21:
df:9c:2a:61:84:1a:57:23:93:34:96:35:9d:f6:88:ce:b0:12:
4d:45:bd:f7:32:5d:43:5c:6c:2d:62:d5:62:a1:1f:35:b5:61:
25:e9:56:00:2a:fc:4c:6e:a7:9f:fe:7c:d7:38:10:91:5b:d4:
d5:e4:e7:36:c7:11:74:b9:8a:3f:6b:5c:03:98:6b:0e:e3:70:
72:a0:55:5c:d2:1c:a7:7b:2c:87:46:6d:a2:b8:a1:95:b1:41:
b0:08:d6:6d:d5:11:e9:ab:b6:38:ba:93:40:f7:49:b0:45:02:
e4:9c:35:a6:29:e3:d3:82:48:1c:2d:0b:63:35:5a:1a:e6:20:
6a:40:08:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwOV1DRHFYvT9ZT/+gMMn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjI5YWNjZDRjMGQ1ZjVmODM3N2VhN2Y0NjM0M2I3NjA2
YmFiN2MwHhcNMjMwMTAyMDIwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzFlYzdkZjkxMWY1OTQxYzI2NGFmYjU2ZjFmODBlMjYwYmUwOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc/9aiebTqAcRN7l7SDC6OGNubMO
nOnqZWf85SrWNUXkZ4SrVcp1WPxnKinRqHv2bQXB5z1iDacQdZssP5BcwLSQwnBS
oshtrm/No3Nrv09bpJM7JFOJGS4smwMJi40fDlKsMMGSnpXDQ/E113Km6VGGp9pq
UuVkUZKlHd456NLLEOOt3bcyaZIO2r8zHMy2jbksHjiAnz6DI4d+7PTLh1u/c6UV
MSOh0LAVyVCkx+dWNzSCQqKxfgQnGlZMfEQ9tiqOggmK2w57wocyUynhIBMeBuKk
nLTCPxEMUokvMkedRTfx36z1qPSSLauATyaIR0q7tg3fGL1mGzF4L7HSSwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLcex9+RH1lBwmSvtW8fgOJgvgn8MB8GA1UdIwQY
MBaAFCOymszUwNX1+Dd+p/RjQ7dga6t8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdLYXpOVEExZlg0TjM2bjlHTkR0MkJycTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MTFkYjktY2JlMC00YTg5LWEyMjAt
MTE3NGE0MjgwMzZiLzEvdHg3SDM1RWZXVUhDWkstMWJ4LUE0bUMtQ2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84MTFkYjktY2JlMC00YTg5LWEyMjAtMTE3NGE0MjgwMzZi
LzEvSTdLYXpOVEExZlg0TjM2bjlHTkR0MkJycTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhK9QDAN
BgkqhkiG9w0BAQsFAAOCAQEAf4zZI8L/9ZSAySoPgTm0gdg8rSiPP4YRVwrGyLQu
2s1O7Bcn2VShJj52l5FuLG4+W29gE6fNwPNeqRBtzqh9YQZ91/gRO+1oLNQL2gNE
4Lb1yNawnoc3X/AdmhOsbPhFfAHf5H2BNPOdXiMZaVz4zB5kIe6Gox2qnj5Ko2Mh
35wqYYQaVyOTNJY1nfaIzrASTUW99zJdQ1xsLWLVYqEfNbVhJelWACr8TG6nn/58
1zgQkVvU1eTnNscRdLmKP2tcA5hrDuNwcqBVXNIcp3ssh0ZtorihlbFBsAjWbdUR
6au2OLqTQPdJsEUC5Jw1pinj04JIHC0LYzVaGuYgakAItA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:11 2024 by rpki-client on console-ams.rpki-client.org