Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/8zC6RhgGw1d0CMIFsFJ-WRQmFco.roa
File: 8zC6RhgGw1d0CMIFsFJ-WRQmFco.roa (raw, json)
Hash identifier: buPpKb6m3JiiWsEI1Z6NXzIyvTOgnG9gkcrabmjWSlc=
Subject key identifier: F3:30:BA:46:18:06:C3:57:74:08:C2:05:B0:52:7E:59:14:26:15:CA
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 018A7F0B766CD744870DDBB01B66C5D02791
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/8zC6RhgGw1d0CMIFsFJ-WRQmFco.roa
Signing time: Sun 10 Sep 2023 12:22:52 +0000
ROA not before: Sun 10 Sep 2023 12:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53358
IP address blocks: 2a12:c044::/30 maxlen: 30
2a12:c040::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:0b:76:6c:d7:44:87:0d:db:b0:1b:66:c5:d0:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Sep 10 12:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f330ba461806c3577408c205b0527e59142615ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:21:ac:72:38:d2:7b:81:10:b4:e4:a1:ba:
be:49:29:70:e0:01:b9:55:3d:93:e5:24:52:e9:ed:
32:0e:5f:89:fa:d1:35:f0:e6:83:c6:3b:d8:4d:15:
84:3a:9c:a0:97:ab:82:62:a4:d5:a6:02:2a:41:99:
79:7b:a2:b4:e6:eb:18:cc:d6:11:16:5a:87:6c:e2:
68:fe:16:c9:4b:77:b5:7a:09:20:f5:af:4d:75:8b:
c6:5e:61:e7:03:0a:ca:3b:32:80:7f:8d:cc:b1:6f:
fa:46:fb:38:15:1c:ee:92:02:fa:71:5d:96:e8:d1:
8f:cc:ed:18:04:06:43:d3:80:a8:51:80:18:23:d4:
b6:94:8b:31:7d:fa:07:61:91:04:27:d6:0f:08:6c:
2c:9e:2c:26:34:83:66:29:c9:91:c4:69:ec:27:60:
71:2f:21:2a:b5:83:3d:27:a4:43:09:e6:40:d1:b8:
27:4b:3d:e4:71:53:b8:2e:51:ed:66:c5:9a:a7:86:
f2:2a:c5:7e:c0:88:31:a8:27:42:c0:df:1a:52:9b:
88:bc:26:2c:35:30:59:aa:97:a1:3c:72:10:d5:c6:
86:8d:2c:43:1f:4e:79:25:3e:fb:d5:82:1b:17:87:
dd:39:65:3f:43:63:c7:0f:5f:3a:7f:6f:da:2a:1a:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:BA:46:18:06:C3:57:74:08:C2:05:B0:52:7E:59:14:26:15:CA
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/8zC6RhgGw1d0CMIFsFJ-WRQmFco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c040::/29
Signature Algorithm: sha256WithRSAEncryption
3f:d6:99:9d:e9:f9:b2:3d:7d:20:58:45:e2:0d:df:3e:9e:74:
33:77:c5:d3:96:69:65:c5:3d:b4:fd:f2:58:37:6b:b2:c3:0b:
2a:2b:e0:b1:19:3b:f7:a5:83:db:93:cc:bb:9d:36:21:42:12:
47:d1:c0:7c:1b:98:fb:cb:60:52:ac:68:a6:fc:35:d5:18:3b:
e9:f9:06:d0:46:df:13:67:bb:ee:ae:e1:51:38:b1:15:32:f7:
b9:2e:43:35:fe:6e:a6:d5:01:07:e9:e1:47:a4:86:a2:73:17:
3c:10:5a:1d:cb:c6:5f:86:89:71:5e:de:98:6e:a6:66:bd:3c:
40:ff:a0:1d:99:a6:69:36:a1:a6:3b:a8:e0:b6:59:7f:f8:ab:
c5:48:96:55:e9:a3:a6:28:55:3f:b2:6c:9c:7f:bd:63:13:25:
23:a5:9d:00:f6:03:71:08:69:e3:41:57:48:82:2b:7b:1e:3f:
16:97:3f:7f:38:f0:54:19:b3:b9:37:54:7e:a7:c4:cd:79:22:
a3:8a:c2:d0:3b:8f:ca:83:99:07:5d:eb:5b:27:46:98:db:18:
d8:2b:4a:f0:85:4c:73:83:43:a3:57:dd:71:e8:52:9c:2e:4d:
71:98:4f:8b:ed:37:4a:7a:82:94:fd:f9:38:fe:e2:7a:84:5c:
ef:6c:f9:7e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYp/C3Zs10SHDduwG2bF0CeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTMwNGJhMzRiNjFhMTVlMzc5N2ZmZDRkMWFlOGMyMThj
MWM3YmYwHhcNMjMwOTEwMTIyMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzMwYmE0NjE4MDZjMzU3NzQwOGMyMDViMDUyN2U1OTE0MjYxNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliYhrHI40nuBELTkobq+SSlw4AG5
VT2T5SRS6e0yDl+J+tE18OaDxjvYTRWEOpygl6uCYqTVpgIqQZl5e6K05usYzNYR
FlqHbOJo/hbJS3e1egkg9a9NdYvGXmHnAwrKOzKAf43MsW/6Rvs4FRzukgL6cV2W
6NGPzO0YBAZD04CoUYAYI9S2lIsxffoHYZEEJ9YPCGwsniwmNINmKcmRxGnsJ2Bx
LyEqtYM9J6RDCeZA0bgnSz3kcVO4LlHtZsWap4byKsV+wIgxqCdCwN8aUpuIvCYs
NTBZqpehPHIQ1caGjSxDH055JT771YIbF4fdOWU/Q2PHD186f2/aKhpDZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPMwukYYBsNXdAjCBbBSflkUJhXKMB8GA1UdIwQY
MBaAFHmjBLo0thoV43l//U0a6MIYwce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYt
OTlhMGQyOWJhNTYzLzEvOHpDNlJoZ0d3MWQwQ01JRnNGSi1XUlFtRmNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYtOTlhMGQyOWJhNTYz
LzEvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLAQDAN
BgkqhkiG9w0BAQsFAAOCAQEAP9aZnen5sj19IFhF4g3fPp50M3fF05ZpZcU9tP3y
WDdrssMLKivgsRk796WD25PMu502IUISR9HAfBuY+8tgUqxopvw11Rg76fkG0Ebf
E2e77q7hUTixFTL3uS5DNf5uptUBB+nhR6SGonMXPBBaHcvGX4aJcV7emG6mZr08
QP+gHZmmaTahpjuo4LZZf/irxUiWVemjpihVP7JsnH+9YxMlI6WdAPYDcQhp40FX
SIIrex4/Fpc/fzjwVBmzuTdUfqfEzXkio4rC0DuPyoOZB13rWydGmNsY2CtK8IVM
c4NDo1fdcehSnC5NcZhPi+03SnqClP35OP7ieoRc72z5fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org