Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uAyS0FT3AC_qu4gFlnYRAzf8Esk.roa
File: uAyS0FT3AC_qu4gFlnYRAzf8Esk.roa (raw, json)
Hash identifier: 9n8zuF4ffLLhFlEyactuCXBs32hcvXaP/ngCSD5R8Hw=
Subject key identifier: B8:0C:92:D0:54:F7:00:2F:EA:BB:88:05:96:76:11:03:37:FC:12:C9
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 018A844C56AF0ED641B5DC981F20C25B4EAE
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uAyS0FT3AC_qu4gFlnYRAzf8Esk.roa
Signing time: Mon 11 Sep 2023 12:51:50 +0000
ROA not before: Mon 11 Sep 2023 12:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216321
IP address blocks: 2a13:d8c0::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Sep 2023 16:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:4c:56:af:0e:d6:41:b5:dc:98:1f:20:c2:5b:4e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Sep 11 12:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80c92d054f7002feabb88059676110337fc12c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:75:83:1d:70:52:78:ec:11:6c:dd:42:a8:
08:ac:b4:27:5b:8c:a9:aa:20:60:54:d6:58:a0:3a:
fa:f5:b1:1a:2f:f5:d1:ec:f3:d4:52:40:15:57:2e:
95:2e:89:85:4d:c9:2d:f2:1e:b2:bc:1c:46:58:c8:
bd:e2:d1:c1:70:0c:c3:23:48:80:4c:b5:10:89:12:
4d:69:63:51:63:69:22:b1:ea:5e:7e:20:93:a0:92:
f9:48:4d:73:5b:87:11:31:25:e0:87:4b:5a:cf:ff:
35:32:30:cb:bd:80:41:38:b5:87:80:35:a8:11:96:
89:fe:c0:73:52:7d:96:71:8b:f0:57:f0:d5:a2:6d:
42:86:78:15:b3:7b:25:11:52:64:f0:a9:86:f4:73:
ea:8a:f8:62:b3:58:1e:81:21:25:00:90:e2:f3:3e:
12:6d:76:09:50:65:ba:24:f3:c3:dd:0a:5a:73:8c:
5a:66:08:e0:98:ed:9c:7f:96:79:ee:0f:65:f3:69:
66:7f:cb:55:4d:96:c5:e1:76:11:68:94:69:94:89:
70:5b:46:02:e0:ec:31:3c:73:cd:7c:09:8a:18:ef:
f0:b2:36:79:94:bd:db:12:69:86:59:75:1a:b1:70:
0e:1f:7c:dc:5a:ac:c3:9c:82:4e:54:5d:fd:d9:78:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:92:D0:54:F7:00:2F:EA:BB:88:05:96:76:11:03:37:FC:12:C9
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/uAyS0FT3AC_qu4gFlnYRAzf8Esk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:e8:40:bc:02:c8:f4:e4:ab:df:44:67:25:34:c8:41:38:fd:
c6:41:88:cf:11:bf:ca:1d:ac:37:87:7e:60:e3:ef:26:4d:fd:
c7:d8:ba:55:45:d0:84:1b:71:5b:fc:a4:b5:59:bc:ca:96:69:
66:75:33:6d:ec:95:76:91:63:60:7a:86:e3:ed:e4:42:0e:55:
da:68:c2:4e:85:9f:76:93:5d:82:d8:f4:14:68:d0:d7:1d:e0:
49:32:5c:4b:dc:f6:7d:02:58:96:fd:b0:cb:49:14:88:b3:0a:
e0:28:29:67:51:f5:65:e0:b7:d8:0c:00:91:30:a4:1a:a5:d3:
0e:cf:75:e2:f5:50:0a:40:79:14:70:77:7b:26:cc:17:b5:50:
83:6c:18:bb:c0:cb:89:04:7f:eb:9d:e8:b0:da:94:7a:f9:aa:
49:54:aa:0c:06:0a:03:a6:1b:4b:52:fc:7d:2a:ae:f7:1f:21:
c6:30:12:23:0c:b0:97:6a:d4:25:85:64:28:6d:02:71:88:44:
4f:cd:d6:48:1a:1a:6f:9a:18:50:6e:7e:19:33:78:b7:39:38:
a4:8c:45:2b:21:32:c4:43:f3:52:78:36:bc:91:e9:c0:ec:3a:
8a:16:ef:2b:83:21:b7:51:15:fc:cb:fc:fe:a9:7e:96:0b:ae:
10:81:a6:b2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYqETFavDtZBtdyYHyDCW06uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj
NjgxMzcwHhcNMjMwOTExMTI1MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODBjOTJkMDU0ZjcwMDJmZWFiYjg4MDU5Njc2MTEwMzM3ZmMxMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp991gx1wUnjsEWzdQqgIrLQnW4yp
qiBgVNZYoDr69bEaL/XR7PPUUkAVVy6VLomFTckt8h6yvBxGWMi94tHBcAzDI0iA
TLUQiRJNaWNRY2kisepefiCToJL5SE1zW4cRMSXgh0taz/81MjDLvYBBOLWHgDWo
EZaJ/sBzUn2WcYvwV/DVom1ChngVs3slEVJk8KmG9HPqivhis1gegSElAJDi8z4S
bXYJUGW6JPPD3Qpac4xaZgjgmO2cf5Z57g9l82lmf8tVTZbF4XYRaJRplIlwW0YC
4OwxPHPNfAmKGO/wsjZ5lL3bEmmGWXUasXAOH3zcWqzDnIJOVF392Xg8YQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLgMktBU9wAv6ruIBZZ2EQM3/BLJMB8GA1UdIwQY
MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct
OTBlYTM3MjljNTc0LzEvdUF5UzBGVDNBQ19xdTRnRmxuWVJBemY4RXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0
LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPYwDAN
BgkqhkiG9w0BAQsFAAOCAQEAOOhAvALI9OSr30RnJTTIQTj9xkGIzxG/yh2sN4d+
YOPvJk39x9i6VUXQhBtxW/yktVm8ypZpZnUzbeyVdpFjYHqG4+3kQg5V2mjCToWf
dpNdgtj0FGjQ1x3gSTJcS9z2fQJYlv2wy0kUiLMK4CgpZ1H1ZeC32AwAkTCkGqXT
Ds914vVQCkB5FHB3eybMF7VQg2wYu8DLiQR/653osNqUevmqSVSqDAYKA6YbS1L8
fSqu9x8hxjASIwywl2rUJYVkKG0CcYhET83WSBoab5oYUG5+GTN4tzk4pIxFKyEy
xEPzUng2vJHpwOw6ihbvK4Mht1EV/Mv8/ql+lguuEIGmsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org