Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa
File: W6S3Fru4QC6GhIRqNIq4gSSY08E.roa (raw, json)
Hash identifier: mIGjqO3li+l+U0g152zP2hmAMhs5KDWkV9GM+p+MIkk=
Subject key identifier: 5B:A4:B7:16:BB:B8:40:2E:86:84:84:6A:34:8A:B8:81:24:98:D3:C1
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018971EDA409CF2E61BF83EDE6CB965825B2
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa
Signing time: Thu 20 Jul 2023 06:12:26 +0000
ROA not before: Thu 20 Jul 2023 06:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 14:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:ed:a4:09:cf:2e:61:bf:83:ed:e6:cb:96:58:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jul 20 06:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ba4b716bbb8402e8684846a348ab8812498d3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:c1:a4:8e:af:6b:69:01:0f:0c:02:be:60:
97:2d:80:1c:59:62:bb:08:1e:b6:b7:01:ae:bc:ff:
dd:56:c3:87:96:c2:04:d8:8e:8f:e1:0e:58:c5:0a:
2a:48:f6:01:69:73:07:59:2f:00:dc:30:7b:cb:aa:
5b:1b:43:95:40:ee:86:12:4a:a2:36:0e:95:85:52:
16:35:6d:0e:cb:5a:a8:1d:d5:ee:3b:b2:78:e1:bf:
d8:2f:ff:3a:cc:03:f2:0c:d2:81:4c:6d:e1:0c:23:
b9:0a:7f:bd:75:75:9b:95:0d:7d:2c:44:c3:da:de:
e9:70:c8:42:9b:cc:5d:81:2d:fa:19:5d:d5:99:7d:
21:17:4b:d4:e0:54:32:db:97:c9:d6:ce:95:bb:86:
73:b9:29:94:e3:5f:f6:70:1a:71:f8:7f:0a:a1:fa:
d5:83:a5:61:eb:2b:e2:76:c5:25:8d:ae:d9:b2:87:
e4:3e:98:da:ca:ed:e2:0b:60:e3:a9:88:48:fb:58:
93:70:90:6c:5a:8a:15:63:84:92:0b:2b:d0:49:a6:
ca:4c:fc:5c:e6:9e:1a:a5:61:40:32:21:71:5f:ab:
1f:46:d3:04:5a:59:9d:5b:72:ed:8a:f8:ac:74:68:
7f:9e:b3:37:ec:43:8c:2f:f8:f0:13:84:19:dc:52:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:B7:16:BB:B8:40:2E:86:84:84:6A:34:8A:B8:81:24:98:D3:C1
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/W6S3Fru4QC6GhIRqNIq4gSSY08E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:14:c2:48:43:44:24:b5:12:a6:de:1f:87:44:c4:00:9c:e7:
3f:d1:9b:ca:57:bc:ee:9a:a8:c8:10:bd:10:30:7f:f2:fa:e4:
2e:a8:33:50:1b:e8:54:f1:07:7b:94:95:63:73:7d:21:6d:06:
ae:b0:df:78:c4:13:08:28:3f:ce:c3:a5:8d:f8:a8:c0:3e:72:
eb:c2:76:11:ec:15:78:2b:c2:3b:b8:6e:71:69:49:af:ef:40:
0e:f6:a6:56:7f:5b:79:36:e1:70:4b:32:43:25:cd:68:b9:f7:
d5:b4:05:3d:07:85:07:da:72:f9:a8:73:ed:89:53:ef:68:7f:
3f:0a:06:1a:0b:f5:f5:b8:66:eb:c4:c3:68:fb:4d:ce:d2:67:
49:5d:51:e7:9d:e1:84:e3:91:3e:3d:86:db:7a:0e:19:5e:4e:
37:1a:27:50:13:90:79:e0:bc:05:c9:b1:5b:72:61:34:c3:87:
54:2c:e5:60:21:84:ba:6d:5c:26:73:f0:74:19:1a:ab:09:fb:
13:13:15:0b:cf:c6:f2:2e:aa:9b:09:5c:08:bd:d3:86:ed:90:
3b:6e:fc:49:e8:fe:2c:77:8e:8d:ea:98:13:88:6e:84:0e:ab:
55:cf:10:cd:75:0e:ba:97:ee:b8:e3:5b:68:3f:f5:e6:a8:1b:
79:7b:36:28
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlx7aQJzy5hv4Pt5suWWCWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkYzc2ZWI2ZjgxNGVkNjAxNTY4ZmRkMmM4MTEwZWRl
ZjhjMTcwHhcNMjMwNzIwMDYxMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmE0YjcxNmJiYjg0MDJlODY4NDg0NmEzNDhhYjg4MTI0OThkM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaHBpI6va2kBDwwCvmCXLYAcWWK7
CB62twGuvP/dVsOHlsIE2I6P4Q5YxQoqSPYBaXMHWS8A3DB7y6pbG0OVQO6GEkqi
Ng6VhVIWNW0Oy1qoHdXuO7J44b/YL/86zAPyDNKBTG3hDCO5Cn+9dXWblQ19LETD
2t7pcMhCm8xdgS36GV3VmX0hF0vU4FQy25fJ1s6Vu4ZzuSmU41/2cBpx+H8KofrV
g6Vh6yvidsUlja7ZsofkPpjayu3iC2DjqYhI+1iTcJBsWooVY4SSCyvQSabKTPxc
5p4apWFAMiFxX6sfRtMEWlmdW3LtivisdGh/nrM37EOML/jwE4QZ3FItUQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFuktxa7uEAuhoSEajSKuIEkmNPBMB8GA1UdIwQY
MBaAFM/13Hbrb4FO1gFWj90sgRDt74wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjct
MDFkOWU5ZDMxOTQzLzEvVzZTM0ZydTRRQzZHaElScU5JcTRnU1NZMDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjctMDFkOWU5ZDMxOTQz
LzEvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOCwDAN
BgkqhkiG9w0BAQsFAAOCAQEAShTCSENEJLUSpt4fh0TEAJznP9Gbyle87pqoyBC9
EDB/8vrkLqgzUBvoVPEHe5SVY3N9IW0GrrDfeMQTCCg/zsOljfiowD5y68J2EewV
eCvCO7hucWlJr+9ADvamVn9beTbhcEsyQyXNaLn31bQFPQeFB9py+ahz7YlT72h/
PwoGGgv19bhm68TDaPtNztJnSV1R553hhOORPj2G23oOGV5ONxonUBOQeeC8Bcmx
W3JhNMOHVCzlYCGEum1cJnPwdBkaqwn7ExMVC8/G8i6qmwlcCL3Thu2QO278Sej+
LHeOjeqYE4huhA6rVc8QzXUOupfuuONbaD/15qgbeXs2KA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org