Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/7YYkhU1wqeYaW6jhT1NuY6N-Bes.roa
File: 7YYkhU1wqeYaW6jhT1NuY6N-Bes.roa (raw, json)
Hash identifier: sU/ZFgBnrd+s0+ov19pmdGbcMqa10LD6lnSYSeYyGLY=
Subject key identifier: ED:86:24:85:4D:70:A9:E6:1A:5B:A8:E1:4F:53:6E:63:A3:7E:05:EB
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CA2BFE2F05238D18D55F8645A5F1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/7YYkhU1wqeYaW6jhT1NuY6N-Bes.roa
Signing time: Mon 02 Jan 2023 09:37:25 +0000
ROA not before: Mon 02 Jan 2023 09:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30900
IP address blocks: 2a11:840:27::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ca:2b:fe:2f:05:23:8d:18:d5:5f:86:45:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed8624854d70a9e61a5ba8e14f536e63a37e05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:7b:51:92:9a:98:30:4a:4e:5a:e9:81:d6:
ed:fc:4b:32:f0:35:45:4a:70:ae:bf:df:43:52:58:
0d:e2:6a:6a:26:84:71:a1:a3:a1:49:5c:86:61:14:
9e:a0:79:a9:4f:37:6f:49:aa:de:3f:1a:c0:f6:e4:
06:31:be:fe:c6:13:b9:18:b0:57:96:0e:5a:92:09:
3e:f5:6c:8a:e8:29:a3:1c:8d:ee:c0:85:57:45:7d:
52:ef:8d:fd:2a:4b:18:20:7a:d7:e7:c4:b4:d5:62:
53:05:bb:1a:aa:0a:7f:5b:32:73:a4:5e:14:75:e9:
de:f8:96:07:77:1a:57:af:16:7d:2c:cf:cf:32:4b:
a1:40:53:13:d0:54:ea:18:4b:26:26:d6:70:d4:0e:
19:5f:d6:42:c6:ba:a5:66:78:18:3f:90:22:e3:78:
27:54:5b:b5:37:6b:52:ac:73:71:91:18:c8:9f:6c:
f4:3a:57:fe:0c:e6:ee:ca:7d:2e:78:51:50:41:fb:
fa:48:41:e9:90:14:cd:af:b6:3b:59:ff:75:a0:7c:
d5:c8:be:a5:bc:5d:42:42:d4:d5:a0:29:2d:89:ef:
a4:6d:fb:b4:08:01:86:94:c1:9c:e2:fa:0b:a8:a3:
d6:e0:9b:21:ae:43:84:a3:26:ff:01:6c:43:d6:6d:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:24:85:4D:70:A9:E6:1A:5B:A8:E1:4F:53:6E:63:A3:7E:05:EB
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/7YYkhU1wqeYaW6jhT1NuY6N-Bes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:27::/48
Signature Algorithm: sha256WithRSAEncryption
25:03:e9:80:59:d1:21:4a:73:8e:d6:5a:03:ec:46:01:64:1e:
94:d3:f0:57:f7:1e:08:99:dc:fa:4c:1d:cc:62:fc:15:55:2c:
1a:70:fb:d2:c2:7b:b2:8e:cd:aa:ec:fc:0f:bd:e5:0e:a1:5c:
c0:b9:1d:a5:1d:6b:91:29:ba:5f:03:7f:a5:3b:31:5a:02:76:
1d:a3:04:cd:0f:ff:2e:05:d2:09:b8:02:a1:74:63:97:27:4e:
a2:db:de:a4:03:4c:59:df:f6:ab:14:22:24:08:4e:42:ce:47:
71:9b:52:08:11:59:4a:4e:c3:08:31:d2:b8:15:d7:25:69:a5:
9c:2a:46:ee:8e:a3:a1:9a:ee:70:36:12:51:31:1a:2f:fb:34:
9c:bc:d9:32:f0:aa:73:22:04:b9:af:60:96:64:43:2b:18:aa:
11:64:2b:3a:46:0f:cb:8b:1c:cb:bc:ca:d2:11:83:22:4c:7c:
93:4c:96:4a:a0:94:b4:95:11:25:1a:68:7d:b6:dd:52:b1:e0:
9d:01:f3:a6:17:ed:31:82:ce:f1:d8:d4:42:b4:32:9b:63:8a:
e4:af:2d:66:b7:06:b7:e2:f4:48:17:22:b8:db:22:01:a1:5d:
ed:73:d7:31:84:d9:7f:31:ea:36:75:84:bd:76:99:7e:e1:6a:
36:28:dc:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVx18or/i8FI40Y1V+GRaXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg2MjQ4NTRkNzBhOWU2MWE1YmE4ZTE0ZjUzNmU2M2EzN2UwNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/17UZKamDBKTlrpgdbt/Esy8DVF
SnCuv99DUlgN4mpqJoRxoaOhSVyGYRSeoHmpTzdvSarePxrA9uQGMb7+xhO5GLBX
lg5akgk+9WyK6CmjHI3uwIVXRX1S7439KksYIHrX58S01WJTBbsaqgp/WzJzpF4U
dene+JYHdxpXrxZ9LM/PMkuhQFMT0FTqGEsmJtZw1A4ZX9ZCxrqlZngYP5Ai43gn
VFu1N2tSrHNxkRjIn2z0Olf+DObuyn0ueFFQQfv6SEHpkBTNr7Y7Wf91oHzVyL6l
vF1CQtTVoCktie+kbfu0CAGGlMGc4voLqKPW4JshrkOEoyb/AWxD1m0HNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO2GJIVNcKnmGluo4U9TbmOjfgXrMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvN1lZa2hVMXdxZVlhVzZqaFQxTnVZNk4tQmVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAn
MA0GCSqGSIb3DQEBCwUAA4IBAQAlA+mAWdEhSnOO1loD7EYBZB6U0/BX9x4Imdz6
TB3MYvwVVSwacPvSwnuyjs2q7PwPveUOoVzAuR2lHWuRKbpfA3+lOzFaAnYdowTN
D/8uBdIJuAKhdGOXJ06i296kA0xZ3/arFCIkCE5Czkdxm1IIEVlKTsMIMdK4Fdcl
aaWcKkbujqOhmu5wNhJRMRov+zScvNky8KpzIgS5r2CWZEMrGKoRZCs6Rg/LixzL
vMrSEYMiTHyTTJZKoJS0lRElGmh9tt1SseCdAfOmF+0xgs7x2NRCtDKbY4rkry1m
twa34vRIFyK42yIBoV3tc9cxhNl/Meo2dYS9dpl+4Wo2KNxe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org