Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TV2F7hh-ZBk1sMKuiHHjnFoLAt8.roa
File: TV2F7hh-ZBk1sMKuiHHjnFoLAt8.roa (raw, json)
Hash identifier: US/xEmme+zfG/O6bxNTG1uebKBtSrHAkPeu33Pry38Q=
Subject key identifier: 4D:5D:85:EE:18:7E:64:19:35:B0:C2:AE:88:71:E3:9C:5A:0B:02:DF
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 018570DE311553A44B5C7F850C40516F83A0
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TV2F7hh-ZBk1sMKuiHHjnFoLAt8.roa
Signing time: Mon 02 Jan 2023 05:04:47 +0000
ROA not before: Mon 02 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 2a06:6541:1440::/48 maxlen: 48
2a06:6541:1382::/48 maxlen: 48
2a06:6540:1440::/48 maxlen: 48
2a06:6541:104b::/48 maxlen: 48
2a06:6540:1382::/48 maxlen: 48
2a06:6541:1201::/48 maxlen: 48
2a06:6541:1341::/48 maxlen: 48
2a06:6541:1381::/48 maxlen: 48
2a06:6541:13c1::/48 maxlen: 48
2a06:6541:1301::/48 maxlen: 48
2a06:6541:1281::/48 maxlen: 48
2a06:6541:1241::/48 maxlen: 48
2a06:6541:1001::/48 maxlen: 48
2a06:6541:4181::/48 maxlen: 48
2a06:6541:12c1::/48 maxlen: 48
2a06:6541:11c1::/48 maxlen: 48
2a06:6541:4101::/48 maxlen: 48
2a06:6540:104b::/48 maxlen: 48
2a06:6540:1201::/48 maxlen: 48
2a06:6540:12c1::/48 maxlen: 48
2a06:6540:1381::/48 maxlen: 48
2a06:6540:1001::/48 maxlen: 48
2a06:6540:4181::/48 maxlen: 48
2a06:6540:1341::/48 maxlen: 48
2a06:6540:1301::/48 maxlen: 48
2a06:6540:13c1::/48 maxlen: 48
2a06:6540:4101::/48 maxlen: 48
2a06:6540:1281::/48 maxlen: 48
2a06:6540:11c1::/48 maxlen: 48
2a06:6540:1241::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 May 2023 11:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:31:15:53:a4:4b:5c:7f:85:0c:40:51:6f:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 2 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d5d85ee187e641935b0c2ae8871e39c5a0b02df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:84:a0:db:39:38:dd:39:3d:81:a8:cd:07:
7b:ae:2e:5a:28:5d:7d:14:c3:5e:48:ee:e8:aa:cd:
0c:98:ca:64:a7:23:6a:34:a4:b0:f3:12:eb:96:e3:
b4:25:ae:61:a4:f3:3a:62:38:ac:db:ea:d6:97:9d:
ea:e1:11:ea:78:ea:cd:51:8d:1e:7f:ea:92:d3:df:
c6:ee:9b:ef:40:bd:8f:e5:de:2c:67:95:6d:1d:3a:
fa:f3:df:15:6d:3c:84:6d:74:a0:79:46:6a:11:aa:
f6:b9:70:64:e0:1f:3e:fa:59:e0:8b:6a:f6:a0:81:
41:c7:19:74:a0:a8:5b:1b:63:55:7b:0f:ef:25:68:
1e:a5:e6:64:3f:56:92:7e:54:f6:99:29:ef:9a:9c:
be:41:dc:10:c9:44:eb:c6:70:86:73:20:07:34:21:
ac:8b:8a:a9:75:f0:e2:80:75:f7:54:95:67:4d:59:
35:27:d4:28:d6:e0:76:d8:21:7f:8f:6e:04:84:40:
70:46:5c:87:7f:14:7e:b6:08:8a:72:2d:33:dc:40:
d4:71:19:7d:f7:5c:5c:d0:4e:4e:c4:23:c2:f0:6a:
e3:ec:85:d7:20:87:95:22:74:73:43:ba:82:c6:f7:
b0:2d:ca:0d:99:8d:e0:e7:18:48:de:05:71:b2:bf:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:85:EE:18:7E:64:19:35:B0:C2:AE:88:71:E3:9C:5A:0B:02:DF
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/TV2F7hh-ZBk1sMKuiHHjnFoLAt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:1001::/48
2a06:6540:104b::/48
2a06:6540:11c1::/48
2a06:6540:1201::/48
2a06:6540:1241::/48
2a06:6540:1281::/48
2a06:6540:12c1::/48
