Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/Xp0T3CPS5kmGYf5JmRt6GTeCdJA.roa
File: Xp0T3CPS5kmGYf5JmRt6GTeCdJA.roa (raw, json)
Hash identifier: 5bFufQlAvLfGq8r9XX8HrFxWMtuu95L6Q/V3vo82bnc=
Subject key identifier: 5E:9D:13:DC:23:D2:E6:49:86:61:FE:49:99:1B:7A:19:37:82:74:90
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 01856CAEFF32FAF839D70F391FE02736557B
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/Xp0T3CPS5kmGYf5JmRt6GTeCdJA.roa
Signing time: Sun 01 Jan 2023 09:34:45 +0000
ROA not before: Sun 01 Jan 2023 09:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137922
IP address blocks: 2a03:b8c0:27::/48 maxlen: 48
2a03:b8c0:17::/48 maxlen: 48
2a03:b8c0:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Apr 2023 13:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:ff:32:fa:f8:39:d7:0f:39:1f:e0:27:36:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 1 09:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e9d13dc23d2e6498661fe49991b7a1937827490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:28:58:87:09:e8:8f:a9:e6:1c:35:96:9a:
35:5f:41:53:d3:ad:0e:df:36:2a:d5:95:07:3f:27:
a8:41:07:1a:8c:e4:62:5c:8f:ac:c1:da:03:8b:7b:
dc:77:9d:bd:37:93:0f:8a:54:18:9f:17:e0:5a:8b:
2d:37:a0:68:7b:d6:e5:fc:3e:fc:16:13:e2:d6:f8:
78:45:a0:d3:7d:b8:6e:c0:f4:6d:10:23:6e:4d:98:
92:d5:92:f1:27:65:7a:0d:7f:3b:94:ca:5d:ee:6e:
dc:c9:d8:fa:b5:d6:fe:19:f2:c6:bc:b4:30:bb:6d:
60:2c:93:c2:c0:f6:ac:72:af:10:e9:2c:5a:39:01:
77:8b:e4:e9:a0:fc:7c:ed:97:01:4b:24:26:85:ef:
8c:35:09:fb:50:b8:b2:47:10:93:2f:fc:fd:53:8b:
e8:24:32:d7:af:6b:b3:e4:4c:86:f4:61:8a:8e:5b:
49:f9:12:b1:20:6d:bd:8e:96:d7:7d:59:83:bf:0d:
69:16:e7:e2:89:5a:85:8b:05:cb:18:a7:a5:78:12:
19:29:24:7e:d5:7c:90:fb:6f:bc:9c:9c:43:fe:cb:
91:fb:a7:ff:4a:fd:91:1e:d8:8d:9f:95:24:69:a9:
eb:6e:49:0d:3a:bc:ee:79:ec:db:6a:ff:8c:c6:e6:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:13:DC:23:D2:E6:49:86:61:FE:49:99:1B:7A:19:37:82:74:90
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/Xp0T3CPS5kmGYf5JmRt6GTeCdJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:17::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:27::/48
Signature Algorithm: sha256WithRSAEncryption
5a:82:a8:3f:9d:62:1e:12:11:05:17:5e:71:04:40:5e:fc:17:
b2:c8:c9:0c:14:00:97:1c:ef:f3:01:b4:65:05:56:ff:40:7e:
fd:df:52:da:fe:0c:b0:6f:20:66:99:9e:74:c8:d6:31:53:fc:
83:1f:08:9c:3e:c0:f4:c6:c3:5a:22:12:14:a3:40:0a:9e:4f:
bc:cf:24:04:92:92:9f:5d:d9:cb:b4:0a:b9:a2:fe:71:17:7b:
50:df:cc:b1:d3:e5:c5:c5:5b:58:db:c5:fe:ee:57:f3:ca:cb:
cf:77:39:fa:f3:20:de:8f:60:fd:f2:5c:35:f8:68:29:e2:82:
a1:ec:7b:86:45:b3:a5:17:22:64:f5:5d:fb:67:20:db:15:7f:
32:89:ec:cd:df:25:17:4a:93:cc:b8:a1:7b:ce:14:da:98:b3:
46:be:df:1c:dc:3a:72:13:a3:5b:29:8e:b3:4c:a8:5d:89:58:
04:99:0e:26:00:d1:49:14:6e:83:83:62:f4:30:42:77:b8:77:
04:c1:53:df:0a:46:6b:06:2d:2f:10:46:78:ba:bd:c8:24:bc:
6d:23:98:23:d7:9a:41:26:c8:c3:da:02:6a:3d:32:cb:08:43:
2a:37:c3:40:6e:03:ca:47:88:10:4e:32:6a:57:68:3b:11:50:
7a:2b:23:08
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVsrv8y+vg51w85H+AnNlV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjMwMTAxMDkzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTlkMTNkYzIzZDJlNjQ5ODY2MWZlNDk5OTFiN2ExOTM3ODI3NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku8oWIcJ6I+p5hw1lpo1X0FT060O
3zYq1ZUHPyeoQQcajORiXI+swdoDi3vcd529N5MPilQYnxfgWostN6Boe9bl/D78
FhPi1vh4RaDTfbhuwPRtECNuTZiS1ZLxJ2V6DX87lMpd7m7cydj6tdb+GfLGvLQw
u21gLJPCwPascq8Q6SxaOQF3i+TpoPx87ZcBSyQmhe+MNQn7ULiyRxCTL/z9U4vo
JDLXr2uz5EyG9GGKjltJ+RKxIG29jpbXfVmDvw1pFufiiVqFiwXLGKeleBIZKSR+
1XyQ+2+8nJxD/suR+6f/Sv2RHtiNn5UkaanrbkkNOrzueezbav+MxuY/FQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFF6dE9wj0uZJhmH+SZkbehk3gnSQMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvWHAwVDNDUFM1a21HWWY1Sm1SdDZHVGVDZEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqA7jA
ABcDBwAqA7jAABgDBwAqA7jAACcwDQYJKoZIhvcNAQELBQADggEBAFqCqD+dYh4S
EQUXXnEEQF78F7LIyQwUAJcc7/MBtGUFVv9Afv3fUtr+DLBvIGaZnnTI1jFT/IMf
CJw+wPTGw1oiEhSjQAqeT7zPJASSkp9d2cu0Crmi/nEXe1DfzLHT5cXFW1jbxf7u
V/PKy893OfrzIN6PYP3yXDX4aCnigqHse4ZFs6UXImT1XftnINsVfzKJ7M3fJRdK
k8y4oXvOFNqYs0a+3xzcOnITo1spjrNMqF2JWASZDiYA0UkUboODYvQwQne4dwTB
U98KRmsGLS8QRni6vcgkvG0jmCPXmkEmyMPaAmo9MssIQyo3w0BuA8pHiBBOMmpX
aDsRUHorIwg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org