Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_qaPBeAWNh7AkPbT26ZvexF4j8U.roa
File: _qaPBeAWNh7AkPbT26ZvexF4j8U.roa (raw, json)
Hash identifier: ljc2d2HfTi8jyvN/LGNEjBMUiJss/hvT9P5/NtAQmeU=
Subject key identifier: FE:A6:8F:05:E0:16:36:1E:C0:90:F6:D3:DB:A6:6F:7B:11:78:8F:C5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018C18222B98D962B35D4F7910A701087CCC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_qaPBeAWNh7AkPbT26ZvexF4j8U.roa
Signing time: Tue 28 Nov 2023 22:52:21 +0000
ROA not before: Tue 28 Nov 2023 22:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 2a12:bec0:df0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:18:22:2b:98:d9:62:b3:5d:4f:79:10:a7:01:08:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 28 22:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fea68f05e016361ec090f6d3dba66f7b11788fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:8e:9b:23:83:7f:ec:ba:d7:61:3a:96:9c:
28:f8:32:50:aa:f8:72:41:19:6f:ad:94:5b:93:da:
78:5b:a9:9c:cb:33:89:1e:55:ec:ff:c9:3b:87:5f:
8a:7d:9f:ab:63:7d:58:ac:62:e6:2b:54:04:db:95:
af:7b:d3:43:a4:ef:c3:42:0e:f6:e6:47:02:03:56:
28:e5:e5:ee:d2:02:02:70:36:52:da:a1:8b:05:5e:
b0:96:12:f7:1f:e0:1e:b9:3a:c9:7d:16:f5:fa:28:
a6:0a:29:93:ed:0b:41:4d:2c:e6:2e:b2:b6:e5:c0:
c7:cc:5e:60:5e:eb:83:b1:6e:3f:e8:1d:8f:47:b4:
38:f0:7a:df:89:bf:ba:76:35:22:0b:ce:57:70:89:
32:f9:54:f6:ce:71:a3:83:ec:6d:32:f3:b0:d5:5a:
93:84:f0:2a:70:7b:8f:51:b2:69:5e:82:68:8b:dc:
43:fc:e6:49:cf:9c:56:75:52:bd:e5:e1:b3:45:f0:
3c:39:ca:1e:ba:5b:be:18:68:e6:9a:a0:f6:a1:39:
5b:3e:7a:fc:33:b1:e9:56:88:09:c2:78:f9:68:29:
6e:b7:d7:47:96:e4:6e:e4:49:c9:1a:dc:ad:0a:92:
d9:74:63:fa:c2:b2:82:a3:18:18:5d:d7:09:2c:71:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:8F:05:E0:16:36:1E:C0:90:F6:D3:DB:A6:6F:7B:11:78:8F:C5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_qaPBeAWNh7AkPbT26ZvexF4j8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:df0::/44
Signature Algorithm: sha256WithRSAEncryption
a3:7f:8d:87:ef:da:01:b5:48:bc:5e:fe:fe:f5:61:ca:a5:80:
c2:f4:5a:b7:c9:a4:58:2b:a5:67:4d:c4:ad:7f:4a:a2:64:2d:
d0:24:50:a9:ff:b9:84:64:11:bb:55:e8:d3:56:a7:06:45:12:
cf:20:f9:8f:e8:08:16:8d:50:00:fa:df:f4:a0:c7:41:9c:e9:
51:ef:82:75:10:c5:36:10:51:c5:44:47:0d:c6:a7:7b:a3:35:
35:00:ae:ba:00:9a:bc:ad:85:e3:bc:57:06:7d:1f:49:cd:e6:
04:2a:55:2d:ea:2d:ca:5d:f9:48:ed:ae:3c:5f:d9:a3:8a:c0:
6e:92:4d:0d:ec:bb:78:de:92:95:10:ca:5c:ad:7c:06:29:f7:
0a:1f:a3:46:35:2f:62:84:55:9e:64:4f:da:07:34:1d:b2:5c:
31:29:a8:a4:6e:6a:72:4f:aa:ac:b7:d6:e4:92:2e:f3:11:30:
9e:14:60:38:95:c8:a3:ad:e4:fe:46:d2:0e:05:16:0b:13:64:
4d:6e:59:09:ab:af:0d:74:9e:e4:b4:78:a4:50:6d:6b:08:ac:
74:f6:4e:e8:fd:a7:d5:8d:0b:19:51:88:56:b9:30:8d:0b:c8:
fa:eb:6b:72:c0:96:64:8c:de:da:e3:a1:41:bc:88:fa:55:59:
da:80:c2:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYwYIiuY2WKzXU95EKcBCHzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMxMTI4MjI1MjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWE2OGYwNWUwMTYzNjFlYzA5MGY2ZDNkYmE2NmY3YjExNzg4ZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA186OmyODf+y612E6lpwo+DJQqvhy
QRlvrZRbk9p4W6mcyzOJHlXs/8k7h1+KfZ+rY31YrGLmK1QE25Wve9NDpO/DQg72
5kcCA1Yo5eXu0gICcDZS2qGLBV6wlhL3H+AeuTrJfRb1+iimCimT7QtBTSzmLrK2
5cDHzF5gXuuDsW4/6B2PR7Q48Hrfib+6djUiC85XcIky+VT2znGjg+xtMvOw1VqT
hPAqcHuPUbJpXoJoi9xD/OZJz5xWdVK95eGzRfA8Ocoeulu+GGjmmqD2oTlbPnr8
M7HpVogJwnj5aClut9dHluRu5EnJGtytCpLZdGP6wrKCoxgYXdcJLHEZfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP6mjwXgFjYewJD209umb3sReI/FMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvX3FhUEJlQVdOaDdBa1BiVDI2WnZleEY0ajhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wA3w
MA0GCSqGSIb3DQEBCwUAA4IBAQCjf42H79oBtUi8Xv7+9WHKpYDC9Fq3yaRYK6Vn
TcStf0qiZC3QJFCp/7mEZBG7VejTVqcGRRLPIPmP6AgWjVAA+t/0oMdBnOlR74J1
EMU2EFHFREcNxqd7ozU1AK66AJq8rYXjvFcGfR9JzeYEKlUt6i3KXflI7a48X9mj
isBukk0N7Lt43pKVEMpcrXwGKfcKH6NGNS9ihFWeZE/aBzQdslwxKaikbmpyT6qs
t9bkki7zETCeFGA4lcijreT+RtIOBRYLE2RNblkJq68NdJ7ktHikUG1rCKx09k7o
/afVjQsZUYhWuTCNC8j662tywJZkjN7a46FBvIj6VVnagMKr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org