Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/aAPl8ThO-KE-h4Vl3fg7-XTrW0E.roa
File: aAPl8ThO-KE-h4Vl3fg7-XTrW0E.roa (raw, json)
Hash identifier: 6m9hOedU3+2+uqPVLOUXC3LoDKgO/UW4jxW/POLUEAs=
Subject key identifier: 68:03:E5:F1:38:4E:F8:A1:3E:87:85:65:DD:F8:3B:F9:74:EB:5B:41
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0188DF2532D789C5E3C2DB27DE7C71272EFA
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/aAPl8ThO-KE-h4Vl3fg7-XTrW0E.roa
Signing time: Wed 21 Jun 2023 18:08:56 +0000
ROA not before: Wed 21 Jun 2023 18:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212722
IP address blocks: 2a10:500::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Jul 2023 15:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:25:32:d7:89:c5:e3:c2:db:27:de:7c:71:27:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jun 21 18:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6803e5f1384ef8a13e878565ddf83bf974eb5b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:38:ea:d8:7a:b6:73:ab:4e:35:37:91:18:
43:05:37:74:97:5f:fd:7c:1d:71:cb:24:b0:26:57:
f5:6e:c6:c2:de:67:a1:c1:cc:33:c4:e1:b7:1b:47:
90:b5:02:da:23:d5:11:54:79:b9:6c:63:e0:74:38:
24:71:04:49:d0:92:4e:c9:37:7a:51:24:ab:c4:03:
92:53:38:2f:e1:d5:42:4d:b1:f3:94:83:91:bd:1b:
eb:62:5c:4c:aa:21:0a:6a:26:ea:42:3f:31:3b:4f:
a5:cf:92:4a:d7:35:49:9a:13:af:99:cd:06:89:c6:
be:7b:5e:1b:4f:18:bb:af:3c:ba:7b:b5:ee:f4:47:
62:e8:c9:be:0b:25:f1:26:0a:73:01:f6:21:b1:5a:
25:8b:d9:9d:73:32:f6:b2:f8:24:84:e8:f3:84:b0:
94:c3:d4:4c:af:48:e6:e7:c1:a9:82:d9:e1:65:19:
b8:3d:f4:59:b0:b7:77:c3:32:c6:f6:fb:8a:60:0d:
29:cb:81:a8:9e:f6:9a:6d:05:ea:b7:c8:fb:2e:b6:
64:fb:f8:f2:53:86:4b:fc:c4:8a:19:8e:fd:44:8f:
41:4b:41:47:57:f4:64:5e:74:66:59:7a:f9:e3:2e:
39:2b:17:9d:78:92:13:3b:44:36:f9:c1:a6:42:7e:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:E5:F1:38:4E:F8:A1:3E:87:85:65:DD:F8:3B:F9:74:EB:5B:41
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/aAPl8ThO-KE-h4Vl3fg7-XTrW0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
Signature Algorithm: sha256WithRSAEncryption
79:26:38:95:ad:fb:c8:1f:90:52:d6:59:2c:b5:c2:3d:a4:4d:
6e:10:5d:c0:65:a9:c7:c2:bd:05:9a:bd:39:d1:f4:c5:da:75:
8d:da:8c:85:7f:10:db:3a:48:26:41:61:6d:8e:e9:5a:9a:e9:
4a:a8:6a:1e:dd:4d:52:3f:87:0b:90:6d:cd:15:29:fa:af:9f:
f7:06:f2:8c:3a:84:7f:aa:b2:76:f3:a3:ab:fb:88:eb:a2:47:
8b:df:20:3e:1c:41:2a:8e:76:6d:27:8a:05:58:59:a4:bd:5c:
8d:fa:c8:d9:e6:96:c9:e0:e8:80:84:f1:49:f1:af:70:85:b6:
96:8d:ea:20:dd:2c:f2:02:ca:93:42:1d:95:fd:91:0f:a9:b3:
3b:b2:15:c1:3d:64:b9:bf:d1:e4:30:50:ac:5b:2d:8a:a9:52:
ba:b3:21:f2:cf:44:43:ff:76:e6:42:a6:05:93:b2:d5:8d:de:
9f:73:c3:01:61:d7:d2:02:68:77:4f:53:64:99:70:76:31:7c:
a1:e4:e5:7f:48:a8:8a:8a:0b:89:fd:bd:70:af:a2:b7:6a:e8:
76:8e:60:24:a9:32:94:77:f8:f8:83:cf:78:50:ab:b4:a3:eb:
7b:b4:fa:3f:fe:3a:13:25:08:2f:80:60:26:4e:00:6d:3b:32:
b2:ef:c9:0f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYjfJTLXicXjwtsn3nxxJy76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjMwNjIxMTgwODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODAzZTVmMTM4NGVmOGExM2U4Nzg1NjVkZGY4M2JmOTc0ZWI1YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vw46th6tnOrTjU3kRhDBTd0l1/9
fB1xyySwJlf1bsbC3mehwcwzxOG3G0eQtQLaI9URVHm5bGPgdDgkcQRJ0JJOyTd6
USSrxAOSUzgv4dVCTbHzlIORvRvrYlxMqiEKaibqQj8xO0+lz5JK1zVJmhOvmc0G
ica+e14bTxi7rzy6e7Xu9Edi6Mm+CyXxJgpzAfYhsVoli9mdczL2svgkhOjzhLCU
w9RMr0jm58GpgtnhZRm4PfRZsLd3wzLG9vuKYA0py4GonvaabQXqt8j7LrZk+/jy
U4ZL/MSKGY79RI9BS0FHV/RkXnRmWXr54y45KxedeJITO0Q2+cGmQn5KSwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGgD5fE4TvihPoeFZd34O/l061tBMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvYUFQbDhUaE8tS0UtaDRWbDNmZzctWFRyVzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhAFADAN
BgkqhkiG9w0BAQsFAAOCAQEAeSY4la37yB+QUtZZLLXCPaRNbhBdwGWpx8K9BZq9
OdH0xdp1jdqMhX8Q2zpIJkFhbY7pWprpSqhqHt1NUj+HC5BtzRUp+q+f9wbyjDqE
f6qydvOjq/uI66JHi98gPhxBKo52bSeKBVhZpL1cjfrI2eaWyeDogITxSfGvcIW2
lo3qIN0s8gLKk0Idlf2RD6mzO7IVwT1kub/R5DBQrFstiqlSurMh8s9EQ/925kKm
BZOy1Y3en3PDAWHX0gJod09TZJlwdjF8oeTlf0ioiooLif29cK+it2rodo5gJKky
lHf4+IPPeFCrtKPre7T6P/46EyUIL4BgJk4AbTsysu/JDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org