Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fW_fc5QtQoFxqFn4b5z5dyF-klg.roa
File: fW_fc5QtQoFxqFn4b5z5dyF-klg.roa (raw, json)
Hash identifier: AlJO6mZXRujTzstd5+5nIHG4zMUpi2lu0LLV2xpqJmw=
Subject key identifier: 7D:6F:DF:73:94:2D:42:81:71:A8:59:F8:6F:9C:F9:77:21:7E:92:58
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0189303E83131807B1C3CB23A073775D78F1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fW_fc5QtQoFxqFn4b5z5dyF-klg.roa
Signing time: Fri 07 Jul 2023 12:05:50 +0000
ROA not before: Fri 07 Jul 2023 12:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197860
IP address blocks: 2a12:bec0:390::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:3e:83:13:18:07:b1:c3:cb:23:a0:73:77:5d:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 7 12:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6fdf73942d428171a859f86f9cf977217e9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:1d:ef:f4:16:cd:92:a9:52:71:1f:8a:10:
69:b2:08:ee:88:53:9c:2e:28:74:81:0e:2b:5d:6a:
d8:6b:d8:fb:d7:30:05:7d:60:3f:1c:c7:62:71:a5:
8c:fb:40:cd:29:0e:ad:db:26:cf:d5:84:9a:c9:cc:
c2:b4:8f:80:7e:65:dc:12:57:cf:4e:b7:00:d3:ab:
e5:f9:e6:7b:d1:62:d1:88:96:8e:bc:e4:9a:fc:cc:
a4:0d:08:b2:1e:09:19:6e:70:c8:fe:e8:c0:d6:89:
7d:e2:be:fe:a7:58:d2:2e:9e:58:81:a5:bd:f4:9a:
72:f5:34:9e:ca:78:82:47:1b:c0:87:e5:28:27:ae:
63:fc:1f:be:e3:5c:82:ee:ef:e6:d0:38:77:fc:68:
da:e2:3a:a0:51:65:81:89:f3:6d:c0:df:c5:93:9b:
a0:09:ac:81:62:38:54:3d:7e:91:2c:48:23:04:a3:
fc:4f:33:c5:e9:b8:56:24:60:9a:44:ec:d7:8b:fa:
df:af:7e:37:ca:3c:78:5f:52:14:19:4d:e1:c2:83:
9a:51:91:af:d1:38:65:6b:e5:08:a8:28:73:2e:1a:
7b:ca:e6:fd:b6:e5:b9:9f:6a:c2:ab:25:7a:97:37:
23:58:43:bc:ff:63:28:ca:85:52:d0:c7:ec:89:28:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6F:DF:73:94:2D:42:81:71:A8:59:F8:6F:9C:F9:77:21:7E:92:58
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fW_fc5QtQoFxqFn4b5z5dyF-klg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:390::/44
Signature Algorithm: sha256WithRSAEncryption
60:7b:6a:29:bd:01:f9:61:29:a1:b4:44:0e:40:29:05:12:31:
37:47:bc:08:09:66:cf:20:0f:0c:46:c7:be:65:01:93:55:7c:
b1:1f:2b:13:bc:6b:f2:dc:7b:4f:7f:b2:e9:49:48:37:0d:81:
11:87:9a:40:54:bb:b4:e7:b8:7c:38:52:17:cf:9f:b3:9b:b1:
6c:ff:46:8a:c0:43:20:c6:3e:69:bf:86:30:05:8d:2e:35:76:
77:c1:86:37:06:b2:58:7f:c3:35:6a:03:81:2a:63:52:b6:48:
8e:24:f3:fb:d1:9d:06:75:fb:41:3e:f3:04:36:f3:78:be:d1:
49:6e:5e:f5:33:68:b7:e8:be:11:1a:8d:a2:36:3b:34:d1:e9:
7d:9c:20:91:87:9a:c3:e0:e0:66:27:00:5b:ec:98:71:b0:6a:
8d:54:0e:71:2a:05:0a:6a:15:95:0e:d8:0c:1e:66:c3:07:8a:
54:12:aa:ef:14:f0:9d:fe:d1:0c:fb:0f:af:78:8f:5e:00:d7:
81:00:14:95:b5:df:0e:cc:57:c4:cf:a6:ea:f2:a0:ed:03:dc:
c8:9f:19:01:59:bd:aa:94:b0:83:7f:9e:23:61:fb:6a:fa:fc:
b5:c8:0e:97:db:01:a4:6d:54:11:15:8c:01:06:54:bd:78:48:
4c:19:0a:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYkwPoMTGAexw8sjoHN3XXjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNzA3MTIwNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZmZGY3Mzk0MmQ0MjgxNzFhODU5Zjg2ZjljZjk3NzIxN2U5MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8gd7/QWzZKpUnEfihBpsgjuiFOc
Lih0gQ4rXWrYa9j71zAFfWA/HMdicaWM+0DNKQ6t2ybP1YSayczCtI+AfmXcElfP
TrcA06vl+eZ70WLRiJaOvOSa/MykDQiyHgkZbnDI/ujA1ol94r7+p1jSLp5YgaW9
9Jpy9TSeyniCRxvAh+UoJ65j/B++41yC7u/m0Dh3/Gja4jqgUWWBifNtwN/Fk5ug
CayBYjhUPX6RLEgjBKP8TzPF6bhWJGCaROzXi/rfr343yjx4X1IUGU3hwoOaUZGv
0Thla+UIqChzLhp7yub9tuW5n2rCqyV6lzcjWEO8/2MoyoVS0MfsiSgJ/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH1v33OULUKBcahZ+G+c+XchfpJYMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvZldfZmM1UXRRb0Z4cUZuNGI1ejVkeUYta2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBge2opvQH5YSmhtEQOQCkFEjE3R7wICWbPIA8M
Rse+ZQGTVXyxHysTvGvy3HtPf7LpSUg3DYERh5pAVLu057h8OFIXz5+zm7Fs/0aK
wEMgxj5pv4YwBY0uNXZ3wYY3BrJYf8M1agOBKmNStkiOJPP70Z0GdftBPvMENvN4
vtFJbl71M2i36L4RGo2iNjs00el9nCCRh5rD4OBmJwBb7JhxsGqNVA5xKgUKahWV
DtgMHmbDB4pUEqrvFPCd/tEM+w+veI9eANeBABSVtd8OzFfEz6bq8qDtA9zInxkB
Wb2qlLCDf54jYftq+vy1yA6X2wGkbVQRFYwBBlS9eEhMGQot
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org