Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/3Z6g5Y813dB6lum9Z1l1kCcmM1M.roa
File: 3Z6g5Y813dB6lum9Z1l1kCcmM1M.roa (raw, json)
Hash identifier: AdmVkJfdarveqYZXmbegFT89XvTGaIqgaOCJKF+hqDw=
Subject key identifier: DD:9E:A0:E5:8F:35:DD:D0:7A:96:E9:BD:67:59:75:90:27:26:33:53
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 018572835CE80A3814FD360C5ECD6B1C72A3
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/3Z6g5Y813dB6lum9Z1l1kCcmM1M.roa
Signing time: Mon 02 Jan 2023 12:44:49 +0000
ROA not before: Mon 02 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
Validation: Failed, certificate revoked on Wed 03 May 2023 13:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5c:e8:0a:38:14:fd:36:0c:5e:cd:6b:1c:72:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 2 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd9ea0e58f35ddd07a96e9bd6759759027263353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:1a:9a:16:40:95:05:bd:5c:37:07:75:0b:
69:36:b9:6b:05:d3:00:b9:0a:92:42:f0:f8:35:3a:
d0:76:7e:dd:cc:6e:46:82:b5:c4:f2:9d:fc:c3:2a:
31:74:ac:2a:67:88:b7:70:8d:e5:de:ac:f9:14:8a:
97:1a:b2:d6:f3:9b:49:80:db:e3:87:ae:96:7c:2d:
76:b4:67:64:3f:0b:8d:a4:89:6a:2e:c4:6a:9d:6c:
dd:9e:6e:4c:17:a3:59:b3:2b:f2:c7:ad:a8:84:66:
b5:7e:45:86:a6:b9:57:3a:d8:d7:19:57:0c:d6:6b:
5a:ff:6d:ce:7a:c3:a4:6d:c5:5a:f0:20:25:c4:4a:
48:30:89:e1:9e:68:b0:11:0d:d0:89:20:bc:5e:01:
7e:be:5c:96:4c:bb:ca:61:83:00:df:16:78:47:8f:
e1:8f:3c:1f:90:da:8a:a1:e0:cf:0c:7e:e0:a8:71:
c6:35:49:ee:96:53:52:13:65:fd:f8:66:f4:58:51:
ff:2c:c4:b6:72:99:d8:3f:cc:fc:49:9a:6c:2f:75:
97:68:eb:23:ad:23:96:ed:8e:05:9a:33:45:61:a3:
b8:5a:b8:6b:61:88:46:1e:ed:84:e6:50:e8:41:b4:
fc:88:2f:ee:77:d5:eb:9f:fc:3c:31:55:8c:20:23:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:A0:E5:8F:35:DD:D0:7A:96:E9:BD:67:59:75:90:27:26:33:53
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/3Z6g5Y813dB6lum9Z1l1kCcmM1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
Signature Algorithm: sha256WithRSAEncryption
09:e6:ab:7e:d6:e4:1b:4d:53:c9:fa:1d:81:98:f0:fb:3d:0c:
dd:f7:f2:9d:30:da:d6:03:fa:65:fa:40:3d:8b:e9:61:30:81:
4f:77:d3:85:10:c1:58:b8:a3:9b:4a:d9:01:a6:05:b2:cf:14:
b8:73:eb:54:e5:52:82:99:0c:5d:b1:b0:c9:36:08:fe:eb:c4:
62:b7:02:39:85:37:05:61:21:61:d2:b0:3b:5a:f4:f9:bc:3f:
26:df:2a:80:d4:0d:1d:5b:e2:43:dc:5f:dd:1e:fc:62:13:32:
ea:9a:5f:30:82:e1:b2:31:71:98:fe:ca:b0:91:9e:18:4f:7f:
3a:4c:c4:04:bd:96:5a:b1:a6:c9:c1:bb:a8:ad:35:b6:90:1d:
80:91:14:56:8a:75:ab:3a:21:ed:75:24:b3:38:96:cc:a5:f3:
85:a3:29:f7:03:5b:15:fc:62:2f:3a:50:81:5e:8e:67:9d:bd:
4f:44:86:7d:77:d9:51:3c:91:52:b0:e3:00:e6:fd:cb:67:3f:
ee:91:71:f5:e4:85:73:0c:70:82:60:f2:2c:b1:b9:3d:f2:5d:
bd:43:07:98:63:96:c4:75:19:82:48:9b:08:ed:88:81:94:2f:
ab:7a:a8:09:b3:27:d0:c8:7a:a5:91:c4:2f:bd:f4:c7:a7:e3:
52:33:48:39
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYVyg1zoCjgU/TYMXs1rHHKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYWE2MGNiMDAyNDMzMmEyZGI2ODk5M2YzMzU3MTU4YWY2
MGM4ZGUwHhcNMjMwMTAyMTI0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDllYTBlNThmMzVkZGQwN2E5NmU5YmQ2NzU5NzU5MDI3MjYzMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5samhZAlQW9XDcHdQtpNrlrBdMA
uQqSQvD4NTrQdn7dzG5GgrXE8p38wyoxdKwqZ4i3cI3l3qz5FIqXGrLW85tJgNvj
h66WfC12tGdkPwuNpIlqLsRqnWzdnm5MF6NZsyvyx62ohGa1fkWGprlXOtjXGVcM
1mta/23OesOkbcVa8CAlxEpIMInhnmiwEQ3QiSC8XgF+vlyWTLvKYYMA3xZ4R4/h
jzwfkNqKoeDPDH7gqHHGNUnullNSE2X9+Gb0WFH/LMS2cpnYP8z8SZpsL3WXaOsj
rSOW7Y4FmjNFYaO4WrhrYYhGHu2E5lDoQbT8iC/ud9Xrn/w8MVWMICPOhwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFN2eoOWPNd3QepbpvWdZdZAnJjNTMB8GA1UdIwQY
MBaAFCCqYMsAJDMqLbaJk/M1cVivYMjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYt
NzNmN2QxMTBiODJhLzEvM1o2ZzVZODEzZEI2bHVtOVoxbDFrQ2NtTTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYtNzNmN2QxMTBiODJh
LzEvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAKgIwQABD
/zANBgkqhkiG9w0BAQsFAAOCAQEACearftbkG01TyfodgZjw+z0M3ffynTDa1gP6
ZfpAPYvpYTCBT3fThRDBWLijm0rZAaYFss8UuHPrVOVSgpkMXbGwyTYI/uvEYrcC
OYU3BWEhYdKwO1r0+bw/Jt8qgNQNHVviQ9xf3R78YhMy6ppfMILhsjFxmP7KsJGe
GE9/OkzEBL2WWrGmycG7qK01tpAdgJEUVop1qzoh7XUksziWzKXzhaMp9wNbFfxi
LzpQgV6OZ529T0SGfXfZUTyRUrDjAOb9y2c/7pFx9eSFcwxwgmDyLLG5PfJdvUMH
mGOWxHUZgkibCO2IgZQvq3qoCbMn0Mh6pZHEL730x6fjUjNIOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:26 2024 by rpki-client on console-ams.rpki-client.org