Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FL5yV1AUeU2lzVh6qJ3YygnxSV4.roa
File: FL5yV1AUeU2lzVh6qJ3YygnxSV4.roa (raw, json)
Hash identifier: r8zSpbCNxG4p+9TJghCOxII3VVfqjcPS2R8pJw3pVRk=
Subject key identifier: 14:BE:72:57:50:14:79:4D:A5:CD:58:7A:A8:9D:D8:CA:09:F1:49:5E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187095D5FF3192B109AEF0FE9B0D0D0F569
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FL5yV1AUeU2lzVh6qJ3YygnxSV4.roa
Signing time: Wed 22 Mar 2023 12:48:47 +0000
ROA not before: Wed 22 Mar 2023 12:48:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a12:bec0:230::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Mar 2023 19:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:5d:5f:f3:19:2b:10:9a:ef:0f:e9:b0:d0:d0:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 22 12:48:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14be72575014794da5cd587aa89dd8ca09f1495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:6d:c6:f0:96:14:78:4c:2b:c8:49:e4:96:
b6:52:9f:b9:ef:25:ed:bc:c8:c8:9d:c3:6e:f6:0d:
2b:d2:0a:45:57:b3:a7:22:5a:d6:8c:1b:cc:2c:56:
5d:a7:8d:61:af:2d:84:c8:32:7e:97:44:5e:3e:a8:
8e:77:71:cb:77:b7:fb:6f:55:dc:8e:7a:fe:7b:88:
44:bc:76:5d:0e:6e:da:ae:12:bc:c7:d7:e6:24:d6:
69:d3:47:65:1f:98:fe:dc:86:92:e2:02:95:8c:23:
b2:88:99:18:45:bc:8d:61:ba:8b:3d:8c:c5:92:5a:
2c:8a:d4:eb:32:ae:6d:05:31:9e:d8:b1:7e:85:d5:
25:87:92:b5:38:6f:d1:13:f9:d1:df:cd:c1:d0:80:
6b:ae:a0:7e:2a:09:a2:22:30:b1:52:7d:48:41:7c:
ab:2e:8d:3c:a1:09:03:cb:39:38:c1:1b:a0:61:7b:
45:db:30:48:fc:d5:96:cf:68:2f:63:14:97:93:a8:
e6:8e:a6:9a:f8:dd:0e:d8:96:12:9e:f8:2b:23:92:
2e:37:e6:a9:df:7a:fc:7a:06:f4:a4:76:7e:c5:ca:
f5:1a:d3:01:81:28:93:72:a4:17:66:70:e5:b7:93:
40:b6:38:e1:3e:f5:f8:d7:d4:b9:56:25:2e:15:64:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:72:57:50:14:79:4D:A5:CD:58:7A:A8:9D:D8:CA:09:F1:49:5E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FL5yV1AUeU2lzVh6qJ3YygnxSV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:230::/44
Signature Algorithm: sha256WithRSAEncryption
9c:63:fc:4c:a4:9a:57:36:a4:a5:ad:28:5a:57:b1:9b:65:f9:
18:1f:6a:a1:bb:3d:5e:4a:19:78:2e:30:66:c6:97:fb:4e:6e:
7e:ac:44:b0:44:34:56:0a:a5:7b:01:90:2d:bc:69:0d:ff:32:
d5:e8:6c:48:8f:9a:1a:6e:fd:2b:8b:b4:18:59:50:68:9f:45:
a0:05:5f:77:4d:d1:22:73:49:37:ec:ff:22:07:26:cc:cb:31:
53:7c:94:ff:19:5d:19:d5:b6:44:e7:57:64:3e:d9:36:d6:7e:
b7:23:47:c8:64:d8:78:66:43:e1:3a:ac:ce:66:2d:e0:05:27:
31:5f:04:61:be:0f:39:d5:89:22:dd:30:b1:24:e4:a4:1f:17:
ae:f5:1e:43:5d:31:5c:bc:7b:5c:fe:64:04:37:47:05:f6:c5:
9a:a5:72:4c:a3:0d:20:10:5b:8e:26:fc:6f:a6:60:5a:ed:56:
06:33:d3:62:2d:ef:05:c6:71:13:da:1a:93:09:14:1d:41:0c:
d7:a9:1d:c8:9e:b5:e4:0a:1e:93:72:8c:09:d0:4a:ea:d1:bf:
b8:f5:bf:25:a0:98:7c:c3:ba:1d:b3:4b:5d:92:cb:51:3d:e8:
83:aa:fb:57:3e:e4:4e:08:46:58:5f:1f:c5:c3:06:5e:73:9b:
48:ec:33:95
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYcJXV/zGSsQmu8P6bDQ0PVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwMzIyMTI0ODQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGJlNzI1NzUwMTQ3OTRkYTVjZDU4N2FhODlkZDhjYTA5ZjE0OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyhtxvCWFHhMK8hJ5Ja2Up+57yXt
vMjIncNu9g0r0gpFV7OnIlrWjBvMLFZdp41hry2EyDJ+l0RePqiOd3HLd7f7b1Xc
jnr+e4hEvHZdDm7arhK8x9fmJNZp00dlH5j+3IaS4gKVjCOyiJkYRbyNYbqLPYzF
klositTrMq5tBTGe2LF+hdUlh5K1OG/RE/nR383B0IBrrqB+KgmiIjCxUn1IQXyr
Lo08oQkDyzk4wRugYXtF2zBI/NWWz2gvYxSXk6jmjqaa+N0O2JYSnvgrI5IuN+ap
33r8egb0pHZ+xcr1GtMBgSiTcqQXZnDlt5NAtjjhPvX419S5ViUuFWSKdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBS+cldQFHlNpc1Yeqid2MoJ8UleMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRkw1eVYxQVVlVTJselZoNnFKM1l5Z254U1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAIw
MA0GCSqGSIb3DQEBCwUAA4IBAQCcY/xMpJpXNqSlrShaV7GbZfkYH2qhuz1eShl4
LjBmxpf7Tm5+rESwRDRWCqV7AZAtvGkN/zLV6GxIj5oabv0ri7QYWVBon0WgBV93
TdEic0k37P8iBybMyzFTfJT/GV0Z1bZE51dkPtk21n63I0fIZNh4ZkPhOqzOZi3g
BScxXwRhvg851Yki3TCxJOSkHxeu9R5DXTFcvHtc/mQEN0cF9sWapXJMow0gEFuO
JvxvpmBa7VYGM9NiLe8FxnET2hqTCRQdQQzXqR3InrXkCh6TcowJ0Erq0b+49b8l
oJh8w7ods0tdkstRPeiDqvtXPuROCEZYXx/FwwZec5tI7DOV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org