Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y-0uUYhqvKgnL3NYOBkj60pGLzs.roa
File: y-0uUYhqvKgnL3NYOBkj60pGLzs.roa (raw, json)
Hash identifier: ZwESck6K5XyGwZ2owEadLNnJoNixd7UONRAgApzZEk0=
Subject key identifier: CB:ED:2E:51:88:6A:BC:A8:27:2F:73:58:38:19:23:EB:4A:46:2F:3B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018853F0B8183F5B3BBD1BB29F3D9330022C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y-0uUYhqvKgnL3NYOBkj60pGLzs.roa
Signing time: Thu 25 May 2023 17:24:24 +0000
ROA not before: Thu 25 May 2023 17:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206125
IP address blocks: 2a12:bec0:8f::/48 maxlen: 48
2a12:bec0:80::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:f0:b8:18:3f:5b:3b:bd:1b:b2:9f:3d:93:30:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 25 17:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbed2e51886abca8272f7358381923eb4a462f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:ad:7b:7f:9c:f1:37:17:fb:2a:6c:07:dc:
fc:65:06:20:b4:af:5d:8f:e8:34:d0:36:67:52:18:
05:5f:71:df:1b:43:fe:1c:86:f2:af:8f:fe:b4:8f:
29:7b:07:32:da:2c:8a:fd:62:c1:dd:db:11:9d:8b:
5e:ab:af:04:c4:9b:cb:d7:74:0b:36:05:16:16:60:
a6:7d:5c:87:74:c7:d5:62:27:44:6d:70:61:e9:04:
13:c2:d1:3b:ab:e0:b5:1f:23:86:bf:4e:69:b1:80:
38:4b:46:c9:8d:4c:c0:12:18:7f:6d:03:8f:24:a3:
be:7d:b7:65:62:77:b0:82:2b:55:63:21:d2:c5:99:
7d:9d:97:fc:d7:55:8b:14:a4:6d:a1:ca:4f:22:8b:
f9:bd:57:3b:13:cc:bc:21:4f:b3:05:e0:8c:e3:a8:
de:54:97:b6:5e:05:ac:3c:3e:26:ef:07:ed:ec:8d:
b7:34:b9:43:ba:83:2b:38:02:e5:67:48:78:8e:f9:
05:a0:bc:7a:53:d7:43:cd:2f:a3:2f:da:c4:df:12:
2a:e0:a8:35:64:56:db:02:e6:8b:81:34:a7:ac:60:
3d:72:97:67:cf:05:dd:00:5d:98:68:97:f4:98:d5:
39:2a:31:0c:27:d7:b5:3a:57:0e:19:04:01:2f:36:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:2E:51:88:6A:BC:A8:27:2F:73:58:38:19:23:EB:4A:46:2F:3B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y-0uUYhqvKgnL3NYOBkj60pGLzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:80::/44
Signature Algorithm: sha256WithRSAEncryption
4e:b7:62:c1:c8:8e:d5:1c:15:6c:6e:b2:be:58:29:f2:a5:21:
c2:4c:c0:ae:88:7d:5a:a1:0c:b0:54:ec:69:ca:c4:a9:7c:c7:
68:f7:e9:10:f1:4b:69:67:43:52:c5:dc:49:6d:9b:91:e3:4e:
bd:e6:6f:ea:ec:1c:56:e2:df:eb:d2:ae:69:15:a1:b4:59:23:
aa:1c:70:c4:d7:0e:a4:63:93:f7:eb:bc:87:9f:d8:d8:06:52:
34:3d:62:48:3c:f3:52:92:47:e3:f5:00:a7:e9:ff:29:29:1d:
7b:86:9f:18:b8:ce:34:62:de:ed:42:ab:ff:98:86:72:bb:81:
02:92:25:eb:92:53:f3:a1:a5:99:b9:f9:fa:e2:27:74:61:28:
d8:0a:83:b9:b4:f3:03:65:16:55:69:b2:6e:87:13:a5:1b:34:
2b:e3:81:f2:c4:c1:39:93:9a:47:1c:4d:7b:68:c9:00:85:70:
a4:7f:15:d9:1a:9e:7b:b9:c4:8c:92:9d:0e:cc:0e:e2:00:59:
81:32:fa:6c:86:87:5e:05:76:db:e2:d5:7e:01:dc:d1:f5:da:
c4:6d:04:77:3a:8b:96:76:45:e6:b4:90:7a:88:5c:0f:7d:c7:
c2:f6:4a:21:ae:b4:1e:21:4f:3d:b5:fb:03:17:d7:6c:d4:f1:
39:55:93:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYhT8LgYP1s7vRuynz2TMAIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNTI1MTcyNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmVkMmU1MTg4NmFiY2E4MjcyZjczNTgzODE5MjNlYjRhNDYyZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygWte3+c8TcX+ypsB9z8ZQYgtK9d
j+g00DZnUhgFX3HfG0P+HIbyr4/+tI8pewcy2iyK/WLB3dsRnYteq68ExJvL13QL
NgUWFmCmfVyHdMfVYidEbXBh6QQTwtE7q+C1HyOGv05psYA4S0bJjUzAEhh/bQOP
JKO+fbdlYnewgitVYyHSxZl9nZf811WLFKRtocpPIov5vVc7E8y8IU+zBeCM46je
VJe2XgWsPD4m7wft7I23NLlDuoMrOALlZ0h4jvkFoLx6U9dDzS+jL9rE3xIq4Kg1
ZFbbAuaLgTSnrGA9cpdnzwXdAF2YaJf0mNU5KjEMJ9e1OlcOGQQBLzbbewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMvtLlGIaryoJy9zWDgZI+tKRi87MB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEveS0wdVVZaHF2S2duTDNOWU9Ca2o2MHBHTHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wACA
MA0GCSqGSIb3DQEBCwUAA4IBAQBOt2LByI7VHBVsbrK+WCnypSHCTMCuiH1aoQyw
VOxpysSpfMdo9+kQ8UtpZ0NSxdxJbZuR40695m/q7BxW4t/r0q5pFaG0WSOqHHDE
1w6kY5P367yHn9jYBlI0PWJIPPNSkkfj9QCn6f8pKR17hp8YuM40Yt7tQqv/mIZy
u4ECkiXrklPzoaWZufn64id0YSjYCoO5tPMDZRZVabJuhxOlGzQr44HyxME5k5pH
HE17aMkAhXCkfxXZGp57ucSMkp0OzA7iAFmBMvpshodeBXbb4tV+AdzR9drEbQR3
OouWdkXmtJB6iFwPfcfC9kohrrQeIU89tfsDF9ds1PE5VZOx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org