Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/bDydcmPJsZBEAzmXgyGOq_V3K4U.roa
File: bDydcmPJsZBEAzmXgyGOq_V3K4U.roa (raw, json)
Hash identifier: m/bcwYim83GpRW2TGFEf5J5vL1dEeznXt9T6A1Eejso=
Subject key identifier: 6C:3C:9D:72:63:C9:B1:90:44:03:39:97:83:21:8E:AB:F5:77:2B:85
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018CC56EE0C0EB531BB1AA9FD19BAF6FB088
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/bDydcmPJsZBEAzmXgyGOq_V3K4U.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 605040
IP address blocks: 2a13:82c5:1f00::/40 maxlen: 40
2a13:82c5:1800::/40 maxlen: 40
2a13:82c5:1b00::/40 maxlen: 40
2a13:82c5:1900::/40 maxlen: 40
2a13:82c5:1600::/40 maxlen: 40
2a13:82c5:1700::/40 maxlen: 40
2a13:82c5:1a00::/40 maxlen: 40
2a13:82c5:1300::/40 maxlen: 40
2a13:82c5:1c00::/40 maxlen: 40
2a13:82c5:1d00::/40 maxlen: 40
2a13:82c5:1200::/40 maxlen: 40
2a13:82c5:1500::/40 maxlen: 40
2a13:82c5:1400::/40 maxlen: 40
2a13:82c5:1100::/40 maxlen: 40
2a13:82c5:1e00::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 04 Jan 2024 08:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e0:c0:eb:53:1b:b1:aa:9f:d1:9b:af:6f:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c3c9d7263c9b1904403399783218eabf5772b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:48:b6:7f:25:6a:34:31:59:c3:ec:ba:9f:
63:d2:80:45:37:3b:3f:26:9a:21:2c:03:02:52:b5:
d6:4b:7f:a7:57:20:53:b0:14:5a:3e:e1:59:d7:58:
b2:ba:b3:01:6b:d7:c1:84:e0:45:13:f2:ac:8c:33:
d5:8b:94:6f:98:8c:93:a6:0b:af:a6:41:25:28:87:
3a:5e:aa:aa:7e:ae:74:f2:0e:01:a2:78:bf:29:94:
32:75:0d:63:1f:c5:cb:f1:a7:e0:2f:e0:22:b9:ba:
4b:c4:fb:39:d6:18:18:ab:84:07:8d:b3:e0:a8:7d:
87:5b:58:a7:6d:ef:50:4f:05:fb:ec:19:09:0e:21:
6f:4a:48:73:c7:d9:03:e8:4e:e2:de:04:ef:ff:5e:
64:63:f0:a1:4e:92:c7:fa:b2:f7:71:b3:85:f6:d0:
89:76:89:88:a2:0f:e1:5b:27:01:be:74:c4:9c:e4:
9e:01:20:f1:77:0d:e3:9d:2b:7e:6d:36:9e:83:78:
cd:70:08:f6:12:cd:a3:46:ba:19:90:95:e4:7f:ed:
82:4b:bb:c8:04:df:48:d1:20:6a:15:5d:3d:d9:ad:
23:80:ab:40:49:95:93:e3:c0:07:a0:e8:50:b6:4b:
50:ef:09:22:e3:96:32:39:13:5d:c0:02:2b:e8:cb:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:9D:72:63:C9:B1:90:44:03:39:97:83:21:8E:AB:F5:77:2B:85
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/bDydcmPJsZBEAzmXgyGOq_V3K4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c5:1100::-2a13:82c5:1fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:81:96:0e:88:e9:d0:58:bd:ab:8b:71:c6:83:73:15:17:80:
65:d4:e7:e9:64:c2:4b:4b:b9:b8:c2:c1:d9:eb:55:cc:d4:72:
53:0f:a8:89:85:31:88:ae:fb:70:53:94:dc:24:3a:80:2d:5a:
8f:01:f9:2a:9d:98:dd:1f:6b:3c:aa:32:46:fd:85:b1:05:4e:
00:d2:5c:8a:8f:5c:c1:4a:2f:f5:4d:3d:4c:03:f1:72:cf:97:
db:e7:26:4a:05:22:08:d8:4b:8b:1c:34:86:2d:04:d0:aa:2c:
86:e3:b7:85:3c:3b:2f:f0:43:47:61:60:06:7f:dd:6a:6b:71:
32:8a:a6:17:9e:14:f8:b5:69:18:65:ee:8f:53:43:93:77:4e:
b8:6c:84:18:17:c8:91:a8:4d:ee:50:ad:75:b5:e3:d2:98:8d:
78:08:37:4c:84:54:ec:19:e3:b2:46:8e:e6:52:d3:6f:df:c6:
87:1a:bd:76:3b:79:0d:a7:18:4e:33:73:cc:0c:ff:fd:dd:23:
02:8d:8b:9d:e4:60:28:39:1c:6a:ac:91:ab:4f:0b:d7:e4:3e:
2d:15:79:e0:91:c0:d8:12:4f:f7:63:7e:f2:f8:86:2d:2f:40:
a3:71:7f:ff:2e:39:d1:bf:9c:3a:2b:78:0e:7f:e4:de:3d:2f:
26:ca:73:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbuDA61Mbsaqf0Zuvb7CIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkYzc2ZWI2ZjgxNGVkNjAxNTY4ZmRkMmM4MTEwZWRl
ZjhjMTcwHhcNMjQwMTAxMTQzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzNjOWQ3MjYzYzliMTkwNDQwMzM5OTc4MzIxOGVhYmY1NzcyYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHZItn8lajQxWcPsup9j0oBFNzs/
JpohLAMCUrXWS3+nVyBTsBRaPuFZ11iyurMBa9fBhOBFE/KsjDPVi5RvmIyTpguv
pkElKIc6Xqqqfq508g4Boni/KZQydQ1jH8XL8afgL+AiubpLxPs51hgYq4QHjbPg
qH2HW1inbe9QTwX77BkJDiFvSkhzx9kD6E7i3gTv/15kY/ChTpLH+rL3cbOF9tCJ
domIog/hWycBvnTEnOSeASDxdw3jnSt+bTaeg3jNcAj2Es2jRroZkJXkf+2CS7vI
BN9I0SBqFV092a0jgKtASZWT48AHoOhQtktQ7wki45YyORNdwAIr6Mv5HwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGw8nXJjybGQRAM5l4Mhjqv1dyuFMB8GA1UdIwQY
MBaAFM/13Hbrb4FO1gFWj90sgRDt74wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjct
MDFkOWU5ZDMxOTQzLzEvYkR5ZGNtUEpzWkJFQXptWGd5R09xX1YzSzRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjctMDFkOWU5ZDMxOTQz
LzEvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAqE4LF
EQMGBSoTgsUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcgZYOiOnQWL2ri3HGg3MVF4Bl
1OfpZMJLS7m4wsHZ61XM1HJTD6iJhTGIrvtwU5TcJDqALVqPAfkqnZjdH2s8qjJG
/YWxBU4A0lyKj1zBSi/1TT1MA/Fyz5fb5yZKBSII2EuLHDSGLQTQqiyG47eFPDsv
8ENHYWAGf91qa3EyiqYXnhT4tWkYZe6PU0OTd064bIQYF8iRqE3uUK11tePSmI14
CDdMhFTsGeOyRo7mUtNv38aHGr12O3kNpxhOM3PMDP/93SMCjYud5GAoORxqrJGr
TwvX5D4tFXngkcDYEk/3Y37y+IYtL0CjcX//LjnRv5w6K3gOf+TePS8mynNN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org