Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u35vviJLnzmytmGd3-_Bav4otgQ.roa
File: u35vviJLnzmytmGd3-_Bav4otgQ.roa (raw, json)
Hash identifier: Abft2HJXQA8KwiklOnwKWXJ9lG02GHTLKJj/yXwIiAQ=
Subject key identifier: BB:7E:6F:BE:22:4B:9F:39:B2:B6:61:9D:DF:EF:C1:6A:FE:28:B6:04
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0188D897256814F5365B5A2DB74211BD5DB6
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u35vviJLnzmytmGd3-_Bav4otgQ.roa
Signing time: Tue 20 Jun 2023 11:36:04 +0000
ROA not before: Tue 20 Jun 2023 11:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198064
IP address blocks: 2a03:5840:f9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:97:25:68:14:f5:36:5b:5a:2d:b7:42:11:bd:5d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jun 20 11:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb7e6fbe224b9f39b2b6619ddfefc16afe28b604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:75:92:ca:de:2a:3e:b9:78:2e:1e:a0:3f:57:
ec:7e:88:bc:7b:f2:f5:8d:e6:9e:f2:a9:f1:75:2d:
fb:fa:e8:46:94:e4:89:13:0f:70:c1:7f:69:55:93:
e9:e3:0d:2f:da:5f:77:ad:ad:df:01:9e:89:b2:6f:
9f:94:aa:8b:f3:e6:c2:9e:8a:6a:e8:4e:73:62:ab:
eb:58:90:45:26:da:5d:27:ce:90:20:6a:d5:e3:a8:
86:b5:ba:34:14:0e:01:f1:3e:ad:33:97:ee:f8:4f:
d7:e7:1b:f5:19:2d:2f:0d:af:d1:43:56:33:3d:8b:
24:8a:a8:9d:ad:c4:a7:f6:57:b9:3e:fd:80:8e:4e:
97:81:9a:c9:b9:12:86:d4:97:fb:88:71:6c:3c:3b:
6b:93:10:6f:f5:32:ba:59:f2:f7:06:f3:0f:4e:15:
27:2c:c6:e7:a5:82:b8:44:34:87:57:12:1e:d6:dc:
39:fe:c9:b0:e2:cf:3c:20:5c:06:2b:e7:da:b9:5e:
2f:10:07:ac:bd:ba:5f:ae:17:8c:7e:96:93:47:0e:
73:ce:60:1c:cb:5a:18:a4:33:01:0d:72:ca:c9:c7:
91:6f:6a:ac:1d:f0:1b:ce:4e:51:2b:f7:dc:a2:0d:
cf:71:7b:12:3f:56:c9:0b:c1:de:5d:41:62:82:32:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7E:6F:BE:22:4B:9F:39:B2:B6:61:9D:DF:EF:C1:6A:FE:28:B6:04
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u35vviJLnzmytmGd3-_Bav4otgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f9::/48
Signature Algorithm: sha256WithRSAEncryption
1c:81:33:96:ab:d3:6b:f6:e6:53:cd:91:00:90:c1:1a:a2:4b:
95:cc:e4:92:ae:de:e3:e0:f1:15:ca:dc:78:a1:c8:1f:ae:6e:
a2:ec:cf:77:ca:41:9b:fa:1c:78:02:7b:79:04:f9:26:fe:65:
2b:73:a3:83:71:05:a5:63:07:3b:2a:2d:25:5b:50:85:7a:21:
fe:32:e0:07:23:1a:9f:53:89:4d:55:12:ca:86:29:91:4b:fe:
9b:7a:b5:d3:6a:f7:ef:e7:f8:b2:a3:0d:18:7c:79:8e:69:6a:
e1:7e:ca:74:f4:90:06:79:08:55:e3:13:d6:5d:57:6e:8d:14:
50:2a:3e:0b:8f:71:ed:d1:f1:80:36:b5:c1:6d:01:e7:e9:db:
a0:1a:34:fc:76:93:b3:7d:bb:cf:f7:57:a4:37:ec:69:6d:20:
e3:75:90:5a:d1:17:8c:ed:1a:73:9e:13:e3:f2:bd:40:10:79:
b3:ee:96:b0:4f:8a:75:a6:13:a0:e5:7a:9a:13:86:be:95:24:
03:b2:f7:8d:35:97:a4:13:ee:66:85:4d:3e:de:e4:c4:03:d0:
9d:29:e4:5f:5a:b4:04:bf:55:cd:d8:4b:97:c1:14:36:c9:29:
57:da:af:ac:51:f0:3f:59:0b:11:e4:29:d1:9f:a0:76:2f:4b:
79:ce:36:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYjYlyVoFPU2W1ott0IRvV22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjMwNjIwMTEzNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjdlNmZiZTIyNGI5ZjM5YjJiNjYxOWRkZmVmYzE2YWZlMjhiNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXWSyt4qPrl4Lh6gP1fsfoi8e/L1
jeae8qnxdS37+uhGlOSJEw9wwX9pVZPp4w0v2l93ra3fAZ6Jsm+flKqL8+bCnopq
6E5zYqvrWJBFJtpdJ86QIGrV46iGtbo0FA4B8T6tM5fu+E/X5xv1GS0vDa/RQ1Yz
PYskiqidrcSn9le5Pv2Ajk6XgZrJuRKG1Jf7iHFsPDtrkxBv9TK6WfL3BvMPThUn
LMbnpYK4RDSHVxIe1tw5/smw4s88IFwGK+fauV4vEAesvbpfrheMfpaTRw5zzmAc
y1oYpDMBDXLKyceRb2qsHfAbzk5RK/fcog3PcXsSP1bJC8HeXUFigjL4cwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLt+b74iS585srZhnd/vwWr+KLYEMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvdTM1dnZpSkxuem15dG1HZDMtX0JhdjRvdGdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAD5
MA0GCSqGSIb3DQEBCwUAA4IBAQAcgTOWq9Nr9uZTzZEAkMEaokuVzOSSrt7j4PEV
ytx4ocgfrm6i7M93ykGb+hx4Ant5BPkm/mUrc6ODcQWlYwc7Ki0lW1CFeiH+MuAH
IxqfU4lNVRLKhimRS/6berXTavfv5/iyow0YfHmOaWrhfsp09JAGeQhV4xPWXVdu
jRRQKj4Lj3Ht0fGANrXBbQHn6dugGjT8dpOzfbvP91ekN+xpbSDjdZBa0ReM7Rpz
nhPj8r1AEHmz7pawT4p1phOg5XqaE4a+lSQDsveNNZekE+5mhU0+3uTEA9CdKeRf
WrQEv1XN2EuXwRQ2ySlX2q+sUfA/WQsR5CnRn6B2L0t5zjZh
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org