Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2-a0d1GowHKCToRdgPC253k4nSw.roa
File: 2-a0d1GowHKCToRdgPC253k4nSw.roa (raw, json)
Hash identifier: BffDPdAY+rjd2/UYACEInyPvbZlhS90wv+cHi7Qockc=
Subject key identifier: DB:E6:B4:77:51:A8:C0:72:82:4E:84:5D:80:F0:B6:E7:79:38:9D:2C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B626128C509CAA9C79A7D4FCB879F9723
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2-a0d1GowHKCToRdgPC253k4nSw.roa
Signing time: Tue 24 Oct 2023 15:50:16 +0000
ROA not before: Tue 24 Oct 2023 15:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216102
IP address blocks: 2a12:bec0:560::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:61:28:c5:09:ca:a9:c7:9a:7d:4f:cb:87:9f:97:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 24 15:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe6b47751a8c072824e845d80f0b6e779389d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:df:9d:b4:bc:85:7b:50:69:08:52:23:e9:
d6:7b:83:97:e8:f8:5b:49:a5:a6:c7:a2:4a:91:f2:
0a:a9:d6:1c:20:88:30:37:82:88:e0:93:b0:4e:7d:
49:72:5c:26:88:65:59:87:17:8e:8e:45:61:f7:c3:
54:d2:46:65:dc:35:c5:b5:e9:cf:03:bc:63:c9:49:
37:54:05:52:13:97:6c:de:76:99:45:14:35:51:44:
85:67:ae:4c:23:6b:a9:4f:8e:c7:a9:97:a9:ae:97:
05:dd:1a:c5:8f:1c:1b:c4:74:f5:27:02:3e:39:47:
bc:0d:1d:e9:45:6d:83:a1:c8:e6:a6:b0:ad:09:58:
d3:e4:ba:bb:6a:52:2e:35:01:a1:c4:dc:4a:a1:f0:
58:7d:78:3d:cd:45:22:21:35:59:90:35:b7:dd:4d:
f4:8b:ce:6e:6b:17:8c:26:83:6f:ce:af:de:3a:f9:
06:ec:93:2e:03:aa:45:df:a4:61:ac:4e:07:7b:c0:
b8:74:87:bd:e2:77:6a:e6:19:33:d3:e9:18:98:4e:
9c:78:c7:35:68:64:bd:99:81:4c:f6:0f:90:a8:4a:
3b:51:d0:e7:55:55:06:ba:06:b3:4c:aa:f5:11:f5:
37:ec:31:5a:d5:8b:54:66:c0:40:29:20:e2:87:74:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:B4:77:51:A8:C0:72:82:4E:84:5D:80:F0:B6:E7:79:38:9D:2C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2-a0d1GowHKCToRdgPC253k4nSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:560::/44
Signature Algorithm: sha256WithRSAEncryption
90:57:f5:09:6f:9a:24:7c:fa:bd:af:21:6b:50:0f:e5:9e:a0:
71:a7:2c:13:ae:78:4f:58:1a:85:d0:24:06:52:d7:8c:3f:a5:
dc:76:9b:42:30:c9:a4:70:35:de:a3:32:c1:e4:fa:b1:48:53:
c7:60:f4:07:75:d3:ac:5b:2e:32:da:2f:80:24:c5:aa:86:1e:
7b:4d:1c:ba:55:1e:44:8c:6d:07:61:74:ac:9f:fd:81:6c:95:
d6:7e:e2:b4:7a:24:92:dd:77:65:49:c4:15:49:1d:a2:2f:80:
79:33:02:36:6f:5c:12:49:2b:39:06:31:b1:14:e6:7b:0b:b1:
e0:05:8a:fb:41:78:7c:6f:4b:a5:c1:bd:7b:cd:97:3f:df:48:
99:af:b4:6c:22:8d:88:5a:00:49:ac:1b:3b:3d:e1:81:05:a0:
58:21:ad:40:7b:41:e7:fa:76:af:44:69:09:da:7e:63:8d:ee:
69:fa:20:39:e1:00:c8:0d:d3:c4:6f:94:16:f9:58:fa:dd:e1:
38:12:81:31:fc:9a:88:78:40:53:45:b1:eb:c8:a4:dd:df:c0:
25:f7:5b:e8:8f:a3:c4:a4:5c:12:ea:17:fb:97:89:c9:af:f1:
d4:52:a9:fd:08:00:d4:ac:72:fe:6b:93:0d:d6:26:7e:cd:6e:
ef:0a:a5:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYtiYSjFCcqpx5p9T8uHn5cjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMxMDI0MTU1MDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU2YjQ3NzUxYThjMDcyODI0ZTg0NWQ4MGYwYjZlNzc5Mzg5ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAnfnbS8hXtQaQhSI+nWe4OX6Phb
SaWmx6JKkfIKqdYcIIgwN4KI4JOwTn1JclwmiGVZhxeOjkVh98NU0kZl3DXFtenP
A7xjyUk3VAVSE5ds3naZRRQ1UUSFZ65MI2upT47HqZeprpcF3RrFjxwbxHT1JwI+
OUe8DR3pRW2DocjmprCtCVjT5Lq7alIuNQGhxNxKofBYfXg9zUUiITVZkDW33U30
i85uaxeMJoNvzq/eOvkG7JMuA6pF36RhrE4He8C4dIe94ndq5hkz0+kYmE6ceMc1
aGS9mYFM9g+QqEo7UdDnVVUGugazTKr1EfU37DFa1YtUZsBAKSDih3QQRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNvmtHdRqMBygk6EXYDwtud5OJ0sMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvMi1hMGQxR293SEtDVG9SZGdQQzI1M2s0blN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAVg
MA0GCSqGSIb3DQEBCwUAA4IBAQCQV/UJb5okfPq9ryFrUA/lnqBxpywTrnhPWBqF
0CQGUteMP6XcdptCMMmkcDXeozLB5PqxSFPHYPQHddOsWy4y2i+AJMWqhh57TRy6
VR5EjG0HYXSsn/2BbJXWfuK0eiSS3XdlScQVSR2iL4B5MwI2b1wSSSs5BjGxFOZ7
C7HgBYr7QXh8b0ulwb17zZc/30iZr7RsIo2IWgBJrBs7PeGBBaBYIa1Ae0Hn+nav
RGkJ2n5jje5p+iA54QDIDdPEb5QW+Vj63eE4EoEx/JqIeEBTRbHryKTd38Al91vo
j6PEpFwS6hf7l4nJr/HUUqn9CADUrHL+a5MN1iZ+zW7vCqUU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org