2a06:6540:1301::/48
2a06:6540:1341::/48
2a06:6540:1381::-2a06:6540:1382:ffff:ffff:ffff:ffff:ffff
2a06:6540:13c1::/48
2a06:6540:1440::/48
2a06:6540:4101::/48
2a06:6540:4181::/48
2a06:6541:1001::/48
2a06:6541:104b::/48
2a06:6541:11c1::/48
2a06:6541:1201::/48
2a06:6541:1241::/48
2a06:6541:1281::/48
2a06:6541:12c1::/48
2a06:6541:1301::/48
2a06:6541:1341::/48
2a06:6541:1381::-2a06:6541:1382:ffff:ffff:ffff:ffff:ffff
2a06:6541:13c1::/48
2a06:6541:1440::/48
2a06:6541:4101::/48
2a06:6541:4181::/48
Signature Algorithm: sha256WithRSAEncryption
6b:05:d2:9b:69:02:5e:8a:c6:2f:5a:e3:12:76:5d:5a:d8:c0:
24:1b:ff:6e:24:e2:f4:81:6c:47:a9:9c:a6:00:0d:bb:8e:4e:
4a:9b:ae:6c:93:10:7a:59:50:6a:4e:00:85:07:92:04:19:a5:
38:78:7b:22:eb:46:fe:4b:2f:02:06:b5:3a:a6:c1:9a:40:f8:
13:d5:d4:e0:d2:1a:21:1a:5d:f4:27:e9:35:83:2c:cc:de:51:
5a:67:3a:17:99:13:04:fc:dc:11:fe:0e:fb:92:80:4a:4e:9f:
d5:a1:08:98:6b:11:53:ae:21:c8:7a:47:89:3d:57:d4:03:e0:
e2:e4:38:cd:ee:7e:24:13:26:7b:be:13:70:ea:98:00:81:0a:
a4:21:1c:4a:99:54:df:00:07:b8:8e:c2:37:91:75:cc:b0:2f:
cd:2a:27:7c:80:78:db:c8:38:6a:bc:ac:b6:e3:75:e8:ec:91:
34:70:51:c6:bf:30:2a:6e:2c:e7:a9:7b:93:6a:a0:db:9d:bc:
71:61:99:a6:28:cf:77:39:9f:74:8b:29:dd:21:fe:1c:17:da:
95:e4:31:e1:a5:f2:64:ae:0b:57:82:b9:a8:fe:8e:48:1d:32:
f7:82:ae:04:3f:9d:bf:08:b8:f3:a3:92:a1:32:8e:cc:a4:21:
0d:d8:b1:36
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAYVw3jEVU6RLXH+FDEBRb4OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjMwMTAyMDUwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDVkODVlZTE4N2U2NDE5MzViMGMyYWU4ODcxZTM5YzVhMGIwMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqeEoNs5ON05PYGozQd7ri5aKF19
FMNeSO7oqs0MmMpkpyNqNKSw8xLrluO0Ja5hpPM6Yjis2+rWl53q4RHqeOrNUY0e
f+qS09/G7pvvQL2P5d4sZ5VtHTr6898VbTyEbXSgeUZqEar2uXBk4B8++lngi2r2
oIFBxxl0oKhbG2NVew/vJWgepeZkP1aSflT2mSnvmpy+QdwQyUTrxnCGcyAHNCGs
i4qpdfDigHX3VJVnTVk1J9Qo1uB22CF/j24EhEBwRlyHfxR+tgiKci0z3EDUcRl9
91xc0E5OxCPC8Grj7IXXIIeVInRzQ7qCxvewLcoNmY3g5xhI3gVxsr+aCQIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFE1dhe4YfmQZNbDCrohx45xaCwLfMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvVFYyRjdoaC1aQmsxc01LdWlISGpuRm9MQXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgACMIIB
EgMHACoGZUAQAQMHACoGZUAQSwMHACoGZUARwQMHACoGZUASAQMHACoGZUASQQMH
ACoGZUASgQMHACoGZUASwQMHACoGZUATAQMHACoGZUATQTASAwcAKgZlQBOBAwcA
KgZlQBOCAwcAKgZlQBPBAwcAKgZlQBRAAwcAKgZlQEEBAwcAKgZlQEGBAwcAKgZl
QRABAwcAKgZlQRBLAwcAKgZlQRHBAwcAKgZlQRIBAwcAKgZlQRJBAwcAKgZlQRKB
AwcAKgZlQRLBAwcAKgZlQRMBAwcAKgZlQRNBMBIDBwAqBmVBE4EDBwAqBmVBE4ID
BwAqBmVBE8EDBwAqBmVBFEADBwAqBmVBQQEDBwAqBmVBQYEwDQYJKoZIhvcNAQEL
BQADggEBAGsF0ptpAl6Kxi9a4xJ2XVrYwCQb/24k4vSBbEepnKYADbuOTkqbrmyT
EHpZUGpOAIUHkgQZpTh4eyLrRv5LLwIGtTqmwZpA+BPV1ODSGiEaXfQn6TWDLMze
UVpnOheZEwT83BH+DvuSgEpOn9WhCJhrEVOuIch6R4k9V9QD4OLkOM3ufiQTJnu+
E3DqmACBCqQhHEqZVN8AB7iOwjeRdcywL80qJ3yAeNvIOGq8rLbjdejskTRwUca/
MCpuLOepe5NqoNudvHFhmaYoz3c5n3SLKd0h/hwX2pXkMeGl8mSuC1eCuaj+jkgd
MveCrgQ/nb8IuPOjkqEyjsykIQ3YsTY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org