Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/e03o_zZu4Kwahhztc2jK8Zso20w.roa
File: e03o_zZu4Kwahhztc2jK8Zso20w.roa (raw, json)
Hash identifier: 6HQF05kQHLCLKsd1LKF+qai96xMQAX5dW37f4QfOLJo=
Subject key identifier: 7B:4D:E8:FF:36:6E:E0:AC:1A:86:1C:ED:73:68:CA:F1:9B:28:DB:4C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0188B98333A47132DA12655B508F61272666
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/e03o_zZu4Kwahhztc2jK8Zso20w.roa
Signing time: Wed 14 Jun 2023 10:46:03 +0000
ROA not before: Wed 14 Jun 2023 10:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212050
IP address blocks: 2a12:bec0:e00::/48 maxlen: 48
2a12:bec0:e01::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:83:33:a4:71:32:da:12:65:5b:50:8f:61:27:26:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 14 10:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4de8ff366ee0ac1a861ced7368caf19b28db4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:c2:e2:79:43:b6:b2:64:13:40:e2:18:ab:
70:dc:03:b2:6f:ee:24:41:72:9f:ee:37:2e:4e:06:
3e:b5:cb:3f:d0:9c:e0:f9:f5:af:fd:48:ae:5f:56:
31:33:ed:0c:3c:a2:b7:f3:a2:06:61:5b:9e:9a:fa:
0d:e2:63:2b:99:53:64:9e:01:43:e8:f3:6a:29:5b:
73:c9:79:9b:a8:eb:a2:c5:24:6d:ff:e3:45:25:03:
ae:9d:b2:55:ab:4f:75:09:ac:cd:bd:f4:b4:c7:ee:
88:95:00:d9:f4:a7:17:31:14:e4:1d:9e:d7:4b:33:
7a:ee:74:e5:fd:0d:d6:c4:d0:93:c3:6d:f6:ca:fd:
bd:f4:01:9e:9a:ac:9c:04:7f:66:67:cc:c6:a0:eb:
69:df:87:44:5f:32:99:a4:55:f4:b5:56:90:73:2b:
91:13:82:8b:ce:33:43:2c:98:d6:7e:01:36:a2:bc:
ca:3f:c2:6c:2b:7e:e9:9d:88:ec:4a:b3:09:e4:94:
69:88:95:e4:5b:97:fa:78:e2:28:6d:09:57:bd:e5:
2d:4d:35:f3:ee:59:e7:f4:20:40:df:f9:b1:ff:f0:
eb:9e:a1:71:f4:7d:74:cc:cb:2d:58:e7:9a:ea:da:
56:34:f0:9d:fb:57:30:c0:7a:61:f2:b6:c0:e1:a1:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:E8:FF:36:6E:E0:AC:1A:86:1C:ED:73:68:CA:F1:9B:28:DB:4C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/e03o_zZu4Kwahhztc2jK8Zso20w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e00::/47
Signature Algorithm: sha256WithRSAEncryption
ac:65:76:f6:5d:73:40:50:32:ef:e8:15:67:a4:92:7d:49:03:
28:fe:8d:db:c4:85:e2:e8:cf:44:69:5d:18:59:a5:11:52:fc:
cb:73:54:86:15:8c:5c:5e:43:38:2a:3d:95:5c:6b:ee:81:80:
ab:09:f7:15:f9:91:da:fb:a7:37:9d:ea:08:f2:30:60:a0:a8:
2b:d3:0a:1c:41:de:55:b1:a1:d7:3d:e1:6f:66:98:03:3a:7c:
4f:76:29:65:4b:e7:d3:8f:d7:c0:13:9f:ed:ca:05:8e:84:93:
52:7b:7b:64:ef:f5:88:f7:75:14:bf:38:34:e7:ab:2d:64:5a:
7c:a2:67:84:56:e0:ca:2f:dc:63:27:3c:b9:0a:50:cc:4e:92:
66:3d:12:b2:d8:46:8e:75:c6:cf:2b:77:f0:2d:e2:34:be:6a:
1c:d1:18:2d:86:a7:a0:50:a1:fa:8e:70:7c:28:ae:bc:eb:fc:
c4:ec:3f:02:e8:1e:47:77:0e:1d:02:83:2f:06:20:1f:ef:dd:
b3:ea:b9:17:f5:49:9f:28:10:b3:32:05:24:e1:98:ba:6c:42:
3a:e3:25:f1:77:3a:8e:20:d1:5c:e1:18:6d:0a:70:cf:d2:d0:
cd:cf:f9:13:57:68:07:60:e5:2f:32:6c:80:01:a5:bd:0a:c6:
4f:ac:9c:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYi5gzOkcTLaEmVbUI9hJyZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNjE0MTA0NjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjRkZThmZjM2NmVlMGFjMWE4NjFjZWQ3MzY4Y2FmMTliMjhkYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA193C4nlDtrJkE0DiGKtw3AOyb+4k
QXKf7jcuTgY+tcs/0Jzg+fWv/UiuX1YxM+0MPKK386IGYVuemvoN4mMrmVNkngFD
6PNqKVtzyXmbqOuixSRt/+NFJQOunbJVq091CazNvfS0x+6IlQDZ9KcXMRTkHZ7X
SzN67nTl/Q3WxNCTw232yv299AGemqycBH9mZ8zGoOtp34dEXzKZpFX0tVaQcyuR
E4KLzjNDLJjWfgE2orzKP8JsK37pnYjsSrMJ5JRpiJXkW5f6eOIobQlXveUtTTXz
7lnn9CBA3/mx//DrnqFx9H10zMstWOea6tpWNPCd+1cwwHph8rbA4aEQuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHtN6P82buCsGoYc7XNoyvGbKNtMMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvZTAzb196WnU0S3dhaGh6dGMyaks4WnNvMjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhK+wA4A
MA0GCSqGSIb3DQEBCwUAA4IBAQCsZXb2XXNAUDLv6BVnpJJ9SQMo/o3bxIXi6M9E
aV0YWaURUvzLc1SGFYxcXkM4Kj2VXGvugYCrCfcV+ZHa+6c3neoI8jBgoKgr0woc
Qd5VsaHXPeFvZpgDOnxPdillS+fTj9fAE5/tygWOhJNSe3tk7/WI93UUvzg056st
ZFp8omeEVuDKL9xjJzy5ClDMTpJmPRKy2EaOdcbPK3fwLeI0vmoc0RgthqegUKH6
jnB8KK686/zE7D8C6B5Hdw4dAoMvBiAf792z6rkX9UmfKBCzMgUk4Zi6bEI64yXx
dzqOINFc4RhtCnDP0tDNz/kTV2gHYOUvMmyAAaW9CsZPrJyN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org