Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa
File: Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa (raw, json)
Hash identifier: 8MheRB0jEkHeEJgsfNhWTOuT/UHpk86BQkbwKDJ+WAc=
Subject key identifier: 2E:AE:49:7C:E9:D3:37:0B:4B:9B:E5:21:55:44:04:32:B0:CA:A4:3F
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018CC26D01F4D1D152DC232C3691634C3846
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212144
IP address blocks: 2a12:7700::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 27 May 2024 05:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:01:f4:d1:d1:52:dc:23:2c:36:91:63:4c:38:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2eae497ce9d3370b4b9be52155440432b0caa43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:4e:2f:62:fb:1e:d2:f4:ef:83:dd:14:36:
32:73:39:78:5f:95:ef:10:d8:58:f4:c4:e1:d2:4d:
87:17:91:43:98:52:cb:b1:fc:23:aa:fa:9f:20:8b:
96:56:6b:b8:a1:76:be:29:26:eb:a0:8f:58:ca:da:
a9:07:9b:41:57:b0:85:88:fc:ed:4e:95:bb:8f:05:
5a:e1:5e:21:9a:17:f8:93:d4:ac:5f:c5:69:55:81:
66:fa:57:16:e9:a2:d2:17:f4:fe:9c:8b:7c:6c:6e:
ec:70:89:fe:fa:f6:9b:ee:65:91:f1:22:04:a7:be:
ad:a3:cb:5c:f8:85:5f:b4:29:e8:fe:e1:7a:b5:3a:
c5:f5:ae:e8:9e:d0:9a:b3:45:83:3d:9c:db:12:78:
f3:db:e3:d8:b1:f9:db:25:a0:ca:98:a4:ff:61:c5:
d7:66:39:55:ed:ec:26:6d:d3:8c:d2:6e:3d:b5:07:
41:88:36:64:39:f0:e8:ee:7d:cd:1e:87:f0:75:7d:
c8:a6:5b:be:b9:24:d7:06:59:da:1a:62:20:e9:9c:
7a:e0:d1:5b:df:94:a2:9f:29:1e:cc:d6:90:21:e8:
4e:54:cc:a6:e1:58:ab:da:91:b1:90:7d:18:67:68:
9b:d0:d5:85:24:e8:09:6a:0e:5f:41:80:90:55:96:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:49:7C:E9:D3:37:0B:4B:9B:E5:21:55:44:04:32:B0:CA:A4:3F
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
e5:7f:67:89:ea:43:e8:0c:20:33:e2:13:6c:ed:01:a6:d4:48:
4a:42:74:09:b4:83:4c:27:e2:cd:3c:e9:a1:cc:f6:20:d6:ef:
4d:43:67:9c:cc:66:68:47:e2:88:a5:c2:cb:54:52:ab:0a:ec:
66:34:fb:9b:b1:44:4b:17:9a:92:d1:38:fe:98:a6:c9:08:e7:
e1:5e:df:4b:70:7e:4d:56:61:f3:eb:92:e4:16:4a:ac:78:8c:
2f:d8:2b:16:8a:ea:46:a6:58:9f:9d:45:16:3e:0c:83:2b:90:
ca:65:8b:85:e7:4a:31:e5:74:c7:22:90:64:22:32:1d:64:06:
e1:eb:a2:7c:08:08:2a:9f:f3:6a:34:23:4d:aa:9e:aa:06:d5:
e7:8f:78:81:2d:b1:72:e1:05:54:af:83:54:2c:6b:56:23:30:
b6:92:74:f0:5d:06:2a:67:eb:30:f8:21:a7:2f:33:52:84:54:
7e:88:be:cd:7f:36:3f:55:b2:f9:01:23:6b:48:81:04:f9:ed:
37:85:34:17:61:4b:3b:0e:fa:05:75:2c:2c:99:d8:33:bb:0c:
6d:4c:87:17:7d:bc:55:57:c0:b0:f0:39:f0:c9:db:4c:9e:cf:
a9:f2:66:b9:5b:50:d9:80:d4:60:21:b6:e1:f5:c5:7e:d6:70:
3b:b2:a2:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzCbQH00dFS3CMsNpFjTDhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5
MTk3ZjIwHhcNMjQwMTAxMDAyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWFlNDk3Y2U5ZDMzNzBiNGI5YmU1MjE1NTQ0MDQzMmIwY2FhNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptdOL2L7HtL074PdFDYyczl4X5Xv
ENhY9MTh0k2HF5FDmFLLsfwjqvqfIIuWVmu4oXa+KSbroI9YytqpB5tBV7CFiPzt
TpW7jwVa4V4hmhf4k9SsX8VpVYFm+lcW6aLSF/T+nIt8bG7scIn++vab7mWR8SIE
p76to8tc+IVftCno/uF6tTrF9a7ontCas0WDPZzbEnjz2+PYsfnbJaDKmKT/YcXX
ZjlV7ewmbdOM0m49tQdBiDZkOfDo7n3NHofwdX3Iplu+uSTXBlnaGmIg6Zx64NFb
35SinykezNaQIehOVMym4Vir2pGxkH0YZ2ib0NWFJOgJag5fQYCQVZbmUwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC6uSXzp0zcLS5vlIVVEBDKwyqQ/MB8GA1UdIwQY
MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt
MmQxNDNkN2I4NTNjLzEvTHE1SmZPblROd3RMbS1VaFZVUUVNckRLcEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj
LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJ3ADAN
BgkqhkiG9w0BAQsFAAOCAQEA5X9niepD6AwgM+ITbO0BptRISkJ0CbSDTCfizTzp
ocz2INbvTUNnnMxmaEfiiKXCy1RSqwrsZjT7m7FESxeaktE4/pimyQjn4V7fS3B+
TVZh8+uS5BZKrHiML9grForqRqZYn51FFj4MgyuQymWLhedKMeV0xyKQZCIyHWQG
4euifAgIKp/zajQjTaqeqgbV5494gS2xcuEFVK+DVCxrViMwtpJ08F0GKmfrMPgh
py8zUoRUfoi+zX82P1Wy+QEja0iBBPntN4U0F2FLOw76BXUsLJnYM7sMbUyHF328
VVfAsPA58MnbTJ7PqfJmuVtQ2YDUYCG24fXFftZwO7KiZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org