Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jl_jB3VqC0eF04v2nxWG99Ma4Qk.roa
File: jl_jB3VqC0eF04v2nxWG99Ma4Qk.roa (raw, json)
Hash identifier: 8uyGQqVit6Me8aGA/gd3fwbp7p80Q17MCr6OLea1rf4=
Subject key identifier: 8E:5F:E3:07:75:6A:0B:47:85:D3:8B:F6:9F:15:86:F7:D3:1A:E1:09
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE6D238F97208F2290AD770097311
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jl_jB3VqC0eF04v2nxWG99Ma4Qk.roa
Signing time: Sun 01 Jan 2023 21:14:48 +0000
ROA not before: Sun 01 Jan 2023 21:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149007
IP address blocks: 2a0e:aa07:e300::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e6:d2:38:f9:72:08:f2:29:0a:d7:70:09:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5fe307756a0b4785d38bf69f1586f7d31ae109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:cc:ad:90:14:24:fa:79:35:39:cc:f6:1d:
86:6e:24:47:4c:17:5c:cc:0c:05:dc:ba:22:bf:18:
f8:36:eb:3b:4f:3b:5d:62:7a:92:66:26:e1:33:29:
2c:b2:51:ae:cc:95:50:ef:c2:d5:1a:47:fc:ee:31:
82:88:31:83:6a:27:42:3f:ff:08:b2:e0:e5:a4:40:
cf:f4:d9:95:8c:5a:af:1e:8f:d1:f4:3a:41:14:f8:
0d:1e:e9:30:d7:3d:ff:e6:dc:3a:a0:f6:b9:61:93:
a5:65:9f:51:9f:e0:7e:0d:9c:7e:53:73:dd:6c:f5:
26:ba:1b:e0:cb:1d:2d:b8:96:63:84:d9:25:5b:b9:
39:eb:07:bf:b9:81:07:2f:95:77:96:23:fe:d0:56:
8c:4d:5a:53:98:d2:eb:1a:88:77:f4:93:58:8a:49:
07:22:4e:0e:2c:2f:93:88:ca:88:84:76:e0:67:8d:
39:1d:e6:ad:8c:c6:68:28:66:80:6f:2c:b7:e9:6f:
db:2f:54:c3:0b:e9:f7:e8:e7:0a:3a:9a:c9:64:9f:
d4:45:1d:fa:48:d6:c7:f0:70:f7:79:92:64:cf:7d:
83:4e:25:65:14:d0:89:c4:df:ff:28:e9:0b:81:cf:
c8:f4:82:ee:b6:ea:c4:f9:89:e0:53:1a:31:40:d4:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:E3:07:75:6A:0B:47:85:D3:8B:F6:9F:15:86:F7:D3:1A:E1:09
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/jl_jB3VqC0eF04v2nxWG99Ma4Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e300::/48
Signature Algorithm: sha256WithRSAEncryption
1d:29:f5:28:aa:b8:10:9a:86:ff:26:68:78:23:be:29:36:9c:
cf:c4:d6:be:3a:7c:12:23:d6:bf:22:2c:53:8b:7b:49:7e:8e:
e9:8b:29:43:12:0a:1c:41:87:44:04:af:59:39:91:64:0f:d8:
81:b8:6b:b5:11:e1:c8:94:f4:40:67:b1:c7:e7:42:09:48:e1:
82:79:d6:d4:64:d6:9a:8d:82:54:8b:cd:e9:4c:25:a9:84:05:
c6:20:3c:a6:55:ce:1e:50:1f:03:e4:8b:f8:b4:2e:0f:5f:94:
5e:1e:a5:4a:b9:94:9b:e7:2a:24:cf:0e:77:39:fa:5c:c2:bf:
7d:01:03:6e:99:95:56:37:31:0c:f8:89:04:02:3c:17:47:f4:
5c:00:ba:a5:66:38:bd:0c:c7:53:b3:14:79:95:3d:82:80:4e:
f0:96:50:37:3e:88:fa:2c:dd:35:4d:0b:9b:8b:3d:72:e8:e1:
18:c6:42:4d:90:c2:14:56:05:1e:2d:66:4e:b5:db:8c:91:dc:
77:83:50:09:b0:de:e0:f8:20:92:92:77:8d:ab:cd:c9:14:76:
ce:ea:a4:de:b8:94:b6:4b:2b:c4:39:bf:a8:ff:92:dc:ff:b0:
92:7c:71:fb:25:2a:f4:aa:82:95:dd:ec:b4:7f:56:8e:d7:8d:
9c:92:58:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL+bSOPlyCPIpCtdwCXMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTVmZTMwNzc1NmEwYjQ3ODVkMzhiZjY5ZjE1ODZmN2QzMWFlMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvHMrZAUJPp5NTnM9h2GbiRHTBdc
zAwF3Loivxj4Nus7TztdYnqSZibhMyksslGuzJVQ78LVGkf87jGCiDGDaidCP/8I
suDlpEDP9NmVjFqvHo/R9DpBFPgNHukw1z3/5tw6oPa5YZOlZZ9Rn+B+DZx+U3Pd
bPUmuhvgyx0tuJZjhNklW7k56we/uYEHL5V3liP+0FaMTVpTmNLrGoh39JNYikkH
Ik4OLC+TiMqIhHbgZ405HeatjMZoKGaAbyy36W/bL1TDC+n36OcKOprJZJ/URR36
SNbH8HD3eZJkz32DTiVlFNCJxN//KOkLgc/I9ILuturE+YngUxoxQNRguQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI5f4wd1agtHhdOL9p8VhvfTGuEJMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvamxfakIzVnFDMGVGMDR2Mm54V0c5OU1hNFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+MA
MA0GCSqGSIb3DQEBCwUAA4IBAQAdKfUoqrgQmob/Jmh4I74pNpzPxNa+OnwSI9a/
IixTi3tJfo7piylDEgocQYdEBK9ZOZFkD9iBuGu1EeHIlPRAZ7HH50IJSOGCedbU
ZNaajYJUi83pTCWphAXGIDymVc4eUB8D5Iv4tC4PX5ReHqVKuZSb5yokzw53Ofpc
wr99AQNumZVWNzEM+IkEAjwXR/RcALqlZji9DMdTsxR5lT2CgE7wllA3Poj6LN01
TQubiz1y6OEYxkJNkMIUVgUeLWZOtduMkdx3g1AJsN7g+CCSkneNq83JFHbO6qTe
uJS2SyvEOb+o/5Lc/7CSfHH7JSr0qoKV3ey0f1aO142cklgX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org