Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P3mSFGZmFnECLTRI0aM9kRmzqfU.roa
File: P3mSFGZmFnECLTRI0aM9kRmzqfU.roa (raw, json)
Hash identifier: bquNm0a3UeitkAUh2Gs386+bgMiEoQ9ZIoaMJc+23Wc=
Subject key identifier: 3F:79:92:14:66:66:16:71:02:2D:34:48:D1:A3:3D:91:19:B3:A9:F5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01890C9D3D39A913040BDDC6D473DE29A920
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P3mSFGZmFnECLTRI0aM9kRmzqfU.roa
Signing time: Fri 30 Jun 2023 14:02:58 +0000
ROA not before: Fri 30 Jun 2023 14:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197970
IP address blocks: 2a12:bec0:370::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:9d:3d:39:a9:13:04:0b:dd:c6:d4:73:de:29:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 30 14:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f79921466661671022d3448d1a33d9119b3a9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:8d:99:1e:4d:ef:57:cc:7b:53:07:a0:c0:
d2:1c:fe:08:f1:54:25:4b:07:e3:30:36:ab:7f:0a:
b0:50:fc:31:86:34:be:73:81:8d:e2:18:27:da:df:
e4:b8:e0:b7:81:f1:c3:86:ce:ec:00:aa:df:30:d6:
34:6c:64:77:a7:6e:17:e0:97:cc:56:9d:54:15:b4:
09:b0:bb:73:52:35:d4:91:18:73:3b:96:ad:83:81:
2c:dc:b1:59:12:f8:69:4b:52:50:81:ee:b9:b4:86:
68:21:64:6c:8e:ab:0f:d1:28:a2:89:0f:2e:ce:94:
cd:90:04:69:56:79:f7:63:49:e9:78:80:99:ec:46:
bb:69:10:a6:cb:87:23:39:62:3b:2a:8e:f7:14:d6:
d7:a9:7e:8b:c3:8d:c7:df:8e:f0:ad:f8:a6:55:71:
f9:0e:e3:2a:f3:88:37:2a:ce:55:97:f8:50:cc:64:
2b:63:a2:2c:4d:b8:78:ff:c2:5e:a0:aa:5e:c0:cc:
6c:62:7f:12:33:1f:6e:71:38:82:d0:78:02:56:42:
4c:77:54:fe:7d:09:c7:1c:49:48:ea:b8:5c:9f:47:
38:f7:4a:7e:ad:f3:d9:97:69:f5:cc:ee:47:a5:c2:
e4:04:88:1d:8f:3b:3d:6d:ef:70:90:9c:0d:5d:a0:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:92:14:66:66:16:71:02:2D:34:48:D1:A3:3D:91:19:B3:A9:F5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P3mSFGZmFnECLTRI0aM9kRmzqfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:370::/44
Signature Algorithm: sha256WithRSAEncryption
6d:f0:e4:f6:7c:70:b9:f9:12:4e:28:1b:46:d0:4e:55:af:21:
38:77:36:9d:de:d2:af:2b:e0:94:6d:30:cd:b5:fe:93:5e:ab:
a7:25:c4:7c:d1:68:a0:91:b7:93:25:1e:d3:40:7a:66:1f:d1:
04:6b:0d:f7:84:1e:f7:9e:ce:1b:5d:b7:f7:0b:7f:87:8e:ea:
51:ae:e2:5a:e2:2c:e7:21:d6:47:ab:aa:9d:11:94:b8:94:5e:
d4:c5:5b:f6:a9:a4:93:e4:b8:4e:e1:e0:22:cd:a7:ad:e1:75:
2e:6f:e2:9a:6a:0a:ea:b6:63:00:1c:1a:71:04:8b:d6:90:21:
84:53:0a:68:53:19:55:aa:f2:7b:d6:30:d3:d7:39:a1:70:98:
dc:df:bb:5d:1a:ea:93:81:50:5c:4c:52:05:53:40:2b:f7:00:
4d:ff:f5:6b:96:95:84:7b:f7:50:19:77:ed:0e:82:39:b0:5f:
a8:db:cf:5a:1e:ed:86:53:0a:18:65:88:61:56:75:8e:0f:96:
1f:64:8b:49:35:cb:94:ab:cf:8c:e0:d1:99:bf:63:3f:4d:ec:
68:9b:df:83:ae:99:ba:e5:aa:31:fa:5b:9d:9a:04:8b:d7:26:
b3:da:11:7e:27:81:e5:13:dd:66:b2:19:26:50:b6:48:ce:ff:
77:8b:85:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYkMnT05qRMEC93G1HPeKakgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNjMwMTQwMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjc5OTIxNDY2NjYxNjcxMDIyZDM0NDhkMWEzM2Q5MTE5YjNhOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh6NmR5N71fMe1MHoMDSHP4I8VQl
SwfjMDarfwqwUPwxhjS+c4GN4hgn2t/kuOC3gfHDhs7sAKrfMNY0bGR3p24X4JfM
Vp1UFbQJsLtzUjXUkRhzO5atg4Es3LFZEvhpS1JQge65tIZoIWRsjqsP0SiiiQ8u
zpTNkARpVnn3Y0npeICZ7Ea7aRCmy4cjOWI7Ko73FNbXqX6Lw43H347wrfimVXH5
DuMq84g3Ks5Vl/hQzGQrY6IsTbh4/8JeoKpewMxsYn8SMx9ucTiC0HgCVkJMd1T+
fQnHHElI6rhcn0c490p+rfPZl2n1zO5HpcLkBIgdjzs9be9wkJwNXaDT8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD95khRmZhZxAi00SNGjPZEZs6n1MB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvUDNtU0ZHWm1GbkVDTFRSSTBhTTlrUm16cWZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wANw
MA0GCSqGSIb3DQEBCwUAA4IBAQBt8OT2fHC5+RJOKBtG0E5VryE4dzad3tKvK+CU
bTDNtf6TXqunJcR80WigkbeTJR7TQHpmH9EEaw33hB73ns4bXbf3C3+HjupRruJa
4iznIdZHq6qdEZS4lF7UxVv2qaST5LhO4eAizaet4XUub+KaagrqtmMAHBpxBIvW
kCGEUwpoUxlVqvJ71jDT1zmhcJjc37tdGuqTgVBcTFIFU0Ar9wBN//VrlpWEe/dQ
GXftDoI5sF+o289aHu2GUwoYZYhhVnWOD5YfZItJNcuUq8+M4NGZv2M/Texom9+D
rpm65aox+ludmgSL1yaz2hF+J4HlE91mshkmULZIzv93i4Xo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org