Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/3edPTL1_Q93dAxStdQJo8qjf_to.roa
File: 3edPTL1_Q93dAxStdQJo8qjf_to.roa (raw, json)
Hash identifier: hnl9immGGCLR1Z0sW0RdYuVHPlARrp3XFhWLD230OM8=
Subject key identifier: DD:E7:4F:4C:BD:7F:43:DD:DD:03:14:AD:75:02:68:F2:A8:DF:FE:DA
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 018CCA2A09436868B30CAD1591A5BE58BAA1
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/3edPTL1_Q93dAxStdQJo8qjf_to.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60939
IP address blocks: 2a12:c044::/30 maxlen: 30
2a12:c040::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 18 Mar 2024 09:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:09:43:68:68:b3:0c:ad:15:91:a5:be:58:ba:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dde74f4cbd7f43dddd0314ad750268f2a8dffeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:d4:ba:33:e3:83:35:56:b9:0d:e3:f8:61:
46:83:d7:b9:1a:e2:d2:1d:e0:88:38:c8:c7:0f:29:
bd:22:00:ee:eb:40:b3:f2:09:07:cc:ba:ea:41:f3:
0f:56:e6:0d:8c:f3:b0:04:e1:5f:f2:76:f5:ce:f1:
2b:22:5e:de:07:6c:1b:c8:79:83:7e:9d:68:0a:8f:
0f:1e:56:71:51:f9:54:22:f5:2c:ad:3a:b0:09:d2:
4c:94:3b:0f:de:96:63:e4:bf:ba:a7:7d:0f:4f:50:
52:02:21:83:d8:aa:18:0c:8f:0d:12:e6:01:a5:76:
62:21:92:24:53:b5:3f:a3:12:4e:1a:b1:93:3e:7b:
a0:8d:8d:39:8b:ab:25:e8:56:04:e1:a8:5a:35:87:
4e:2f:79:81:ca:38:20:2d:49:4d:14:e5:c7:37:24:
33:32:88:1f:d9:c2:c1:d1:75:cd:61:4c:11:df:c7:
be:a3:cb:ad:a2:6d:8c:2a:bc:ca:2d:48:0e:da:fd:
4a:e6:08:7a:98:8c:c4:22:66:66:05:29:01:5e:10:
f9:f2:4d:27:81:86:8e:07:d0:f8:dd:bb:00:a7:54:
4c:c5:4a:33:a8:53:0e:0e:00:af:16:2e:82:b4:d6:
da:36:29:bd:67:eb:62:eb:76:e3:94:17:34:cb:74:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:4F:4C:BD:7F:43:DD:DD:03:14:AD:75:02:68:F2:A8:DF:FE:DA
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/3edPTL1_Q93dAxStdQJo8qjf_to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c040::/29
Signature Algorithm: sha256WithRSAEncryption
52:54:7e:05:8f:ce:dd:d6:14:76:fb:29:93:95:4f:a4:b7:80:
85:fa:72:48:45:7d:b9:ed:27:44:39:d2:89:79:9d:c0:87:49:
52:4b:4e:9f:53:e2:0c:fd:d6:81:8e:e1:2b:3f:7d:29:af:d4:
85:cd:e1:f0:2f:4d:ff:bf:5f:44:22:8e:ee:12:58:3a:32:b7:
ee:70:6c:6b:3e:1d:bb:07:0e:c5:83:7b:0c:ab:d7:e0:1f:f4:
82:d1:84:7e:b7:c2:3d:f9:62:ba:c2:2f:ff:c5:9b:1a:f5:b4:
f0:bf:85:fb:5d:a6:b6:a0:89:8b:1f:8d:2e:76:f0:d4:32:c4:
ca:d0:86:4a:b5:b5:54:4f:46:08:68:f1:29:55:87:8c:d9:2d:
35:87:84:dd:5d:40:33:a4:9c:15:65:72:02:31:2a:0a:1e:89:
b0:31:b7:b0:6b:d3:d5:1b:6f:33:9d:20:15:c1:8f:08:f5:45:
a0:8f:10:4e:65:dc:4b:62:2c:da:de:55:f4:16:54:10:91:54:
04:55:1d:f7:cb:63:22:2d:bb:55:15:b6:87:f2:26:50:40:ce:
62:46:5a:e2:64:ad:9f:0f:73:0f:8e:ef:09:21:d5:03:d8:12:
c4:7c:50:bb:7e:2b:0d:37:f2:31:6d:5f:ea:84:45:f0:4b:66:
78:f2:70:6f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzKKglDaGizDK0VkaW+WLqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTMwNGJhMzRiNjFhMTVlMzc5N2ZmZDRkMWFlOGMyMThj
MWM3YmYwHhcNMjQwMTAyMTIzMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGU3NGY0Y2JkN2Y0M2RkZGQwMzE0YWQ3NTAyNjhmMmE4ZGZmZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1XUujPjgzVWuQ3j+GFGg9e5GuLS
HeCIOMjHDym9IgDu60Cz8gkHzLrqQfMPVuYNjPOwBOFf8nb1zvErIl7eB2wbyHmD
fp1oCo8PHlZxUflUIvUsrTqwCdJMlDsP3pZj5L+6p30PT1BSAiGD2KoYDI8NEuYB
pXZiIZIkU7U/oxJOGrGTPnugjY05i6sl6FYE4ahaNYdOL3mByjggLUlNFOXHNyQz
Mogf2cLB0XXNYUwR38e+o8utom2MKrzKLUgO2v1K5gh6mIzEImZmBSkBXhD58k0n
gYaOB9D43bsAp1RMxUozqFMODgCvFi6CtNbaNim9Z+ti63bjlBc0y3T8SwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN3nT0y9f0Pd3QMUrXUCaPKo3/7aMB8GA1UdIwQY
MBaAFHmjBLo0thoV43l//U0a6MIYwce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYt
OTlhMGQyOWJhNTYzLzEvM2VkUFRMMV9ROTNkQXhTdGRRSm84cWpmX3RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYtOTlhMGQyOWJhNTYz
LzEvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAUlR+BY/O3dYUdvspk5VPpLeAhfpySEV9ue0nRDnS
iXmdwIdJUktOn1PiDP3WgY7hKz99Ka/Uhc3h8C9N/79fRCKO7hJYOjK37nBsaz4d
uwcOxYN7DKvX4B/0gtGEfrfCPfliusIv/8WbGvW08L+F+12mtqCJix+NLnbw1DLE
ytCGSrW1VE9GCGjxKVWHjNktNYeE3V1AM6ScFWVyAjEqCh6JsDG3sGvT1RtvM50g
FcGPCPVFoI8QTmXcS2Is2t5V9BZUEJFUBFUd98tjIi27VRW2h/ImUEDOYkZa4mSt
nw9zD47vCSHVA9gSxHxQu34rDTfyMW1f6oRF8EtmePJwbw==
-----END CERTIFICATE-----
Generated at Mon Mar 18 11:50:12 2024 by rpki-client on console-fra.rpki-client.org