Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa
File: rRel0c37Q9jJ39qNzCWJcUZY31Y.roa (raw, json)
Hash identifier: GEn9uBE2DvGRjhvXPl8M1LH84FMDdNq08AydkyYUS/E=
Subject key identifier: AD:17:A5:D1:CD:FB:43:D8:C9:DF:DA:8D:CC:25:89:71:46:58:DF:56
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01883443E5B8EA3B9C5655E29F6E95BBA8BB
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa
Signing time: Fri 19 May 2023 13:47:24 +0000
ROA not before: Fri 19 May 2023 13:47:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198527
IP address blocks: 2a0e:aa07:e0e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:43:e5:b8:ea:3b:9c:56:55:e2:9f:6e:95:bb:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: May 19 13:47:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad17a5d1cdfb43d8c9dfda8dcc2589714658df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:ef:1a:3c:fa:eb:80:30:91:50:aa:c4:b3:
be:f8:90:56:33:de:86:75:3b:0e:ef:3d:79:49:0b:
ae:01:26:f9:8a:2b:4e:29:ac:7c:67:b8:ed:65:68:
92:26:12:2b:e2:eb:36:55:0c:cd:52:61:f3:cf:15:
46:a8:fa:90:3b:d6:aa:21:20:c4:e0:3a:b0:1e:80:
d6:a0:61:a8:fd:7d:b2:f1:96:20:20:c2:b2:f5:9c:
35:0f:7b:99:3b:c0:d1:d3:28:0a:b4:34:cc:3d:e3:
c0:a6:f4:35:1b:8b:5e:a3:cc:3c:61:69:27:b9:b8:
38:d1:c4:95:6d:91:f9:b8:63:1c:00:b2:1f:4b:45:
63:0e:b9:17:1e:0f:ab:55:4b:1a:28:b4:a1:c9:ed:
fe:5e:c2:5d:96:fa:dd:71:a6:0e:6c:69:cd:fe:94:
b6:85:00:81:3d:d2:64:74:58:39:ed:1b:d3:8b:51:
38:47:27:a0:18:20:93:f9:82:ee:02:39:73:2b:37:
e6:7e:a4:e5:b8:2c:79:e3:50:ee:55:5e:c7:7e:d1:
56:ad:a4:d3:f0:58:a9:95:40:e4:aa:5d:ee:67:88:
f4:89:ac:c6:b2:a3:0c:3b:47:41:f9:51:51:28:0a:
e8:41:70:d5:66:21:42:16:72:e2:ae:39:e2:6e:9f:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:17:A5:D1:CD:FB:43:D8:C9:DF:DA:8D:CC:25:89:71:46:58:DF:56
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/rRel0c37Q9jJ39qNzCWJcUZY31Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e0e0::/44
Signature Algorithm: sha256WithRSAEncryption
c0:bc:88:a4:59:73:61:d9:1c:d2:0d:54:f5:8e:92:94:bc:ba:
4b:e2:25:e2:78:f8:bc:70:22:d3:52:ab:0b:d2:83:08:14:62:
09:ed:fd:ce:14:46:65:a7:51:19:7c:a9:8d:d4:9d:25:13:b1:
1e:7f:59:80:2d:e2:70:93:3d:c8:46:48:9a:1b:65:cc:3c:9c:
0a:43:c6:a7:bb:98:37:41:a6:53:fd:e3:48:28:7a:98:f7:ed:
dd:c0:ed:16:6a:4b:be:ed:e1:e1:41:6f:d8:c5:45:70:03:b4:
ab:af:72:4b:d7:f6:8a:49:a3:2e:0d:75:dd:37:8d:1d:07:87:
86:bf:36:13:86:b8:16:0b:fd:ee:2a:94:f9:b4:47:12:e7:34:
aa:99:ab:86:4d:5d:1f:35:0c:db:03:c9:f0:f4:f1:0b:75:f3:
53:0c:12:02:60:a3:57:61:84:4f:83:d1:16:1d:28:e0:fd:c4:
80:53:c0:e4:08:da:2b:7e:f9:7e:20:36:8e:3f:fc:2f:dd:44:
d6:75:c8:cc:91:87:dd:47:67:76:35:a2:cc:b4:44:7c:d1:68:
b8:7a:27:bd:19:84:36:09:bc:74:15:c0:f4:ed:e8:5f:4c:97:
cb:86:ca:fd:88:3e:ba:bc:2f:c7:69:07:e4:af:1a:18:0c:41:
c4:66:95:5b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYg0Q+W46jucVlXin26Vu6i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwNTE5MTM0NzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDE3YTVkMWNkZmI0M2Q4YzlkZmRhOGRjYzI1ODk3MTQ2NThkZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngHvGjz664AwkVCqxLO++JBWM96G
dTsO7z15SQuuASb5iitOKax8Z7jtZWiSJhIr4us2VQzNUmHzzxVGqPqQO9aqISDE
4DqwHoDWoGGo/X2y8ZYgIMKy9Zw1D3uZO8DR0ygKtDTMPePApvQ1G4teo8w8YWkn
ubg40cSVbZH5uGMcALIfS0VjDrkXHg+rVUsaKLShye3+XsJdlvrdcaYObGnN/pS2
hQCBPdJkdFg57RvTi1E4RyegGCCT+YLuAjlzKzfmfqTluCx541DuVV7HftFWraTT
8FiplUDkql3uZ4j0iazGsqMMO0dB+VFRKAroQXDVZiFCFnLirjnibp8fbQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK0XpdHN+0PYyd/ajcwliXFGWN9WMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvclJlbDBjMzdROWpKMzlxTnpDV0pjVVpZMzFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Dg
MA0GCSqGSIb3DQEBCwUAA4IBAQDAvIikWXNh2RzSDVT1jpKUvLpL4iXiePi8cCLT
UqsL0oMIFGIJ7f3OFEZlp1EZfKmN1J0lE7Eef1mALeJwkz3IRkiaG2XMPJwKQ8an
u5g3QaZT/eNIKHqY9+3dwO0Waku+7eHhQW/YxUVwA7Srr3JL1/aKSaMuDXXdN40d
B4eGvzYThrgWC/3uKpT5tEcS5zSqmauGTV0fNQzbA8nw9PELdfNTDBICYKNXYYRP
g9EWHSjg/cSAU8DkCNorfvl+IDaOP/wv3UTWdcjMkYfdR2d2NaLMtER80Wi4eie9
GYQ2Cbx0FcD07ehfTJfLhsr9iD66vC/HaQfkrxoYDEHEZpVb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org