Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jFIbbw1rcIX8NkyShKBwEWelu_8.roa
File: jFIbbw1rcIX8NkyShKBwEWelu_8.roa (raw, json)
Hash identifier: Zs/d7lTmd1DuXWnNeBwjuVU+dvoeOnWbVXxyaAjbDas=
Subject key identifier: 8C:52:1B:6F:0D:6B:70:85:FC:36:4C:92:84:A0:70:11:67:A5:BB:FF
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FF25CBCA6A68E345A25BAB0F46FDD
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jFIbbw1rcIX8NkyShKBwEWelu_8.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208498
IP address blocks: 2a0e:aa01:ab10::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f2:5c:bc:a6:a6:8e:34:5a:25:ba:b0:f4:6f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c521b6f0d6b7085fc364c9284a0701167a5bbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:53:20:21:0b:73:23:ed:92:ac:14:ea:17:
d8:ee:27:f0:fd:26:37:09:13:a2:28:cd:1c:8c:e7:
37:03:ea:71:c7:69:d7:93:79:9d:6f:f5:3b:ae:37:
a5:7c:e4:a4:d7:8b:15:04:36:a4:36:7a:dd:ec:fb:
aa:f8:6d:47:8a:49:34:5e:f8:88:20:5c:24:af:5d:
69:bb:ec:03:cb:ad:9e:1c:47:8d:05:e0:75:1e:33:
98:70:28:1a:9d:a1:e9:ae:9f:5d:fc:09:c6:c7:c5:
ea:e2:32:e5:fa:64:7e:2f:a6:51:2d:94:89:a8:a5:
34:fc:fa:dc:8b:3d:80:44:34:5c:4d:b9:60:53:51:
a5:d5:d3:99:3a:3a:ac:33:3e:80:45:61:6a:2d:cf:
c3:67:d8:43:3f:24:08:14:d2:98:2b:71:65:5d:30:
2a:77:e8:06:01:08:58:00:f7:75:7a:d9:38:7c:11:
a9:9d:fe:4a:dd:ad:51:5f:18:f9:f4:10:41:56:e8:
78:73:c7:2c:d4:5e:0d:75:91:72:90:fd:c2:74:9f:
d7:a9:aa:f4:6b:f2:f3:04:8f:95:c4:78:04:79:c4:
4b:9a:c5:98:1b:ee:50:9d:71:88:36:50:65:eb:50:
90:e7:3a:c3:43:73:51:db:3d:42:63:a6:ea:07:00:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:1B:6F:0D:6B:70:85:FC:36:4C:92:84:A0:70:11:67:A5:BB:FF
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jFIbbw1rcIX8NkyShKBwEWelu_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa01:ab10::/44
Signature Algorithm: sha256WithRSAEncryption
b2:26:56:31:58:58:7e:b1:a7:b0:69:da:a8:6a:d0:c8:da:03:
c7:47:58:18:e2:32:25:8f:ed:21:2a:1f:0f:41:28:8b:52:5e:
38:cf:88:85:ed:9b:d7:d6:bf:81:d6:ab:18:17:9d:52:f8:e7:
df:95:e8:23:30:40:4a:1d:3d:f3:cc:66:c1:91:da:d6:a2:f4:
cc:89:81:a2:e1:5e:8d:1a:e6:a7:99:30:a8:5b:96:cb:ef:45:
21:f4:15:c4:19:94:1b:74:89:0a:bb:92:54:74:2c:b7:3b:70:
5a:b8:9a:c7:a8:00:52:45:16:88:76:95:44:9a:2c:e4:ba:07:
df:2b:92:0c:0b:7f:ce:84:3a:6c:4f:73:64:47:b1:24:1e:ea:
40:25:c7:38:57:62:3d:7b:f6:87:92:39:5c:48:7b:31:16:77:
3a:5a:1f:09:3a:ce:6e:f5:80:64:dc:55:ce:ea:17:6b:59:6d:
71:1e:00:5f:93:9f:26:43:cf:e9:04:61:76:33:46:45:a0:dd:
9d:44:76:a2:48:27:02:d0:3b:ad:37:68:17:88:52:d4:07:10:
f6:79:04:1b:9a:b5:1e:2c:11:b1:69:5e:f8:9c:bb:86:c8:e0:
22:57:2c:f1:84:7f:18:2d:bb:93:73:06:dc:98:12:7c:ad:d7:
4f:05:35:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL/JcvKamjjRaJbqw9G/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzUyMWI2ZjBkNmI3MDg1ZmMzNjRjOTI4NGEwNzAxMTY3YTViYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY5TICELcyPtkqwU6hfY7ifw/SY3
CROiKM0cjOc3A+pxx2nXk3mdb/U7rjelfOSk14sVBDakNnrd7Puq+G1Hikk0XviI
IFwkr11pu+wDy62eHEeNBeB1HjOYcCganaHprp9d/AnGx8Xq4jLl+mR+L6ZRLZSJ
qKU0/Prciz2ARDRcTblgU1Gl1dOZOjqsMz6ARWFqLc/DZ9hDPyQIFNKYK3FlXTAq
d+gGAQhYAPd1etk4fBGpnf5K3a1RXxj59BBBVuh4c8cs1F4NdZFykP3CdJ/Xqar0
a/LzBI+VxHgEecRLmsWYG+5QnXGINlBl61CQ5zrDQ3NR2z1CY6bqBwBhOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxSG28Na3CF/DZMkoSgcBFnpbv/MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvakZJYmJ3MXJjSVg4Tmt5U2hLQndFV2VsdV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qAasQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCyJlYxWFh+saewadqoatDI2gPHR1gY4jIlj+0h
Kh8PQSiLUl44z4iF7ZvX1r+B1qsYF51S+OfflegjMEBKHT3zzGbBkdrWovTMiYGi
4V6NGuanmTCoW5bL70Uh9BXEGZQbdIkKu5JUdCy3O3BauJrHqABSRRaIdpVEmizk
ugffK5IMC3/OhDpsT3NkR7EkHupAJcc4V2I9e/aHkjlcSHsxFnc6Wh8JOs5u9YBk
3FXO6hdrWW1xHgBfk58mQ8/pBGF2M0ZFoN2dRHaiSCcC0DutN2gXiFLUBxD2eQQb
mrUeLBGxaV74nLuGyOAiVyzxhH8YLbuTcwbcmBJ8rddPBTUb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org