Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iHdku-54DwIK7sLYN8gxI0t5vuo.roa
File: iHdku-54DwIK7sLYN8gxI0t5vuo.roa (raw, json)
Hash identifier: rmqODUTBNOngqC6QpxjRrFFplNTHAZUVf3yIxrmBs9c=
Subject key identifier: 88:77:64:BB:EE:78:0F:02:0A:EE:C2:D8:37:C8:31:23:4B:79:BE:EA
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01880A41E021170836D5A7992E8AC1A1A68C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iHdku-54DwIK7sLYN8gxI0t5vuo.roa
Signing time: Thu 11 May 2023 10:01:09 +0000
ROA not before: Thu 11 May 2023 10:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198590
IP address blocks: 2a12:bec0:330::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:41:e0:21:17:08:36:d5:a7:99:2e:8a:c1:a1:a6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 11 10:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=887764bbee780f020aeec2d837c831234b79beea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:a4:97:78:ed:76:22:22:56:b3:38:8b:70:
1a:48:a9:ec:3c:ce:0e:2d:bc:c4:9f:c9:11:22:ae:
c4:ff:52:b4:bf:3a:d2:66:9d:fb:4f:c0:04:58:ef:
b1:59:b8:d1:cf:27:e8:3e:8c:f7:b6:5b:4e:f5:49:
01:78:9b:b4:13:59:35:97:7d:07:06:28:e1:05:e8:
d1:63:d9:08:42:87:35:cc:c4:c7:b8:e3:d1:dd:38:
21:91:18:84:8d:19:bf:83:b5:24:ee:87:1f:b0:0e:
eb:04:01:56:a2:94:69:37:03:93:09:98:e7:2f:09:
76:59:8c:9e:a2:30:e3:32:09:a7:c2:86:30:6b:48:
c9:31:80:9b:a8:4c:33:95:29:84:38:42:f5:53:33:
1e:87:3e:ea:21:9f:36:26:d7:12:04:44:43:db:f5:
42:6e:84:e1:11:6f:0c:5b:17:b3:98:38:38:da:70:
db:d3:99:ac:cc:52:41:9a:15:3a:36:e4:3b:12:bc:
b0:1c:dd:e8:30:3e:21:19:7a:6d:1e:ea:cb:2c:3a:
dc:95:fc:1d:15:02:e4:f4:13:91:17:1d:d3:58:1b:
fd:7e:b9:3a:05:ef:cd:aa:a7:b1:6b:c8:b9:65:12:
f7:4a:eb:76:7e:dd:0c:a5:1f:a5:00:80:cb:94:8e:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:64:BB:EE:78:0F:02:0A:EE:C2:D8:37:C8:31:23:4B:79:BE:EA
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iHdku-54DwIK7sLYN8gxI0t5vuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:330::/44
Signature Algorithm: sha256WithRSAEncryption
2e:76:a1:81:72:2a:25:85:e4:08:59:ac:23:65:26:3f:f3:1e:
37:43:5b:ad:11:ca:5a:7d:2e:2e:44:e0:79:09:2a:7f:0d:a9:
ff:e5:01:52:0a:0c:a8:b7:e7:6f:7e:24:81:48:04:0a:d2:fe:
1f:9c:32:5a:38:c9:8e:35:ad:b6:21:d2:98:8f:a9:a8:de:f7:
00:db:20:0d:be:dd:33:1c:56:3b:44:22:96:e4:15:9f:d6:7a:
9c:01:e8:09:8f:f8:a9:13:f7:37:9f:69:6c:43:c6:5b:63:2b:
76:fb:f1:1d:8a:7c:eb:1c:e8:73:4a:6a:39:3a:4a:e8:c6:e8:
cc:b5:d4:20:c7:9b:95:d0:b5:8c:74:df:3f:f2:01:a4:ea:e6:
4a:5f:1c:fe:9e:68:bf:40:72:e5:9d:33:c6:ed:cb:76:b7:69:
1b:73:45:b0:b2:db:0b:01:3a:c8:14:c0:ab:2e:27:f1:dc:9d:
40:04:33:32:12:32:9d:96:a6:7d:d8:6d:31:f2:c9:8c:75:e7:
68:af:53:69:8b:d0:ea:16:37:d7:af:90:a7:f9:e4:49:5c:af:
82:8a:99:eb:49:9b:6a:77:ab:cd:0f:b8:d3:cc:d2:d5:f5:89:
2d:c5:17:1a:0f:64:0c:6e:b1:57:72:db:73:09:d4:33:f2:20:
8c:7a:aa:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYgKQeAhFwg21aeZLorBoaaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNTExMTAwMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODc3NjRiYmVlNzgwZjAyMGFlZWMyZDgzN2M4MzEyMzRiNzliZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Wkl3jtdiIiVrM4i3AaSKnsPM4O
LbzEn8kRIq7E/1K0vzrSZp37T8AEWO+xWbjRzyfoPoz3tltO9UkBeJu0E1k1l30H
BijhBejRY9kIQoc1zMTHuOPR3TghkRiEjRm/g7Uk7ocfsA7rBAFWopRpNwOTCZjn
Lwl2WYyeojDjMgmnwoYwa0jJMYCbqEwzlSmEOEL1UzMehz7qIZ82JtcSBERD2/VC
boThEW8MWxezmDg42nDb05mszFJBmhU6NuQ7ErywHN3oMD4hGXptHurLLDrclfwd
FQLk9BORFx3TWBv9frk6Be/Nqqexa8i5ZRL3Sut2ft0MpR+lAIDLlI4TFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIh3ZLvueA8CCu7C2DfIMSNLeb7qMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvaUhka3UtNTREd0lLN3NMWU44Z3hJMHQ1dnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAMw
MA0GCSqGSIb3DQEBCwUAA4IBAQAudqGBciolheQIWawjZSY/8x43Q1utEcpafS4u
ROB5CSp/Dan/5QFSCgyot+dvfiSBSAQK0v4fnDJaOMmONa22IdKYj6mo3vcA2yAN
vt0zHFY7RCKW5BWf1nqcAegJj/ipE/c3n2lsQ8ZbYyt2+/EdinzrHOhzSmo5Okro
xujMtdQgx5uV0LWMdN8/8gGk6uZKXxz+nmi/QHLlnTPG7ct2t2kbc0WwstsLATrI
FMCrLifx3J1ABDMyEjKdlqZ92G0x8smMdedor1Npi9DqFjfXr5Cn+eRJXK+Cipnr
SZtqd6vND7jTzNLV9YktxRcaD2QMbrFXcttzCdQz8iCMeqrN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org