Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/c5sQjJeRTDuFvkg2Sn9ryeJDFNU.roa
File: c5sQjJeRTDuFvkg2Sn9ryeJDFNU.roa (raw, json)
Hash identifier: aa0V1fOSz/h3MLVhMECd+H/1V1boVdkOTteJLaTbKPc=
Subject key identifier: 73:9B:10:8C:97:91:4C:3B:85:BE:48:36:4A:7F:6B:C9:E2:43:14:D5
Certificate issuer: /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial: 01856D78A8C3FB963532AADCA394ABEF6E38
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/c5sQjJeRTDuFvkg2Sn9ryeJDFNU.roa
Signing time: Sun 01 Jan 2023 13:15:02 +0000
ROA not before: Sun 01 Jan 2023 13:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205028
IP address blocks: 2a11:a606::/32 maxlen: 48
2a11:a601::/32 maxlen: 48
2a11:a604::/32 maxlen: 48
2a11:a603::/32 maxlen: 48
2a11:a607::/32 maxlen: 48
2a11:a600::/32 maxlen: 48
2a11:a602::/32 maxlen: 48
2a11:a605::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:a8:c3:fb:96:35:32:aa:dc:a3:94:ab:ef:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
Validity
Not Before: Jan 1 13:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739b108c97914c3b85be48364a7f6bc9e24314d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:08:7c:88:cf:64:3b:24:12:7d:01:30:63:
e9:13:29:e7:58:e9:34:f0:c5:19:6d:9f:da:e3:53:
b0:ee:55:9e:8e:c9:6d:ea:66:6e:b1:fe:48:7d:a2:
38:0a:c4:b9:e5:a6:05:68:6c:ae:69:90:cf:7f:d5:
43:b7:7d:20:13:17:6d:4a:86:9a:87:de:d8:fa:e2:
7b:dd:c7:e3:63:e1:e2:31:8a:02:b6:10:62:a6:e5:
5e:45:f9:2d:59:d1:fe:29:ac:c7:a3:fc:99:98:4f:
b8:ce:23:12:95:be:b6:ea:51:f3:74:25:71:1a:36:
e4:ad:6d:8a:12:6a:92:e7:51:34:32:09:18:05:7f:
b7:0e:86:54:20:0e:76:8d:1d:19:ca:eb:b3:52:b5:
88:5d:6e:19:85:4c:b1:74:77:c2:89:50:a8:75:61:
1b:dc:df:06:83:21:1d:ac:33:38:6a:6d:a3:51:b5:
0a:88:b3:f7:80:8d:78:94:7d:6d:2d:b5:36:26:a4:
db:c7:7d:81:dd:2e:df:d7:4b:b0:dc:89:c4:70:56:
2d:b3:5f:74:80:d9:c9:5b:db:49:46:b1:0a:36:5b:
8f:d2:d8:e6:23:f8:b7:4f:7f:41:07:7c:d4:fd:31:
5a:91:45:99:7f:7a:3c:52:ba:33:d9:0b:c7:8f:01:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:10:8C:97:91:4C:3B:85:BE:48:36:4A:7F:6B:C9:E2:43:14:D5
X509v3 Authority Key Identifier:
keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/c5sQjJeRTDuFvkg2Sn9ryeJDFNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a600::/29
Signature Algorithm: sha256WithRSAEncryption
6a:5d:00:16:b9:b8:89:6e:0a:8b:cc:72:dc:4f:d8:0f:35:51:
d7:5b:ad:cc:da:c4:88:45:1b:22:32:60:68:55:df:7e:35:69:
