Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa
File: Fto9yklnw6a31tvhhDrDv8HXo5s.roa (raw, json)
Hash identifier: +jV7B9Z9ZWHS8BpTIssW5d/T7A4/wUwzWNrFOu5NFjk=
Subject key identifier: 16:DA:3D:CA:49:67:C3:A6:B7:D6:DB:E1:84:3A:C3:BF:C1:D7:A3:9B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE644D5B840AD08B04794F1076E8F
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147028
IP address blocks: 2a0e:aa07:e500::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Sep 2023 05:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e6:44:d5:b8:40:ad:08:b0:47:94:f1:07:6e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16da3dca4967c3a6b7d6dbe1843ac3bfc1d7a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:5b:f2:4c:fa:6a:d9:d5:5a:3e:1a:d1:f2:
9f:d8:95:e1:2d:2a:2f:55:c1:67:23:ea:3d:70:40:
63:b6:f7:c5:4e:d5:b0:7c:f4:81:36:2c:52:2b:c5:
7a:99:18:b5:a1:0e:d8:21:d5:74:d6:63:87:bd:10:
e1:5e:6e:c2:5a:f3:89:14:4b:cf:37:17:4c:c8:45:
20:f7:6a:b7:e9:e6:69:a8:cb:64:01:69:3a:34:cb:
ef:8a:74:09:8b:65:80:d2:c3:61:47:57:c8:6f:a9:
93:22:70:71:dd:6f:6a:79:18:31:3a:08:b9:50:2e:
69:84:25:0c:84:ae:48:76:52:36:24:db:dd:d9:8f:
65:42:91:cd:73:90:a4:ce:83:88:9c:5d:50:d2:3f:
2c:2f:d8:cc:0c:1e:25:e0:e3:fa:62:5c:e5:25:e3:
d0:23:ea:f5:dc:20:ab:72:fc:80:64:af:29:f6:ee:
51:58:86:59:99:73:c7:0d:28:6e:2c:34:60:4a:e6:
44:f5:32:14:3c:34:5a:a7:59:2a:51:64:0b:06:27:
27:14:88:89:68:3a:af:6b:cf:6b:4d:da:86:6c:7c:
d3:5e:ea:5b:bb:9a:7a:8c:49:db:b7:9e:7f:54:5d:
ac:dc:b7:d3:7a:3a:be:9e:96:63:b5:77:e6:fe:b2:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:3D:CA:49:67:C3:A6:B7:D6:DB:E1:84:3A:C3:BF:C1:D7:A3:9B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Fto9yklnw6a31tvhhDrDv8HXo5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e500::/48
Signature Algorithm: sha256WithRSAEncryption
14:d7:a8:57:2f:f3:9f:ca:60:5f:c2:83:32:dc:1a:9d:7d:51:
2d:e4:4a:77:f4:f5:43:17:d1:62:f7:ba:dc:2c:c9:8d:69:ac:
0d:fb:6a:94:f0:ed:22:b6:76:5f:38:68:67:5e:df:68:fe:b6:
6c:1d:d0:70:4f:2b:cb:6a:5f:b0:2b:87:b7:09:89:b7:65:a0:
43:c9:61:52:e0:39:88:b8:c9:3e:b5:b3:2a:39:08:f9:8e:a3:
88:44:5b:46:a2:de:0c:c0:f8:68:16:63:bf:16:01:94:78:aa:
0a:d3:a7:c0:b1:b2:0e:dd:b5:2c:1d:e0:6f:34:06:a2:f4:17:
f2:c9:7d:e8:83:00:58:c1:3f:76:1a:4e:a5:ea:4e:32:c5:99:
f3:e3:92:97:5d:b8:21:80:54:e7:00:db:2d:4b:35:69:0f:75:
dd:d0:04:19:d4:ab:c7:95:aa:1e:93:73:b1:1d:60:78:04:e2:
a8:60:83:7e:f8:c2:07:34:3e:ae:d7:07:43:69:8f:a5:fb:f4:
c4:de:e5:29:0f:b2:34:04:5e:ce:05:1d:16:2c:ae:fe:3f:c1:
19:80:b0:d2:66:a6:86:f2:39:a7:97:1b:b9:9b:c3:8e:39:c4:
c1:0c:e4:14:31:88:aa:2c:54:a4:fe:a5:f9:f6:c2:a0:37:83:
b5:f5:a2:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL+ZE1bhArQiwR5TxB26PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmRhM2RjYTQ5NjdjM2E2YjdkNmRiZTE4NDNhYzNiZmMxZDdhMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycpb8kz6atnVWj4a0fKf2JXhLSov
VcFnI+o9cEBjtvfFTtWwfPSBNixSK8V6mRi1oQ7YIdV01mOHvRDhXm7CWvOJFEvP
NxdMyEUg92q36eZpqMtkAWk6NMvvinQJi2WA0sNhR1fIb6mTInBx3W9qeRgxOgi5
UC5phCUMhK5IdlI2JNvd2Y9lQpHNc5CkzoOInF1Q0j8sL9jMDB4l4OP6YlzlJePQ
I+r13CCrcvyAZK8p9u5RWIZZmXPHDShuLDRgSuZE9TIUPDRap1kqUWQLBicnFIiJ
aDqva89rTdqGbHzTXupbu5p6jEnbt55/VF2s3LfTejq+npZjtXfm/rJNTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBbaPcpJZ8Omt9bb4YQ6w7/B16ObMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvRnRvOXlrbG53NmEzMXR2aGhEckR2OEhYbzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+UA
MA0GCSqGSIb3DQEBCwUAA4IBAQAU16hXL/OfymBfwoMy3BqdfVEt5Ep39PVDF9Fi
97rcLMmNaawN+2qU8O0itnZfOGhnXt9o/rZsHdBwTyvLal+wK4e3CYm3ZaBDyWFS
4DmIuMk+tbMqOQj5jqOIRFtGot4MwPhoFmO/FgGUeKoK06fAsbIO3bUsHeBvNAai
9BfyyX3ogwBYwT92Gk6l6k4yxZnz45KXXbghgFTnANstSzVpD3Xd0AQZ1KvHlaoe
k3OxHWB4BOKoYIN++MIHND6u1wdDaY+l+/TE3uUpD7I0BF7OBR0WLK7+P8EZgLDS
ZqaG8jmnlxu5m8OOOcTBDOQUMYiqLFSk/qX59sKgN4O19aLx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org