Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/azo2pH693_4_9LIUEHidpdBYoWw.roa
File: azo2pH693_4_9LIUEHidpdBYoWw.roa (raw, json)
Hash identifier: Sl/IAFRhInPUqNJGHCv5LniPkyDMPWJ2xavWlmQYMaI=
Subject key identifier: 6B:3A:36:A4:7E:BD:DF:FE:3F:F4:B2:14:10:78:9D:A5:D0:58:A1:6C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F300E4DAD7E63E83200394D9FB64679
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/azo2pH693_4_9LIUEHidpdBYoWw.roa
Signing time: Sun 01 Jan 2023 21:14:58 +0000
ROA not before: Sun 01 Jan 2023 21:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394604
IP address blocks: 2a0e:aa07:f00c::/46 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0e:4d:ad:7e:63:e8:32:00:39:4d:9f:b6:46:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b3a36a47ebddffe3ff4b21410789da5d058a16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:39:89:96:73:f2:34:97:b9:3d:ec:60:05:
90:3a:3b:9c:98:c8:be:b4:30:34:7b:3b:2f:af:64:
80:d4:dc:d7:b7:e8:05:24:59:ba:b8:86:5b:00:24:
df:88:82:b1:4d:ba:05:bb:ae:04:1d:1f:8a:1b:4d:
d8:3c:79:b7:75:e1:b9:5a:83:e0:79:2c:2f:ff:b9:
ae:d7:65:b6:68:3d:8b:a8:32:8a:aa:8d:93:9e:aa:
e8:77:9b:df:38:b7:16:b2:8f:49:fc:8b:05:c6:6f:
0e:34:58:d1:5b:48:c5:5d:d0:e0:38:29:b4:55:f0:
76:fa:82:a1:16:01:e5:83:58:8e:4f:78:a2:41:42:
fd:b3:4a:27:34:2d:e3:31:2a:62:22:51:65:b6:86:
37:5a:35:5c:5d:4e:eb:ce:e8:c1:fe:cc:63:46:7d:
3b:61:9f:bb:42:af:66:d5:ad:34:9e:9a:f8:e9:f4:
24:26:0c:7c:d4:d3:3a:4e:6c:f5:71:e7:db:b5:6a:
63:fe:6d:fc:09:3f:2d:10:e8:12:2a:06:90:03:09:
91:c0:6f:d1:a8:18:c0:2d:de:1c:fc:e5:9b:6b:23:
2b:2b:7f:84:1d:60:ca:69:f2:7b:3c:d0:f7:98:6d:
95:ed:55:b0:cb:22:2c:f4:b9:ba:00:bf:8e:9d:db:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:36:A4:7E:BD:DF:FE:3F:F4:B2:14:10:78:9D:A5:D0:58:A1:6C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/azo2pH693_4_9LIUEHidpdBYoWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f00c::/46
Signature Algorithm: sha256WithRSAEncryption
95:88:6a:35:f5:c5:fb:39:d9:e1:5e:e5:05:95:7c:34:43:c0:
2c:9c:6a:78:91:dd:3e:0a:ab:6f:ce:40:c6:6c:18:a6:c2:6d:
86:14:55:81:58:d4:d0:7e:0e:9f:ed:d0:a9:28:84:8a:90:1e:
9e:59:27:98:52:56:67:6e:12:8d:f6:6f:9d:ac:ae:56:28:93:
82:ea:ac:c5:7e:6c:55:84:b4:53:bc:24:a4:20:f4:f8:99:13:
35:32:3a:33:e3:9c:58:d5:6d:0e:63:f3:7f:28:9b:3b:86:b0:
8e:28:77:85:bd:f8:47:51:21:ea:02:e2:fa:2c:81:21:4c:d3:
a3:2a:37:90:24:7d:f5:8b:58:fc:8e:55:10:7d:a8:5d:c3:08:
d0:25:58:9b:83:bd:d1:f0:55:77:6b:0f:b7:fe:b6:a7:cc:ec:
c8:98:06:ef:f7:80:a6:f5:26:cc:38:ac:bb:e2:c3:a3:80:0d:
66:01:3e:22:80:22:4a:8e:c9:92:ed:9b:f8:81:96:ed:46:45:
2f:a8:6d:61:5e:6f:a8:cb:f9:a8:0d:8c:19:42:c4:2e:18:18:
72:0f:f1:a2:7c:bf:df:47:41:9a:08:ba:db:2b:0a:b7:e0:1c:
f1:e3:eb:51:d0:36:21:52:9d:db:10:7f:1f:a2:fb:9f:92:bb:
f8:0b:90:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvMA5NrX5j6DIAOU2ftkZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjNhMzZhNDdlYmRkZmZlM2ZmNGIyMTQxMDc4OWRhNWQwNThhMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ww5iZZz8jSXuT3sYAWQOjucmMi+
tDA0ezsvr2SA1NzXt+gFJFm6uIZbACTfiIKxTboFu64EHR+KG03YPHm3deG5WoPg
eSwv/7mu12W2aD2LqDKKqo2Tnqrod5vfOLcWso9J/IsFxm8ONFjRW0jFXdDgOCm0
VfB2+oKhFgHlg1iOT3iiQUL9s0onNC3jMSpiIlFltoY3WjVcXU7rzujB/sxjRn07
YZ+7Qq9m1a00npr46fQkJgx81NM6Tmz1cefbtWpj/m38CT8tEOgSKgaQAwmRwG/R
qBjALd4c/OWbayMrK3+EHWDKafJ7PND3mG2V7VWwyyIs9Lm6AL+OnduCEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGs6NqR+vd/+P/SyFBB4naXQWKFsMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvYXpvMnBINjkzXzRfOUxJVUVIaWRwZEJZb1d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKg6qB/AM
MA0GCSqGSIb3DQEBCwUAA4IBAQCViGo19cX7OdnhXuUFlXw0Q8AsnGp4kd0+Cqtv
zkDGbBimwm2GFFWBWNTQfg6f7dCpKISKkB6eWSeYUlZnbhKN9m+drK5WKJOC6qzF
fmxVhLRTvCSkIPT4mRM1Mjoz45xY1W0OY/N/KJs7hrCOKHeFvfhHUSHqAuL6LIEh
TNOjKjeQJH31i1j8jlUQfahdwwjQJVibg73R8FV3aw+3/ranzOzImAbv94Cm9SbM
OKy74sOjgA1mAT4igCJKjsmS7Zv4gZbtRkUvqG1hXm+oy/moDYwZQsQuGBhyD/Gi
fL/fR0GaCLrbKwq34Bzx4+tR0DYhUp3bEH8fovufkrv4C5DY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org