Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/cRkr7EZLurbP_3f4jOsJ7h0WJMI.roa
File: cRkr7EZLurbP_3f4jOsJ7h0WJMI.roa (raw, json)
Hash identifier: SvAK820nRaNzJaSnnwfRWgSq5dAfWm9Y2siEaMr2+UU=
Subject key identifier: 71:19:2B:EC:46:4B:BA:B6:CF:FF:77:F8:8C:EB:09:EE:1D:16:24:C2
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018C4C8171178C9B59040DA8701F8BED035A
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/cRkr7EZLurbP_3f4jOsJ7h0WJMI.roa
Signing time: Sat 09 Dec 2023 02:56:40 +0000
ROA not before: Sat 09 Dec 2023 02:56:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39335
IP address blocks: 2a0b:6b87::/32 maxlen: 32
2a0b:6b82::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4c:81:71:17:8c:9b:59:04:0d:a8:70:1f:8b:ed:03:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Dec 9 02:56:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71192bec464bbab6cfff77f88ceb09ee1d1624c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:27:ac:dd:fc:54:bd:81:27:6c:cd:d0:b9:
2e:d4:7c:07:f1:97:96:69:ee:ef:a7:04:15:5c:02:
52:5a:59:1c:b5:72:d9:0d:78:cf:90:2a:51:3e:0a:
bf:3d:78:f2:3e:29:c3:8e:a5:9e:43:0e:59:8a:a7:
76:2b:0e:e4:4f:c4:64:84:07:43:eb:0f:4e:64:60:
7d:39:5c:84:8a:ee:bd:c8:1f:c2:d5:d6:84:40:ba:
70:09:44:6e:16:ef:6b:06:53:85:52:7c:15:e4:09:
6d:a4:54:dc:97:c4:8f:c3:59:a6:ba:f6:18:e9:bc:
e2:22:61:da:68:23:18:63:59:d1:50:53:c9:99:bb:
21:cb:61:05:93:18:87:7c:d5:7c:34:66:7f:cf:c3:
9b:11:f9:01:c2:57:a6:f0:75:4f:b6:bf:e0:fe:40:
ae:56:3f:fb:4b:1f:e3:10:f1:97:01:78:64:0a:7a:
de:e5:30:6a:85:8e:36:d5:a2:0d:d8:52:bc:af:73:
ba:bf:64:d7:3e:d0:6e:b0:eb:a1:4f:d5:b9:9f:cd:
d7:cf:53:77:0a:de:5b:d1:0e:09:e9:8f:55:02:5d:
56:e6:a8:ce:24:ab:59:8c:a0:35:a4:2f:d7:fa:0e:
48:7c:e3:50:76:fb:7e:94:67:8f:6a:6a:13:f1:94:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:19:2B:EC:46:4B:BA:B6:CF:FF:77:F8:8C:EB:09:EE:1D:16:24:C2
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/cRkr7EZLurbP_3f4jOsJ7h0WJMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b82::/32
2a0b:6b87::/32
Signature Algorithm: sha256WithRSAEncryption
90:a9:2b:39:36:35:c4:ec:84:5a:3d:74:f2:e6:cd:99:d8:18:
f6:cc:b3:2f:55:6b:ad:55:28:02:0f:28:f5:33:92:c8:e5:70:
de:5b:89:ef:35:02:78:c1:63:00:22:e4:8b:91:bc:08:cd:a5:
f1:1a:c9:66:de:1c:97:41:c9:f7:ac:ec:9a:5d:21:97:db:52:
fb:84:fd:0f:02:4b:e8:87:0f:17:94:b5:bf:f8:89:48:7f:0c:
4b:25:72:d6:f1:d2:47:cc:c3:8b:06:30:08:15:c1:3d:17:2e:
6e:0c:7b:9c:85:f2:24:79:c4:56:d0:0c:54:e3:e6:b0:83:55:
17:50:a5:23:40:b7:9a:86:9a:96:62:79:f3:64:64:2c:b8:b4:
a6:5d:6a:71:1d:94:4d:5f:0a:9a:6b:45:59:d3:83:41:9c:83:
53:8a:61:f7:21:8a:80:66:87:18:dc:83:18:0a:c3:42:d9:59:
90:58:0f:8e:95:a0:1e:8d:b5:92:d7:f7:25:63:fc:2b:59:a5:
02:31:fb:54:60:c1:c7:7b:94:a1:75:50:3c:e6:e4:26:c7:6e:
eb:f9:d5:4e:ce:71:a8:b7:25:5e:8b:7d:92:82:6c:4b:12:8e:
e6:c1:b4:26:f8:11:17:e9:5b:60:65:92:13:7a:9f:7e:da:4d:
ee:c4:40:ee
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYxMgXEXjJtZBA2ocB+L7QNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy
NDQ4MGYwHhcNMjMxMjA5MDI1NjQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTE5MmJlYzQ2NGJiYWI2Y2ZmZjc3Zjg4Y2ViMDllZTFkMTYyNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoMnrN38VL2BJ2zN0Lku1HwH8ZeW
ae7vpwQVXAJSWlkctXLZDXjPkCpRPgq/PXjyPinDjqWeQw5Ziqd2Kw7kT8RkhAdD
6w9OZGB9OVyEiu69yB/C1daEQLpwCURuFu9rBlOFUnwV5AltpFTcl8SPw1mmuvYY
6bziImHaaCMYY1nRUFPJmbshy2EFkxiHfNV8NGZ/z8ObEfkBwlem8HVPtr/g/kCu
Vj/7Sx/jEPGXAXhkCnre5TBqhY421aIN2FK8r3O6v2TXPtBusOuhT9W5n83Xz1N3
Ct5b0Q4J6Y9VAl1W5qjOJKtZjKA1pC/X+g5IfONQdvt+lGePamoT8ZSj1wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHEZK+xGS7q2z/93+IzrCe4dFiTCMB8GA1UdIwQY
MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt
YjM2YTI0ZDM5NDI3LzEvY1JrcjdFWkx1cmJQXzNmNGpPc0o3aDBXSk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3
LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgtrggMF
ACoLa4cwDQYJKoZIhvcNAQELBQADggEBAJCpKzk2NcTshFo9dPLmzZnYGPbMsy9V
a61VKAIPKPUzksjlcN5bie81AnjBYwAi5IuRvAjNpfEayWbeHJdByfes7JpdIZfb
UvuE/Q8CS+iHDxeUtb/4iUh/DEslctbx0kfMw4sGMAgVwT0XLm4Me5yF8iR5xFbQ
DFTj5rCDVRdQpSNAt5qGmpZiefNkZCy4tKZdanEdlE1fCpprRVnTg0Gcg1OKYfch
ioBmhxjcgxgKw0LZWZBYD46VoB6NtZLX9yVj/CtZpQIx+1Rgwcd7lKF1UDzm5CbH
buv51U7Ocai3JV6LfZKCbEsSjubBtCb4ERfpW2BlkhN6n37aTe7EQO4=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:08 2024 by rpki-client on console-fra.rpki-client.org