Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Cpw1kT1kxOGy52nfA7-h-dnURVY.roa
File: Cpw1kT1kxOGy52nfA7-h-dnURVY.roa (raw, json)
Hash identifier: h/rL9A81872wBxrKqxlV3Rqy6BpmoXRHu7RSlYhRI0A=
Subject key identifier: 0A:9C:35:91:3D:64:C4:E1:B2:E7:69:DF:03:BF:A1:F9:D9:D4:45:56
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E4D8A7CCF63052F2B94FFDA8D72695D99
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Cpw1kT1kxOGy52nfA7-h-dnURVY.roa
Signing time: Sun 17 Mar 2024 17:51:45 +0000
ROA not before: Sun 17 Mar 2024 17:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 2a12:bec4:10b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 05 Apr 2024 14:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:8a:7c:cf:63:05:2f:2b:94:ff:da:8d:72:69:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 17 17:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a9c35913d64c4e1b2e769df03bfa1f9d9d44556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:f7:55:43:24:49:76:e9:8f:34:65:25:d4:
1a:17:2d:03:a9:78:bd:49:52:63:db:e9:d1:80:45:
82:e2:01:3c:1e:ab:fd:1a:d1:ec:3b:9a:3d:e2:c8:
7c:50:e8:bd:6d:fd:3a:07:50:cc:7d:31:c8:5d:39:
1b:de:40:9f:e3:b0:8f:d8:6a:ef:6c:af:07:9e:dc:
2d:95:60:ce:04:96:65:40:68:1d:9a:48:95:6d:d8:
28:9d:51:e6:09:ca:1a:25:14:54:b4:b0:a0:51:39:
ba:c0:ad:58:e9:79:42:78:2a:47:14:d1:1c:cc:03:
4c:df:31:fc:7d:0e:93:c4:0f:3b:6f:02:45:14:59:
f9:a9:ca:ea:c5:11:a0:e5:86:00:a1:04:de:c5:fe:
31:75:ec:5a:b0:9d:48:c9:3d:ac:58:84:af:23:5c:
50:16:b7:3c:e8:34:e5:a2:31:69:82:24:2e:64:62:
20:d8:b0:c0:11:4d:a3:77:18:e1:b2:66:31:c3:84:
d9:ff:2b:7d:93:d1:84:fb:87:98:4d:5b:37:24:43:
7c:ef:35:03:80:c9:25:36:54:7a:fb:54:19:c6:02:
b8:4f:0b:0f:7a:3e:d4:a8:ab:6f:fc:48:ce:75:cd:
ae:d4:15:78:69:ef:55:4b:96:af:22:7f:60:48:d9:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:35:91:3D:64:C4:E1:B2:E7:69:DF:03:BF:A1:F9:D9:D4:45:56
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Cpw1kT1kxOGy52nfA7-h-dnURVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10b0::/44
Signature Algorithm: sha256WithRSAEncryption
53:fe:64:c9:cf:07:14:7f:7e:00:4a:e4:6f:f0:80:30:a0:5d:
a7:c2:59:2d:2d:6f:b3:b1:8a:b1:8e:4a:f9:5d:9c:e5:65:02:
37:af:97:41:a6:96:c2:02:67:84:e3:e1:d9:19:83:7f:cf:cd:
b0:83:84:71:a9:0d:73:55:22:b8:c4:74:14:a5:53:5a:b2:1f:
dc:2b:bd:b3:71:dd:6b:1f:49:30:d1:b5:c2:75:d8:54:0a:36:
cb:1f:03:98:fc:9d:ae:00:8b:a7:5e:b8:78:67:1b:f1:34:0e:
29:6a:2b:28:f6:6a:2a:d8:de:09:c4:46:5f:09:65:75:3e:f4:
53:f2:7d:71:fc:bb:5a:64:e1:f7:af:10:c6:07:69:d0:fd:bc:
2b:67:7d:f0:55:f4:3b:17:90:d0:67:c1:e2:6d:81:6d:29:43:
45:2b:a3:86:01:de:8f:dc:e7:22:0a:41:8e:41:55:ce:c8:dc:
bf:27:f6:5f:22:46:45:95:a4:45:49:cf:31:0c:b4:07:ac:ef:
c4:df:a4:15:d6:88:80:3f:3c:6a:eb:40:05:e9:95:80:5f:f9:
84:11:c2:d8:3f:d4:2e:3a:d5:39:03:2c:4e:ff:b4:5c:f7:fa:
b4:6c:da:ec:b5:4b:c6:0f:1f:dd:05:92:62:58:8f:ba:63:56:
75:36:55:51
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY5NinzPYwUvK5T/2o1yaV2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMzE3MTc1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTljMzU5MTNkNjRjNGUxYjJlNzY5ZGYwM2JmYTFmOWQ5ZDQ0NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm73VUMkSXbpjzRlJdQaFy0DqXi9
SVJj2+nRgEWC4gE8Hqv9GtHsO5o94sh8UOi9bf06B1DMfTHIXTkb3kCf47CP2Grv
bK8HntwtlWDOBJZlQGgdmkiVbdgonVHmCcoaJRRUtLCgUTm6wK1Y6XlCeCpHFNEc
zANM3zH8fQ6TxA87bwJFFFn5qcrqxRGg5YYAoQTexf4xdexasJ1IyT2sWISvI1xQ
Frc86DTlojFpgiQuZGIg2LDAEU2jdxjhsmYxw4TZ/yt9k9GE+4eYTVs3JEN87zUD
gMklNlR6+1QZxgK4TwsPej7UqKtv/EjOdc2u1BV4ae9VS5avIn9gSNkBUwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAqcNZE9ZMThsudp3wO/ofnZ1EVWMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvQ3B3MWtUMWt4T0d5NTJuZkE3LWgtZG5VUlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBCw
MA0GCSqGSIb3DQEBCwUAA4IBAQBT/mTJzwcUf34ASuRv8IAwoF2nwlktLW+zsYqx
jkr5XZzlZQI3r5dBppbCAmeE4+HZGYN/z82wg4RxqQ1zVSK4xHQUpVNash/cK72z
cd1rH0kw0bXCddhUCjbLHwOY/J2uAIunXrh4ZxvxNA4paiso9moq2N4JxEZfCWV1
PvRT8n1x/LtaZOH3rxDGB2nQ/bwrZ33wVfQ7F5DQZ8HibYFtKUNFK6OGAd6P3Oci
CkGOQVXOyNy/J/ZfIkZFlaRFSc8xDLQHrO/E36QV1oiAPzxq60AF6ZWAX/mEEcLY
P9QuOtU5AyxO/7Rc9/q0bNrstUvGDx/dBZJiWI+6Y1Z1NlVR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org