Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jGQSsnm_qdewCQSI1bT_NofS3To.roa
File: jGQSsnm_qdewCQSI1bT_NofS3To.roa (raw, json)
Hash identifier: 8s4QTxxiIEfVIyxt78d/sNBjhupFWjnpEF31tjz7P9Q=
Subject key identifier: 8C:64:12:B2:79:BF:A9:D7:B0:09:04:88:D5:B4:FF:36:87:D2:DD:3A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F30051C7F6CD9CA9CD200C6D2FB1FBC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jGQSsnm_qdewCQSI1bT_NofS3To.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211162
IP address blocks: 2a0e:aa07:e01f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:05:1c:7f:6c:d9:ca:9c:d2:00:c6:d2:fb:1f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6412b279bfa9d7b0090488d5b4ff3687d2dd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:bf:48:3d:90:cb:17:a5:62:6c:ea:3b:2f:
22:f7:fd:43:65:77:fb:e0:1d:de:b4:4d:fc:15:ce:
e2:d7:f5:9e:f0:40:26:b4:51:7c:35:15:b6:76:59:
e3:c6:0d:b7:1b:9f:c8:75:45:c4:8f:96:62:67:7f:
50:1d:4b:92:74:8f:82:60:11:be:d3:a1:da:cb:af:
5e:c2:f7:75:2d:aa:7a:f5:44:d5:e9:8d:d1:61:d7:
7f:70:a9:b6:20:66:0f:ae:c1:88:4c:92:ec:88:66:
68:22:39:4f:1f:0d:12:69:a0:b5:be:1e:b2:9c:52:
2d:9a:9f:b6:4f:cd:28:5b:f3:84:ef:70:e8:54:8b:
b6:6b:7c:82:3f:8f:4d:16:30:62:dd:b7:b4:9f:e4:
9d:78:62:08:0d:60:c1:54:3d:50:1e:b1:a5:94:e8:
ab:41:36:48:30:0f:bd:fc:cc:fe:15:e9:8f:b7:10:
f7:45:73:0a:c9:e7:0a:93:b9:c4:66:84:45:c3:94:
47:9c:b5:0b:7a:69:21:d0:53:b4:98:d2:ff:c2:a2:
41:74:99:75:9e:98:c2:2e:e9:f4:21:07:c0:98:52:
07:4a:ef:ff:ad:9f:13:0b:29:3b:ca:a6:ef:00:08:
75:23:53:1c:36:29:97:4c:43:94:78:d7:a5:bc:a7:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:12:B2:79:BF:A9:D7:B0:09:04:88:D5:B4:FF:36:87:D2:DD:3A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jGQSsnm_qdewCQSI1bT_NofS3To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01f::/48
Signature Algorithm: sha256WithRSAEncryption
7f:4e:b1:94:56:65:81:37:9f:8e:e5:11:8b:36:c1:74:84:3b:
26:9e:23:19:f2:3e:0a:db:35:d8:8f:42:26:3f:aa:55:c6:d8:
40:aa:70:e5:8d:1d:f0:65:1e:fa:13:d3:99:7c:9e:e8:e1:02:
35:f3:cf:e5:56:88:6d:13:2e:8b:f7:29:56:3c:1a:b8:04:80:
ba:bd:51:b5:a2:bd:b3:fe:f3:56:58:54:55:13:5a:76:57:41:
72:f5:be:b9:f7:55:10:37:c6:37:02:a8:7f:91:c6:58:d4:6f:
64:df:9a:30:f5:9d:d7:b9:33:ce:51:ef:31:69:af:c1:c9:cd:
b0:c0:b6:40:33:b1:a6:93:98:08:bb:d8:e2:ef:3d:93:f6:44:
27:8b:2f:09:5b:5b:47:9a:cb:df:63:ab:7f:17:f2:fa:d4:ec:
14:13:e8:a0:03:58:9b:3a:3d:f0:45:cb:34:a3:a2:43:d6:cf:
e2:f3:ce:96:89:ae:b4:21:35:f6:5e:52:5c:da:80:0f:2c:22:
5c:39:47:25:35:a3:56:5b:5b:40:d1:8d:90:ec:2d:1e:36:b5:
9c:f5:ed:b7:e1:b3:ba:21:ff:62:1b:1e:c8:b8:9f:47:60:99:
bd:51:9d:4a:ac:f7:a8:42:96:de:7a:1f:5e:30:63:5c:5e:1c:
5e:52:62:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvMAUcf2zZypzSAMbS+x+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzY0MTJiMjc5YmZhOWQ3YjAwOTA0ODhkNWI0ZmYzNjg3ZDJkZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4G/SD2QyxelYmzqOy8i9/1DZXf7
4B3etE38Fc7i1/We8EAmtFF8NRW2dlnjxg23G5/IdUXEj5ZiZ39QHUuSdI+CYBG+
06Hay69ewvd1Lap69UTV6Y3RYdd/cKm2IGYPrsGITJLsiGZoIjlPHw0SaaC1vh6y
nFItmp+2T80oW/OE73DoVIu2a3yCP49NFjBi3be0n+SdeGIIDWDBVD1QHrGllOir
QTZIMA+9/Mz+FemPtxD3RXMKyecKk7nEZoRFw5RHnLULemkh0FO0mNL/wqJBdJl1
npjCLun0IQfAmFIHSu//rZ8TCyk7yqbvAAh1I1McNimXTEOUeNelvKf/fwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxkErJ5v6nXsAkEiNW0/zaH0t06MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvakdRU3NubV9xZGV3Q1FTSTFiVF9Ob2ZTM1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Af
MA0GCSqGSIb3DQEBCwUAA4IBAQB/TrGUVmWBN5+O5RGLNsF0hDsmniMZ8j4K2zXY
j0ImP6pVxthAqnDljR3wZR76E9OZfJ7o4QI188/lVohtEy6L9ylWPBq4BIC6vVG1
or2z/vNWWFRVE1p2V0Fy9b6591UQN8Y3Aqh/kcZY1G9k35ow9Z3XuTPOUe8xaa/B
yc2wwLZAM7Gmk5gIu9ji7z2T9kQniy8JW1tHmsvfY6t/F/L61OwUE+igA1ibOj3w
Rcs0o6JD1s/i886Wia60ITX2XlJc2oAPLCJcOUclNaNWW1tA0Y2Q7C0eNrWc9e23
4bO6If9iGx7IuJ9HYJm9UZ1KrPeoQpbeeh9eMGNcXhxeUmJ0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org