Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/5T8h03VBTA7KoQs9wRJG8AK_fk4.roa
File: 5T8h03VBTA7KoQs9wRJG8AK_fk4.roa (raw, json)
Hash identifier: mbfAYvygvRIs9mt2JH6cXGKK5DiQ4TUbjIgY1C+stB8=
Subject key identifier: E5:3F:21:D3:75:41:4C:0E:CA:A1:0B:3D:C1:12:46:F0:02:BF:7E:4E
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 018944F19A167C540D9CD56FBC16100B0EF9
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/5T8h03VBTA7KoQs9wRJG8AK_fk4.roa
Signing time: Tue 11 Jul 2023 12:33:51 +0000
ROA not before: Tue 11 Jul 2023 12:33:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207592
IP address blocks: 2a02:d480:700::/42 maxlen: 42
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:f1:9a:16:7c:54:0d:9c:d5:6f:bc:16:10:0b:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Jul 11 12:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53f21d375414c0ecaa10b3dc11246f002bf7e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:50:32:96:6b:f3:70:16:53:41:05:50:02:
47:d7:9f:9c:d3:20:87:0a:51:87:48:d7:2a:9a:e3:
25:78:4c:41:75:56:04:26:43:b3:56:18:22:34:b5:
cf:3e:b9:d8:26:4c:9d:f1:80:14:e2:50:86:b9:42:
14:f2:e8:20:ad:19:39:a2:09:ac:10:c6:3b:70:6b:
89:6b:af:99:fc:2d:7b:fe:1f:77:ad:a5:14:13:f9:
2e:11:c9:43:50:11:32:75:c9:fa:64:68:4c:19:fe:
65:09:63:97:a6:97:a2:7e:14:7c:ac:03:bf:a1:17:
90:f6:42:d1:ba:94:a9:02:a2:0d:ac:47:56:8e:4b:
a0:13:d8:76:b9:d3:84:3e:fc:c2:ac:49:64:4c:88:
42:48:d8:5f:7a:46:98:d5:b7:d2:40:44:52:af:c4:
27:ed:97:c1:0e:4f:50:32:1a:2c:16:45:a5:ef:a6:
c3:48:41:40:54:15:25:d4:4e:cf:7e:f0:21:07:e3:
31:91:db:bf:b2:cc:c6:e7:18:9b:13:77:f3:7f:ce:
04:b8:96:78:0c:df:c6:c5:96:fd:07:3a:ea:4e:0b:
69:d1:7c:80:60:da:ac:a4:1f:a0:6f:37:21:49:cf:
0a:b7:86:8b:e7:4d:eb:fd:76:37:4f:48:ad:9b:b3:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3F:21:D3:75:41:4C:0E:CA:A1:0B:3D:C1:12:46:F0:02:BF:7E:4E
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/5T8h03VBTA7KoQs9wRJG8AK_fk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d480:700::/42
Signature Algorithm: sha256WithRSAEncryption
98:77:da:e4:f7:91:57:58:0a:d9:cd:28:0c:64:62:21:80:e9:
5e:07:f3:99:d1:cd:08:9d:e5:ce:fc:cf:9b:a6:8f:d3:3c:2c:
da:c2:70:08:95:2f:79:08:53:30:6b:4f:b3:2b:19:68:b1:89:
46:67:32:96:f2:cd:2c:4c:7e:c3:a4:1f:65:5a:e3:2e:95:de:
6d:ec:4e:59:18:8c:b3:63:99:68:01:b6:99:f2:8a:da:2c:38:
8f:e7:de:d9:f1:f1:22:e5:2b:e1:d7:63:62:57:e9:23:ea:82:
73:13:57:f4:bf:64:41:4f:fd:65:4f:3c:d3:aa:cb:7a:62:90:
63:ab:ae:76:c6:81:9b:0b:0a:16:a9:fe:68:ae:90:3d:91:df:
06:d7:00:8a:19:5a:f0:2c:8e:53:35:d2:4c:52:59:46:26:af:
d2:04:76:76:24:2b:de:0e:fa:61:0d:e3:3f:d9:29:d8:b2:a7:
80:03:61:35:23:f9:32:35:1e:02:da:6f:00:4d:f1:5f:32:0b:
35:78:bb:07:5d:f7:83:3a:14:75:f1:e0:7b:c7:46:af:d5:f4:
a0:df:7f:0d:8b:b5:c1:9e:7e:2a:eb:72:82:a8:56:3f:93:c0:
b6:f6:b6:74:2e:f8:54:1c:57:b3:23:80:58:84:64:36:14:c2:
44:0c:c6:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYlE8ZoWfFQNnNVvvBYQCw75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx
ZDYyNDQwHhcNMjMwNzExMTIzMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTNmMjFkMzc1NDE0YzBlY2FhMTBiM2RjMTEyNDZmMDAyYmY3ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ZQMpZr83AWU0EFUAJH15+c0yCH
ClGHSNcqmuMleExBdVYEJkOzVhgiNLXPPrnYJkyd8YAU4lCGuUIU8uggrRk5ogms
EMY7cGuJa6+Z/C17/h93raUUE/kuEclDUBEydcn6ZGhMGf5lCWOXppeifhR8rAO/
oReQ9kLRupSpAqINrEdWjkugE9h2udOEPvzCrElkTIhCSNhfekaY1bfSQERSr8Qn
7ZfBDk9QMhosFkWl76bDSEFAVBUl1E7PfvAhB+Mxkdu/sszG5xibE3fzf84EuJZ4
DN/GxZb9BzrqTgtp0XyAYNqspB+gbzchSc8Kt4aL503r/XY3T0itm7OkwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOU/IdN1QUwOyqELPcESRvACv35OMB8GA1UdIwQY
MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt
NTBjMTZiZGQ1YzI0LzEvNVQ4aDAzVkJUQTdLb1FzOXdSSkc4QUtfZms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0
LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKgLUgAcA
MA0GCSqGSIb3DQEBCwUAA4IBAQCYd9rk95FXWArZzSgMZGIhgOleB/OZ0c0IneXO
/M+bpo/TPCzawnAIlS95CFMwa0+zKxlosYlGZzKW8s0sTH7DpB9lWuMuld5t7E5Z
GIyzY5loAbaZ8oraLDiP597Z8fEi5Svh12NiV+kj6oJzE1f0v2RBT/1lTzzTqst6
YpBjq652xoGbCwoWqf5orpA9kd8G1wCKGVrwLI5TNdJMUllGJq/SBHZ2JCveDvph
DeM/2SnYsqeAA2E1I/kyNR4C2m8ATfFfMgs1eLsHXfeDOhR18eB7x0av1fSg338N
i7XBnn4q63KCqFY/k8C29rZ0LvhUHFezI4BYhGQ2FMJEDMYf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:20 2024 by rpki-client on console-ams.rpki-client.org