Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/aVcN4f9XxlD_WgSKAZmGYfIXQ_M.roa
File: aVcN4f9XxlD_WgSKAZmGYfIXQ_M.roa (raw, json)
Hash identifier: YRxYvzMcZ8Br9+O2EqwaglCImPDpNA5VAI7NXu3kVNk=
Subject key identifier: 69:57:0D:E1:FF:57:C6:50:FF:5A:04:8A:01:99:86:61:F2:17:43:F3
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 01856F30002D3A366CF8FD3C04DED6BD7EAE
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/aVcN4f9XxlD_WgSKAZmGYfIXQ_M.roa
Signing time: Sun 01 Jan 2023 21:14:54 +0000
ROA not before: Sun 01 Jan 2023 21:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209114
IP address blocks: 2a12:6e40::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Jan 2023 11:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:00:2d:3a:36:6c:f8:fd:3c:04:de:d6:bd:7e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Jan 1 21:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69570de1ff57c650ff5a048a01998661f21743f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:59:77:4e:8d:3b:5a:b8:0c:d0:06:b1:ed:24:
fa:a8:f0:45:14:9b:53:6b:6b:cb:ca:a6:88:9c:da:
b1:95:95:97:ad:a0:a6:e7:ac:4d:3f:9d:cf:d4:54:
6d:61:5c:a9:97:fd:29:c0:79:d9:95:42:7d:7d:1c:
bc:b7:bf:d9:43:ec:d2:86:8e:ac:46:07:41:f0:11:
15:b2:53:1b:29:55:bb:a9:e6:c8:0a:2c:f4:34:d6:
c5:1b:96:54:30:c5:45:9c:b9:02:10:5e:8a:6a:e0:
9b:d9:60:54:2d:d9:ec:55:b3:a8:ee:84:cf:7c:8d:
26:1c:b6:25:fc:ff:f0:df:13:2c:9f:b7:c3:31:8c:
7a:86:29:2f:31:6f:b2:11:13:3c:86:2f:80:99:ac:
eb:e2:ea:84:da:99:86:0e:fd:d2:bd:a3:41:0a:74:
2f:c2:13:32:79:e0:25:00:42:7f:c8:fe:01:e8:24:
7b:25:4f:d0:9e:b2:68:8e:25:33:11:d7:0f:84:b6:
99:38:3c:c2:8b:a2:39:4a:69:15:a9:ff:1b:48:ec:
7b:fc:97:b4:64:90:12:81:23:0e:a0:99:75:7b:f8:
7e:47:65:3b:ed:e6:f8:b4:b4:8a:cf:f8:74:27:4e:
1f:95:7f:97:ed:1d:62:c9:3e:34:5c:29:b6:7a:a5:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:0D:E1:FF:57:C6:50:FF:5A:04:8A:01:99:86:61:F2:17:43:F3
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/aVcN4f9XxlD_WgSKAZmGYfIXQ_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6e40::/29
Signature Algorithm: sha256WithRSAEncryption
ac:ce:59:29:fe:11:cd:51:18:28:27:bb:9d:40:57:b4:0b:1b:
1f:a4:fb:53:c4:ae:0e:07:6b:49:10:4b:39:a1:11:a9:7c:be:
02:5d:60:ae:7c:70:0c:b1:53:ab:56:d8:4b:04:be:f2:81:19:
19:c2:5a:e7:35:ca:e0:b4:3b:29:34:e6:28:fd:e7:42:39:f2:
2b:eb:b4:a6:20:92:89:ce:47:7d:64:78:a4:d9:73:f7:d9:42:
f7:bb:83:ac:1a:d5:d6:7f:c0:86:bd:05:08:bb:b2:02:ff:e1:
7b:e1:6d:1e:54:e6:d0:4f:89:53:68:c1:10:56:13:2e:2a:ee:
c0:77:b6:9f:34:10:5d:c7:f2:91:95:72:35:7b:33:91:40:68:
32:40:c1:ac:18:02:a6:96:83:c9:de:97:f7:3e:7d:b2:d2:21:
b8:1d:a4:c0:8a:be:ac:ad:77:5e:d8:fe:b1:28:06:2e:1a:27:
60:06:df:4f:dd:98:10:ce:4b:8c:f9:f2:34:c9:60:45:2f:5c:
3b:8e:e1:b0:74:9e:4d:68:33:7d:61:94:58:65:a9:84:c0:02:
32:d6:f5:fc:a4:1f:84:f4:d0:c3:50:07:7b:a7:a8:3a:22:08:
bd:c2:58:47:89:e6:cb:87:c6:95:57:bd:d7:5f:93:72:f5:e9:
d8:1b:50:6e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvMAAtOjZs+P08BN7WvX6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Zjk2NzBlZTJhMzBlYWM4YzBhMzlkYzQ3ZmY3YThjZDI0
NzNiMDAwHhcNMjMwMTAxMjExNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTU3MGRlMWZmNTdjNjUwZmY1YTA0OGEwMTk5ODY2MWYyMTc0M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjll3To07WrgM0Aax7ST6qPBFFJtT
a2vLyqaInNqxlZWXraCm56xNP53P1FRtYVypl/0pwHnZlUJ9fRy8t7/ZQ+zSho6s
RgdB8BEVslMbKVW7qebICiz0NNbFG5ZUMMVFnLkCEF6KauCb2WBULdnsVbOo7oTP
fI0mHLYl/P/w3xMsn7fDMYx6hikvMW+yERM8hi+Amazr4uqE2pmGDv3SvaNBCnQv
whMyeeAlAEJ/yP4B6CR7JU/QnrJojiUzEdcPhLaZODzCi6I5SmkVqf8bSOx7/Je0
ZJASgSMOoJl1e/h+R2U77eb4tLSKz/h0J04flX+X7R1iyT40XCm2eqXc5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGlXDeH/V8ZQ/1oEigGZhmHyF0PzMB8GA1UdIwQY
MBaAFCn5Zw7iow6sjAo53Ef/eozSRzsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDct
NmUyOWVmZGZkNGUzLzEvYVZjTjRmOVh4bERfV2dTS0FabUdZZklYUV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yZmY3NmQtZjExNi00NDMwLTg0MDctNmUyOWVmZGZkNGUz
LzEvS2ZsbkR1S2pEcXlNQ2puY1JfOTZqTkpIT3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJuQDAN
BgkqhkiG9w0BAQsFAAOCAQEArM5ZKf4RzVEYKCe7nUBXtAsbH6T7U8SuDgdrSRBL
OaERqXy+Al1grnxwDLFTq1bYSwS+8oEZGcJa5zXK4LQ7KTTmKP3nQjnyK+u0piCS
ic5HfWR4pNlz99lC97uDrBrV1n/Ahr0FCLuyAv/he+FtHlTm0E+JU2jBEFYTLiru
wHe2nzQQXcfykZVyNXszkUBoMkDBrBgCppaDyd6X9z59stIhuB2kwIq+rK13Xtj+
sSgGLhonYAbfT92YEM5LjPnyNMlgRS9cO47hsHSeTWgzfWGUWGWphMACMtb1/KQf
hPTQw1AHe6eoOiIIvcJYR4nmy4fGlVe911+TcvXp2BtQbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:30 2024 by rpki-client on console-ams.rpki-client.org