Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W7QRFNQX7DuCdOO62vICwypUMYE.roa
File: W7QRFNQX7DuCdOO62vICwypUMYE.roa (raw, json)
Hash identifier: B5E7NnTvcJPXgI+wmzaIqlt1OReMMOZsycjna9nrl4M=
Subject key identifier: 5B:B4:11:14:D4:17:EC:3B:82:74:E3:BA:DA:F2:02:C3:2A:54:31:81
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FFBFE3E6540068EBA7B7A703E8008
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W7QRFNQX7DuCdOO62vICwypUMYE.roa
Signing time: Sun 01 Jan 2023 21:14:53 +0000
ROA not before: Sun 01 Jan 2023 21:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209837
IP address blocks: 2a0e:aa07:e03e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:fb:fe:3e:65:40:06:8e:ba:7b:7a:70:3e:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bb41114d417ec3b8274e3badaf202c32a543181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:ff:24:b1:9b:12:eb:d3:bc:d9:03:66:12:
ca:42:7f:a4:f7:8c:6f:dc:6d:6a:89:88:a3:6a:cf:
8c:3c:e1:19:f0:dc:70:83:4d:da:9b:62:44:3a:c6:
17:87:bf:29:62:e1:68:83:4e:24:e4:b7:36:fa:3f:
43:a5:4e:a9:7a:2f:44:54:5f:5f:96:29:35:30:d2:
af:f7:cb:3c:15:34:d2:8f:48:d2:20:27:66:3e:f9:
7b:0a:fb:53:af:ec:f4:fc:67:12:78:a7:3d:45:81:
38:b8:2e:1d:41:28:d9:5d:6f:fc:76:43:4d:89:32:
eb:b0:13:7d:ef:0a:d3:78:e8:f1:8d:3a:3d:e6:25:
ad:2a:30:3e:91:19:9d:24:cd:e4:f2:58:b8:7b:0d:
cc:e9:6a:62:fd:46:53:da:a9:d4:39:eb:ad:6e:41:
92:20:d6:9e:da:7e:a7:de:40:f3:82:99:0a:fe:8d:
d5:55:19:be:73:38:bb:24:ab:0f:74:d8:5d:a4:20:
cf:1b:6e:c8:0e:99:d8:d1:10:fe:c8:5d:ac:b7:5d:
1e:40:8e:4d:4e:7a:9a:2b:c1:f5:30:d2:71:77:e2:
e6:e0:50:05:5d:0f:8b:2c:59:bd:eb:05:e3:1a:14:
b4:6f:d4:43:b6:b1:da:e3:9f:26:71:c6:04:54:28:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:11:14:D4:17:EC:3B:82:74:E3:BA:DA:F2:02:C3:2A:54:31:81
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W7QRFNQX7DuCdOO62vICwypUMYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e03e::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ed:66:48:44:81:cb:c5:42:ac:43:1b:c1:ce:1c:60:64:c1:
72:21:e1:e9:88:76:91:ae:d3:92:c2:78:01:7f:e9:94:a4:98:
67:51:ab:41:9f:cf:81:1b:9c:60:4e:0b:79:69:26:f4:ad:14:
17:41:55:58:68:dd:82:85:89:53:7e:f2:d5:02:24:4b:7a:ed:
31:d5:56:ee:7b:9b:c3:de:d4:1a:91:15:ee:01:d8:a1:89:ae:
3d:59:08:bf:b7:09:87:4f:56:21:f6:f7:bf:f5:26:1e:79:db:
d3:a0:a8:7f:17:d6:28:1d:c9:ea:de:22:60:ca:0c:1a:9a:77:
9a:ca:bd:25:0b:5d:36:a2:bf:b1:ff:0b:df:86:a6:9d:b4:22:
be:23:d9:9c:29:c9:34:7e:72:bd:b1:68:ff:9a:5c:ec:7d:5c:
95:4f:24:50:2b:a6:06:2b:ad:22:cf:85:30:0a:9c:0a:10:e4:
ab:71:43:65:a2:64:47:b2:dc:b6:32:4e:be:3d:62:70:c5:c5:
2a:89:82:b5:a2:83:ad:02:f4:ec:e9:f6:62:07:17:11:1a:0f:
38:58:22:f0:b1:72:e8:1c:21:b2:5e:8b:bb:51:27:1f:8e:60:
9e:45:be:c7:c9:32:ff:b2:a1:ef:6a:d3:f9:a6:01:3b:60:16:
1c:8b:90:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL/v+PmVABo66e3pwPoAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmI0MTExNGQ0MTdlYzNiODI3NGUzYmFkYWYyMDJjMzJhNTQzMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiH/JLGbEuvTvNkDZhLKQn+k94xv
3G1qiYijas+MPOEZ8Nxwg03am2JEOsYXh78pYuFog04k5Lc2+j9DpU6pei9EVF9f
lik1MNKv98s8FTTSj0jSICdmPvl7CvtTr+z0/GcSeKc9RYE4uC4dQSjZXW/8dkNN
iTLrsBN97wrTeOjxjTo95iWtKjA+kRmdJM3k8li4ew3M6Wpi/UZT2qnUOeutbkGS
INae2n6n3kDzgpkK/o3VVRm+czi7JKsPdNhdpCDPG27IDpnY0RD+yF2st10eQI5N
TnqaK8H1MNJxd+Lm4FAFXQ+LLFm96wXjGhS0b9RDtrHa458mccYEVCjyowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFu0ERTUF+w7gnTjutryAsMqVDGBMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvVzdRUkZOUVg3RHVDZE9PNjJ2SUN3eXBVTVlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+A+
MA0GCSqGSIb3DQEBCwUAA4IBAQA67WZIRIHLxUKsQxvBzhxgZMFyIeHpiHaRrtOS
wngBf+mUpJhnUatBn8+BG5xgTgt5aSb0rRQXQVVYaN2ChYlTfvLVAiRLeu0x1Vbu
e5vD3tQakRXuAdihia49WQi/twmHT1Yh9ve/9SYeedvToKh/F9YoHcnq3iJgygwa
mneayr0lC102or+x/wvfhqadtCK+I9mcKck0fnK9sWj/mlzsfVyVTyRQK6YGK60i
z4UwCpwKEOSrcUNlomRHsty2Mk6+PWJwxcUqiYK1ooOtAvTs6fZiBxcRGg84WCLw
sXLoHCGyXou7UScfjmCeRb7HyTL/sqHvatP5pgE7YBYci5DQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org