Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NTapJx23ynRrl41BRU2XkPMZnKA.roa
File: NTapJx23ynRrl41BRU2XkPMZnKA.roa (raw, json)
Hash identifier: RI/wFRTQiRBd8XywdltVuBFep38ubLLZZQchrc1XYKU=
Subject key identifier: 35:36:A9:27:1D:B7:CA:74:6B:97:8D:41:45:4D:97:90:F3:19:9C:A0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018693A00F2C2ED730390CBEF24AD681021D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NTapJx23ynRrl41BRU2XkPMZnKA.roa
Signing time: Mon 27 Feb 2023 16:06:25 +0000
ROA not before: Mon 27 Feb 2023 16:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199685
IP address blocks: 2a12:bec0:180::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 03 Mar 2023 22:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:a0:0f:2c:2e:d7:30:39:0c:be:f2:4a:d6:81:02:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 27 16:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3536a9271db7ca746b978d41454d9790f3199ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:60:84:79:6a:57:2c:da:e2:ad:fe:7f:9b:
36:d4:5d:35:9e:86:a5:36:22:35:56:da:99:04:40:
bc:22:7e:ea:b1:9c:bb:eb:9e:c3:59:a6:d4:78:b9:
5c:d6:64:7d:e4:12:12:d5:dd:9d:e3:16:46:d4:e2:
86:62:b2:52:7b:d9:e5:75:42:76:e3:cd:44:de:67:
a8:10:bb:e8:65:b5:18:01:7f:bc:54:81:86:b0:ae:
5f:aa:97:3e:82:d0:38:3b:f1:ea:fc:95:65:cf:04:
85:38:0c:24:88:77:fc:41:1b:f0:1e:ed:ec:33:24:
a7:bd:87:b1:f3:83:fb:fc:b6:a0:40:5d:7c:8b:3f:
56:3b:80:1a:f1:44:b2:e5:92:07:b6:c4:70:b0:b8:
d9:cd:35:5a:70:7a:7c:dc:0c:4a:0e:0b:38:69:89:
75:12:5f:d4:de:3c:d3:e0:03:0a:07:17:54:23:d7:
cc:7c:5d:d2:7f:fb:55:f8:13:bc:1a:8a:dd:14:e7:
b5:5b:ea:c6:de:c2:b4:63:c4:d8:6a:11:5f:b3:ef:
01:72:51:6a:dc:56:e7:8d:c1:9c:e9:e2:12:b8:25:
d9:e2:5f:32:73:3d:15:59:d1:df:b8:3e:f2:18:64:
58:b1:68:1c:fc:e3:01:81:63:c6:de:3e:94:de:fc:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:36:A9:27:1D:B7:CA:74:6B:97:8D:41:45:4D:97:90:F3:19:9C:A0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NTapJx23ynRrl41BRU2XkPMZnKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:180::/44
Signature Algorithm: sha256WithRSAEncryption
91:66:74:6b:79:7b:79:96:89:f5:2b:83:43:a7:5e:33:40:bb:
15:63:2a:32:3b:0b:93:46:ac:7f:6c:0c:df:d4:6b:0e:dd:ce:
23:c0:98:c1:fe:98:4a:e3:69:97:64:d2:e3:9d:97:ec:5b:80:
f6:c9:58:db:20:28:4a:3f:02:08:cd:93:76:20:d4:32:73:e7:
19:8b:db:1e:d2:3b:26:6d:8a:dd:05:98:89:a8:ed:03:98:5a:
29:99:23:53:13:22:a7:42:ec:b4:01:67:f5:e3:10:dd:27:4b:
97:90:06:c6:26:06:f7:dc:d3:6f:19:35:4c:a7:b1:5c:26:f5:
11:e9:31:62:8a:be:32:24:c1:c4:0c:30:f3:86:f0:80:92:68:
f6:28:f4:f4:11:f4:92:cf:bd:c5:52:9a:cb:75:0f:82:96:73:
8e:da:c6:ba:ef:ad:44:c2:d3:09:53:c2:58:42:2d:88:5d:08:
86:d9:23:cb:a3:42:1a:2f:eb:2f:10:9d:31:21:27:0e:1a:81:
a9:70:8c:4d:b9:4e:47:27:df:dc:7e:08:f4:1b:d3:77:ec:1d:
be:25:fd:7a:d4:86:3f:60:c0:3c:42:2d:e0:76:77:c9:66:03:
59:8e:36:83:e7:86:b6:64:de:4e:77:eb:09:1f:29:f5:f2:37:
41:c3:1e:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYaToA8sLtcwOQy+8krWgQIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwMjI3MTYwNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM2YTkyNzFkYjdjYTc0NmI5NzhkNDE0NTRkOTc5MGYzMTk5Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkINghHlqVyza4q3+f5s21F01noal
NiI1VtqZBEC8In7qsZy7657DWabUeLlc1mR95BIS1d2d4xZG1OKGYrJSe9nldUJ2
481E3meoELvoZbUYAX+8VIGGsK5fqpc+gtA4O/Hq/JVlzwSFOAwkiHf8QRvwHu3s
MySnvYex84P7/LagQF18iz9WO4Aa8USy5ZIHtsRwsLjZzTVacHp83AxKDgs4aYl1
El/U3jzT4AMKBxdUI9fMfF3Sf/tV+BO8GordFOe1W+rG3sK0Y8TYahFfs+8BclFq
3FbnjcGc6eISuCXZ4l8ycz0VWdHfuD7yGGRYsWgc/OMBgWPG3j6U3vxOswIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDU2qScdt8p0a5eNQUVNl5DzGZygMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvTlRhcEp4MjN5blJybDQxQlJVMlhrUE1abktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAGA
MA0GCSqGSIb3DQEBCwUAA4IBAQCRZnRreXt5lon1K4NDp14zQLsVYyoyOwuTRqx/
bAzf1GsO3c4jwJjB/phK42mXZNLjnZfsW4D2yVjbIChKPwIIzZN2INQyc+cZi9se
0jsmbYrdBZiJqO0DmFopmSNTEyKnQuy0AWf14xDdJ0uXkAbGJgb33NNvGTVMp7Fc
JvUR6TFiir4yJMHEDDDzhvCAkmj2KPT0EfSSz73FUprLdQ+ClnOO2sa6761EwtMJ
U8JYQi2IXQiG2SPLo0IaL+svEJ0xIScOGoGpcIxNuU5HJ9/cfgj0G9N37B2+Jf16
1IY/YMA8Qi3gdnfJZgNZjjaD54a2ZN5Od+sJHyn18jdBwx6S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org