Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTD7niaR34yKbd4bYXUtfpqPwNs.roa
File: PTD7niaR34yKbd4bYXUtfpqPwNs.roa (raw, json)
Hash identifier: o/GNY3wSX1S/v/Ys6hnsYCdKumCSmhZqZcKl6GPbyMA=
Subject key identifier: 3D:30:FB:9E:26:91:DF:8C:8A:6D:DE:1B:61:75:2D:7E:9A:8F:C0:DB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0191260A7345D832CFD69F302041E638EDE8
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTD7niaR34yKbd4bYXUtfpqPwNs.roa
Signing time: Tue 06 Aug 2024 04:55:04 +0000
ROA not before: Tue 06 Aug 2024 04:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 2a12:bec4:1440::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 09:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:0a:73:45:d8:32:cf:d6:9f:30:20:41:e6:38:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 6 04:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d30fb9e2691df8c8a6dde1b61752d7e9a8fc0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:32:f3:d9:69:43:69:8d:ad:68:12:ef:0a:
e2:c8:a7:c8:1a:f6:c4:b4:fc:8d:f8:a5:7f:a5:50:
c9:de:8b:3e:bc:f2:9c:21:4c:41:87:39:ec:a7:7e:
4a:a2:a6:27:db:30:d5:2d:c3:4e:1a:7c:7a:4c:3f:
74:c4:00:80:d0:3c:cd:73:c4:98:60:e7:cc:f0:32:
8b:2d:c6:0d:21:a9:1d:76:0c:ae:36:27:ff:6d:89:
7d:13:56:9b:f8:ce:2a:dc:05:e0:39:4d:6c:52:3f:
91:1e:a8:04:5c:9f:8e:40:32:c3:b0:22:01:1e:50:
6d:42:64:52:c1:bb:99:fa:f0:7b:d9:a0:93:41:11:
ca:a9:f1:55:14:6e:c7:5f:97:3a:70:17:63:5a:7c:
8b:5c:db:75:89:7c:68:bc:1e:73:5e:9e:10:d0:08:
c4:14:83:8a:21:6b:2f:78:bd:de:bb:84:a2:74:25:
fb:1d:0e:0a:95:10:a6:89:df:ff:27:09:55:4c:ab:
a5:57:c0:05:6b:af:d8:7f:4e:bf:9d:62:0f:21:43:
a0:94:ca:aa:95:04:74:52:b0:0e:de:0a:13:0a:f7:
86:af:95:33:ab:22:6f:66:8b:52:f4:7b:3d:82:1a:
c5:a0:bc:3f:74:da:d6:82:f4:83:0c:ec:77:0b:09:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:FB:9E:26:91:DF:8C:8A:6D:DE:1B:61:75:2D:7E:9A:8F:C0:DB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTD7niaR34yKbd4bYXUtfpqPwNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1440::/44
Signature Algorithm: sha256WithRSAEncryption
c5:9b:60:a9:ca:32:a0:26:d7:53:79:dd:c5:83:82:38:ea:d6:
cc:bd:dd:38:fb:69:36:02:94:08:ed:16:7d:e5:0e:f1:0f:50:
9f:11:51:7a:32:a4:2f:0c:82:c2:61:9c:14:7c:1f:a3:f7:bb:
5f:70:94:8d:24:69:60:05:88:e1:00:cc:1f:ab:67:a1:81:5e:
cc:03:a1:89:d1:8c:6f:e1:f5:e0:4e:56:86:59:fb:45:1b:fc:
27:66:41:3f:5b:ed:2a:98:af:74:34:1c:56:e4:1a:e6:63:78:
3a:67:68:fa:f1:29:97:75:be:64:25:a9:06:fd:77:19:50:bf:
3b:43:ee:ff:45:22:4f:1c:19:52:6c:d1:f9:84:f5:53:b7:13:
09:c8:78:32:df:82:c8:ab:db:3e:27:46:49:0f:82:b4:d8:ea:
9b:82:37:1c:de:75:db:60:7b:5e:cb:69:44:d3:5c:08:3f:02:
c9:d7:40:53:28:98:b5:06:8d:57:be:2d:49:5d:12:8c:3b:44:
7f:3c:21:67:05:5f:3d:fd:55:ba:3a:32:5e:0f:8d:48:55:5e:
30:a0:eb:46:14:85:23:e0:4a:72:c6:ca:3b:92:90:67:66:24:
30:aa:73:c6:fb:94:05:45:35:8a:a8:7c:0d:a6:14:8a:cf:5f:
b7:ed:27:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZEmCnNF2DLP1p8wIEHmOO3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwODA2MDQ1NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDMwZmI5ZTI2OTFkZjhjOGE2ZGRlMWI2MTc1MmQ3ZTlhOGZjMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujAy89lpQ2mNrWgS7wriyKfIGvbE
tPyN+KV/pVDJ3os+vPKcIUxBhznsp35KoqYn2zDVLcNOGnx6TD90xACA0DzNc8SY
YOfM8DKLLcYNIakddgyuNif/bYl9E1ab+M4q3AXgOU1sUj+RHqgEXJ+OQDLDsCIB
HlBtQmRSwbuZ+vB72aCTQRHKqfFVFG7HX5c6cBdjWnyLXNt1iXxovB5zXp4Q0AjE
FIOKIWsveL3eu4SidCX7HQ4KlRCmid//JwlVTKulV8AFa6/Yf06/nWIPIUOglMqq
lQR0UrAO3goTCveGr5UzqyJvZotS9Hs9ghrFoLw/dNrWgvSDDOx3Cwl6owIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD0w+54mkd+Mim3eG2F1LX6aj8DbMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvUFREN25pYVIzNHlLYmQ0YllYVXRmcHFQd05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBRA
MA0GCSqGSIb3DQEBCwUAA4IBAQDFm2CpyjKgJtdTed3Fg4I46tbMvd04+2k2ApQI
7RZ95Q7xD1CfEVF6MqQvDILCYZwUfB+j97tfcJSNJGlgBYjhAMwfq2ehgV7MA6GJ
0Yxv4fXgTlaGWftFG/wnZkE/W+0qmK90NBxW5BrmY3g6Z2j68SmXdb5kJakG/XcZ
UL87Q+7/RSJPHBlSbNH5hPVTtxMJyHgy34LIq9s+J0ZJD4K02Oqbgjcc3nXbYHte
y2lE01wIPwLJ10BTKJi1Bo1Xvi1JXRKMO0R/PCFnBV89/VW6OjJeD41IVV4woOtG
FIUj4Epyxso7kpBnZiQwqnPG+5QFRTWKqHwNphSKz1+37ScU
-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:07 2024 by rpki-client on console-fra.rpki-client.org