Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UF7LhE-139iO-dqq2ekZIx8rhoU.roa
File: UF7LhE-139iO-dqq2ekZIx8rhoU.roa (raw, json)
Hash identifier: fu7H48ufhxzVjUyFUItW8YzOXaRjnrN7J0zmFqyZJ5M=
Subject key identifier: 50:5E:CB:84:4F:B5:DF:D8:8E:F9:DA:AA:D9:E9:19:23:1F:2B:86:85
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01856DDD74838020663D9FA4327F0B2EBB01
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UF7LhE-139iO-dqq2ekZIx8rhoU.roa
Signing time: Sun 01 Jan 2023 15:05:07 +0000
ROA not before: Sun 01 Jan 2023 15:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203083
IP address blocks: 2a03:5840:290::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:74:83:80:20:66:3d:9f:a4:32:7f:0b:2e:bb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 15:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=505ecb844fb5dfd88ef9daaad9e919231f2b8685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:39:08:95:40:d3:09:f3:3a:18:31:23:11:
48:5a:ee:80:ca:62:84:aa:dc:68:70:7a:9f:82:16:
e6:ef:ec:df:ea:63:ea:00:8a:1c:1c:7b:1a:e2:04:
ea:1d:bd:c6:0d:7f:62:0c:73:a7:ce:ef:e6:9c:c4:
73:61:07:a7:1c:8d:98:70:4a:4d:61:26:48:d3:fb:
ac:c8:d6:be:b0:6b:f7:45:34:5b:74:80:21:3d:d1:
6b:f3:aa:9b:eb:26:5f:76:e3:b4:29:70:50:6d:2c:
d1:db:b2:3c:b5:a4:f5:98:5f:86:09:13:ee:6e:3b:
42:51:9a:f7:f5:6e:5f:a6:35:8f:7a:44:e3:3e:77:
bd:20:b9:23:a0:16:ae:9b:f0:85:95:ba:81:86:e7:
86:9c:7a:6c:53:46:93:d3:56:1b:f9:77:9f:ad:45:
1a:27:08:c4:d7:9a:a6:8c:f4:12:e0:03:d7:13:20:
d9:88:c5:ac:6c:96:64:fd:58:2e:be:c1:32:bf:f2:
ce:63:23:a4:32:1e:2d:e3:47:bb:7e:01:dd:60:90:
5a:7c:45:99:65:5e:d6:fb:57:16:0a:16:f1:3b:00:
13:0c:cf:3a:d7:79:b9:fe:a8:f8:f5:81:fb:b8:1c:
b6:7f:d4:cd:ff:b4:f6:bf:b1:e6:49:a3:10:dc:61:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:CB:84:4F:B5:DF:D8:8E:F9:DA:AA:D9:E9:19:23:1F:2B:86:85
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/UF7LhE-139iO-dqq2ekZIx8rhoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:290::/44
Signature Algorithm: sha256WithRSAEncryption
2e:d4:cf:6e:d2:e4:81:c3:68:07:84:71:02:95:b9:5f:cf:d5:
7b:c9:fe:49:d2:6d:f1:ab:bf:91:7e:61:7c:76:4a:52:2e:4e:
98:69:54:df:8c:1b:37:b7:ff:c0:f3:7a:cf:eb:70:e5:d1:a9:
34:75:9a:8f:05:f4:54:3a:cc:d2:1c:17:36:37:d9:19:dd:88:
35:3b:f1:db:f8:05:56:5e:43:38:48:f4:15:b6:11:3f:f9:2f:
6f:4b:16:90:b9:6d:d0:f7:b2:a4:8e:42:af:20:32:f7:46:0b:
a1:bf:f0:d5:43:a2:7b:e6:9b:b0:7d:dd:d3:d4:19:b1:c0:d7:
c0:e9:13:bc:7b:f5:f0:ed:8e:c6:d7:d4:7f:d9:e7:d6:b3:78:
f1:cf:ae:63:d3:64:e2:96:79:9e:47:0b:33:da:6a:88:e0:09:
18:59:d8:a6:9f:a3:96:44:d1:6a:e5:b5:2e:ad:e5:17:19:ea:
50:b1:a1:88:79:07:05:cc:32:6c:1f:aa:1d:72:68:70:ed:82:
02:dc:4f:9c:dc:a3:ee:be:f7:66:15:6e:05:ac:37:35:3c:fa:
5f:4a:34:a2:2d:cd:4d:71:72:4d:69:4a:56:6f:d0:d6:e9:3d:
2c:f8:4e:2e:01:4b:cf:b6:a4:bb:df:8d:41:ba:19:74:5d:79:
fc:fb:c7:b2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVt3XSDgCBmPZ+kMn8LLrsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjMwMTAxMTUwNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDVlY2I4NDRmYjVkZmQ4OGVmOWRhYWFkOWU5MTkyMzFmMmI4Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK05CJVA0wnzOhgxIxFIWu6AymKE
qtxocHqfghbm7+zf6mPqAIocHHsa4gTqHb3GDX9iDHOnzu/mnMRzYQenHI2YcEpN
YSZI0/usyNa+sGv3RTRbdIAhPdFr86qb6yZfduO0KXBQbSzR27I8taT1mF+GCRPu
bjtCUZr39W5fpjWPekTjPne9ILkjoBaum/CFlbqBhueGnHpsU0aT01Yb+XefrUUa
JwjE15qmjPQS4APXEyDZiMWsbJZk/VguvsEyv/LOYyOkMh4t40e7fgHdYJBafEWZ
ZV7W+1cWChbxOwATDM8613m5/qj49YH7uBy2f9TN/7T2v7HmSaMQ3GFfFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFBey4RPtd/YjvnaqtnpGSMfK4aFMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvVUY3TGhFLTEzOWlPLWRxcTJla1pJeDhyaG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgNYQAKQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAu1M9u0uSBw2gHhHEClblfz9V7yf5J0m3xq7+R
fmF8dkpSLk6YaVTfjBs3t//A83rP63Dl0ak0dZqPBfRUOszSHBc2N9kZ3Yg1O/Hb
+AVWXkM4SPQVthE/+S9vSxaQuW3Q97KkjkKvIDL3Rguhv/DVQ6J75puwfd3T1Bmx
wNfA6RO8e/Xw7Y7G19R/2efWs3jxz65j02TilnmeRwsz2mqI4AkYWdimn6OWRNFq
5bUureUXGepQsaGIeQcFzDJsH6odcmhw7YIC3E+c3KPuvvdmFW4FrDc1PPpfSjSi
Lc1NcXJNaUpWb9DW6T0s+E4uAUvPtqS7341Buhl0XXn8+8ey
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org