92:da:22:02:e2:c8:6c:59:79:de:ed:9d:b2:3b:4a:8c:30:f0:
39:d7:ab:c9:7f:e2:9f:44:9b:7c:d7:6c:a8:f1:d8:38:f7:15:
20:74:3e:03:37:e2:0c:8d:bc:91:d6:9d:ba:90:0b:0e:46:2f:
7a:6f:a6:d0:bc:ab:5f:be:1f:38:fd:6c:d2:f2:9a:4f:b8:e3:
3b:a4:95:06:3c:66:08:da:34:1e:33:8b:aa:b0:44:d4:0e:82:
64:75:ca:66:50:99:13:43:05:ca:17:90:5d:66:26:5f:27:b8:
a0:6e:1a:90:25:c7:84:64:39:05:02:0a:60:aa:f7:26:8a:d1:
68:19:83:87:d6:52:19:38:f5:7b:b1:3a:fa:78:cb:14:24:a4:
be:3e:f8:53:c7:1c:47:c5:17:89:80:1e:97:33:ad:67:42:ed:
49:49:33:bc:f4:a9:77:5e:a7:da:cf:34:8b:72:7b:99:35:54:
a3:f2:d1:05:89:94:b6:d5:69:28:ee:0d:22:c0:53:0f:c8:0e:
05:4e:b0:32:94:26:2d:da:e7:01:a2:03:c6:50:51:c0:62:68:
76:5e:01:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVteKjD+5Y1Mqrco5Sr7244MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDQ2YTY4M2FiOTJiNDE4MTk5NzcyNDVjZTc1OWUyNjdh
NTAzNmEwHhcNMjMwMTAxMTMxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzliMTA4Yzk3OTE0YzNiODViZTQ4MzY0YTdmNmJjOWUyNDMxNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMIfIjPZDskEn0BMGPpEynnWOk0
8MUZbZ/a41Ow7lWejslt6mZusf5IfaI4CsS55aYFaGyuaZDPf9VDt30gExdtSoaa
h97Y+uJ73cfjY+HiMYoCthBipuVeRfktWdH+KazHo/yZmE+4ziMSlb626lHzdCVx
GjbkrW2KEmqS51E0MgkYBX+3DoZUIA52jR0ZyuuzUrWIXW4ZhUyxdHfCiVCodWEb
3N8GgyEdrDM4am2jUbUKiLP3gI14lH1tLbU2JqTbx32B3S7f10uw3InEcFYts190
gNnJW9tJRrEKNluP0tjmI/i3T39BB3zU/TFakUWZf3o8Uroz2QvHjwHkfQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHObEIyXkUw7hb5INkp/a8niQxTVMB8GA1UdIwQY
MBaAFEQEamg6uStBgZl3JFznWeJnpQNqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFScWFEcTVLMEdCbVhja1hPZFo0bWVsQTJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80OWRiNmMtN2Q1MS00YTRkLWJjMjkt
ODQxMmJlZjU2ZjIzLzEvYzVzUWpKZVJURHVGdmtnMlNuOXJ5ZUpERk5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80OWRiNmMtN2Q1MS00YTRkLWJjMjktODQxMmJlZjU2ZjIz
LzEvUkFScWFEcTVLMEdCbVhja1hPZFo0bWVsQTJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGmADAN
BgkqhkiG9w0BAQsFAAOCAQEAal0AFrm4iW4Ki8xy3E/YDzVR11utzNrEiEUbIjJg
aFXffjVpktoiAuLIbFl53u2dsjtKjDDwOderyX/in0SbfNdsqPHYOPcVIHQ+Azfi
DI28kdadupALDkYvem+m0LyrX74fOP1s0vKaT7jjO6SVBjxmCNo0HjOLqrBE1A6C
ZHXKZlCZE0MFyheQXWYmXye4oG4akCXHhGQ5BQIKYKr3JorRaBmDh9ZSGTj1e7E6
+njLFCSkvj74U8ccR8UXiYAelzOtZ0LtSUkzvPSpd16n2s80i3J7mTVUo/LRBYmU
ttVpKO4NIsBTD8gOBU6wMpQmLdrnAaIDxlBRwGJodl4B4w==
Generated at Sat Aug 26 12:17:48 2023 by rpki-client on console-fra.rpki-client.org