Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lXV4--pYBBrBIvJRYNTEjovne6Y.roa
File: lXV4--pYBBrBIvJRYNTEjovne6Y.roa (raw, json)
Hash identifier: 3uenC4bDYUnAGM5i01tqGkJu8Wde5hrOLZjfDFg4ZIo=
Subject key identifier: 95:75:78:FB:EA:58:04:1A:C1:22:F2:51:60:D4:C4:8E:8B:E7:7B:A6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CAD37675F404254C2F8B2AC3EA134B0D7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lXV4--pYBBrBIvJRYNTEjovne6Y.roa
Signing time: Wed 27 Dec 2023 21:38:58 +0000
ROA not before: Wed 27 Dec 2023 21:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215804
IP address blocks: 2a12:bec0:610::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:37:67:5f:40:42:54:c2:f8:b2:ac:3e:a1:34:b0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 27 21:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=957578fbea58041ac122f25160d4c48e8be77ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:4e:1c:ab:6c:f3:0f:80:15:4b:88:6c:97:
eb:eb:e8:3a:78:66:04:80:5e:3b:a2:a9:5c:00:d2:
20:21:fa:73:3f:34:0e:9c:dc:fe:a4:27:d3:44:83:
1b:df:a2:94:ed:41:1c:a8:fb:1f:0e:27:56:21:73:
a0:39:bd:63:85:d0:a9:07:38:52:e0:e1:7f:bc:ed:
c0:77:92:38:34:ea:15:b7:01:54:1a:6b:8f:3b:b6:
2a:89:c9:92:28:30:d7:7b:12:b4:8a:30:7a:fc:87:
77:7b:70:2d:2d:2f:d4:83:5f:9a:ff:34:24:07:bd:
34:f7:80:0b:c1:4d:15:9f:73:56:97:48:28:ab:5e:
15:4f:39:8c:73:e0:bc:61:53:b0:9d:21:7c:a7:75:
02:68:20:4b:41:00:48:23:4f:63:b3:b8:68:d2:2e:
00:b2:aa:fe:db:89:9d:e2:cc:bb:34:9b:0e:6c:af:
81:17:83:56:64:a5:c0:84:71:cd:bf:ca:0a:61:cb:
3c:80:b9:2d:97:43:e7:77:52:ff:30:d2:96:2d:8a:
1d:19:4b:1c:e7:d1:ad:b3:c7:ea:f1:e1:e7:50:b1:
21:0a:c9:e0:95:9b:fb:9b:05:60:f3:49:6b:b6:b6:
f6:49:c3:5c:97:db:11:0c:56:d6:d9:bd:ae:45:4e:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:78:FB:EA:58:04:1A:C1:22:F2:51:60:D4:C4:8E:8B:E7:7B:A6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lXV4--pYBBrBIvJRYNTEjovne6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:610::/44
Signature Algorithm: sha256WithRSAEncryption
4e:b6:55:27:26:c9:c7:d5:8a:dd:36:b9:3b:45:21:7e:67:03:
ec:56:56:bf:4c:f1:db:42:8e:fb:a9:b0:0a:eb:4e:fc:2f:44:
39:fe:ab:b0:8a:c1:3d:df:b6:cd:d7:41:6a:a5:5b:e8:9e:41:
59:49:d6:38:e0:e8:41:57:a1:4e:6c:42:fe:ef:76:9c:93:b8:
62:bd:93:ba:a5:9d:0c:dd:b8:42:65:9f:a2:8e:5a:f1:be:d0:
bc:29:15:ad:82:d3:40:e2:ce:ae:aa:0f:6f:63:5a:b5:f9:e0:
4c:fc:3e:57:de:62:4b:1b:45:d9:f8:8b:5f:d0:04:7a:dd:35:
05:db:5e:0e:2e:e9:44:b1:0f:4b:f7:da:78:7c:8f:88:70:65:
b6:41:65:42:62:fa:e3:71:f4:c8:71:64:c7:82:c4:10:72:1c:
67:d9:ea:1c:00:c4:6f:fb:f6:80:8c:fc:04:c2:9a:3d:f7:99:
2f:66:29:60:42:ba:0e:92:8e:99:b2:8d:2d:8a:6a:c7:22:a3:
6f:af:23:5b:26:66:53:b4:31:c4:23:80:f6:17:00:8b:8c:2c:
66:7a:f7:d3:b7:f7:c8:9e:0c:51:08:91:1c:42:8c:ff:83:07:
26:1b:f5:b4:22:8e:f7:15:cc:18:d0:db:e8:af:d4:60:6b:34:
4c:6f:33:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYytN2dfQEJUwviyrD6hNLDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMxMjI3MjEzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTc1NzhmYmVhNTgwNDFhYzEyMmYyNTE2MGQ0YzQ4ZThiZTc3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm41OHKts8w+AFUuIbJfr6+g6eGYE
gF47oqlcANIgIfpzPzQOnNz+pCfTRIMb36KU7UEcqPsfDidWIXOgOb1jhdCpBzhS
4OF/vO3Ad5I4NOoVtwFUGmuPO7YqicmSKDDXexK0ijB6/Id3e3AtLS/Ug1+a/zQk
B70094ALwU0Vn3NWl0goq14VTzmMc+C8YVOwnSF8p3UCaCBLQQBII09js7ho0i4A
sqr+24md4sy7NJsObK+BF4NWZKXAhHHNv8oKYcs8gLktl0Pnd1L/MNKWLYodGUsc
59Gts8fq8eHnULEhCsnglZv7mwVg80lrtrb2ScNcl9sRDFbW2b2uRU4n2wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJV1ePvqWAQawSLyUWDUxI6L53umMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvbFhWNC0tcFlCQnJCSXZKUllOVEVqb3ZuZTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAYQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBOtlUnJsnH1YrdNrk7RSF+ZwPsVla/TPHbQo77
qbAK6078L0Q5/quwisE937bN10FqpVvonkFZSdY44OhBV6FObEL+73ack7hivZO6
pZ0M3bhCZZ+ijlrxvtC8KRWtgtNA4s6uqg9vY1q1+eBM/D5X3mJLG0XZ+Itf0AR6
3TUF214OLulEsQ9L99p4fI+IcGW2QWVCYvrjcfTIcWTHgsQQchxn2eocAMRv+/aA
jPwEwpo995kvZilgQroOko6Zso0timrHIqNvryNbJmZTtDHEI4D2FwCLjCxmevfT
t/fIngxRCJEcQoz/gwcmG/W0Io73FcwY0Nvor9RgazRMbzPb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org