Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/7WUxUjjafsnyM6-0GBetj-FUKvY.roa
File: 7WUxUjjafsnyM6-0GBetj-FUKvY.roa (raw, json)
Hash identifier: 49W/DxeLwg7m8seKOwIPnvLH9XxUqbGPZ+aDMdlLLEA=
Subject key identifier: ED:65:31:52:38:DA:7E:C9:F2:33:AF:B4:18:17:AD:8F:E1:54:2A:F6
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 01856D2F5C0BCC091D56A051115EFA23765A
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/7WUxUjjafsnyM6-0GBetj-FUKvY.roa
Signing time: Sun 01 Jan 2023 11:54:58 +0000
ROA not before: Sun 01 Jan 2023 11:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:c44::/30 maxlen: 30
2a13:c40::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 25 Jan 2023 23:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:5c:0b:cc:09:1d:56:a0:51:11:5e:fa:23:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 1 11:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed65315238da7ec9f233afb41817ad8fe1542af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:56:38:7a:78:92:b4:72:83:92:eb:bf:2f:
9b:b8:8a:79:f7:4c:68:ff:39:b6:98:d0:bc:5c:ce:
d4:4b:e0:9d:2c:81:2a:58:e7:39:3c:9e:a2:ab:5e:
fc:9b:0c:c2:7a:b2:ef:c9:c5:61:68:77:f3:ac:b9:
30:3e:a1:a1:ed:4e:5e:67:0e:9d:90:32:2b:78:7d:
22:f4:c5:c8:78:c8:05:2e:f4:22:b6:9e:b8:f3:87:
de:0f:40:46:d6:81:45:0f:f1:04:47:1c:d8:e7:31:
c1:fb:f4:2c:9d:2a:32:f0:cb:17:d7:94:fc:4d:87:
30:d6:50:59:5e:c5:3c:bf:7f:bc:e9:bb:81:b3:b7:
3e:16:b4:c8:6e:62:16:bf:d7:40:16:06:38:93:a8:
18:64:69:1d:70:a8:8a:a9:8b:32:15:a4:91:42:2c:
92:40:c7:b8:26:4e:41:f9:9b:9a:dc:a8:95:e7:cf:
cc:97:d1:f8:79:34:78:ea:7c:35:55:45:49:e3:80:
b7:c5:e0:e2:99:d7:b7:37:00:fd:30:51:eb:25:59:
d7:5c:83:d3:eb:4b:96:de:a9:c9:ca:17:16:75:d2:
c2:b2:08:af:10:da:17:05:a0:36:16:9b:9f:0f:4d:
6f:4a:5e:35:95:fb:fc:15:c6:e1:64:1f:c3:62:4a:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:31:52:38:DA:7E:C9:F2:33:AF:B4:18:17:AD:8F:E1:54:2A:F6
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/7WUxUjjafsnyM6-0GBetj-FUKvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c40::/29
Signature Algorithm: sha256WithRSAEncryption
af:81:9b:71:e3:2a:57:81:2f:b9:57:eb:67:5b:97:5d:e6:27:
ab:21:7d:1f:0d:c1:58:2c:66:28:b6:d1:ab:e7:f7:21:8b:0b:
17:72:93:08:f3:2f:2f:55:38:53:80:46:c9:b6:c8:f0:d5:e6:
e6:8f:1a:be:35:70:a2:b0:a3:19:aa:eb:f1:64:a1:b1:f2:7d:
3a:29:be:74:b7:4c:b9:21:f8:16:cf:e9:26:0f:76:f0:94:51:
5a:cf:19:04:d1:5e:84:3f:63:63:11:85:87:5c:1b:c9:5c:4f:
72:d7:c3:d5:d5:b7:30:e7:39:05:cd:3c:b8:33:95:ad:59:24:
09:0b:43:d0:4d:4f:87:68:9e:0b:aa:ee:d1:bb:41:67:43:7e:
30:93:37:fd:70:cc:39:d2:02:5e:79:1e:89:f4:4d:c6:a0:91:
69:41:35:fc:eb:70:f0:79:df:e8:84:bc:b3:82:63:bd:46:85:
d4:43:50:df:ea:ba:c6:07:7a:29:e2:33:0c:3d:a2:9d:76:d0:
61:59:32:7f:f5:c8:4c:c1:dd:f3:1c:6f:1d:ab:90:f1:16:ea:
53:33:d6:95:38:3c:9e:61:03:00:15:38:77:82:37:15:88:64:
19:0c:35:4e:4e:ad:1e:fc:c6:79:9b:e8:b8:a7:f0:10:7d:79:
d9:ed:b3:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtL1wLzAkdVqBREV76I3ZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj
YzI1MmYwHhcNMjMwMTAxMTE1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDY1MzE1MjM4ZGE3ZWM5ZjIzM2FmYjQxODE3YWQ4ZmUxNTQyYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQxWOHp4krRyg5Lrvy+buIp590xo
/zm2mNC8XM7US+CdLIEqWOc5PJ6iq178mwzCerLvycVhaHfzrLkwPqGh7U5eZw6d
kDIreH0i9MXIeMgFLvQitp6484feD0BG1oFFD/EERxzY5zHB+/QsnSoy8MsX15T8
TYcw1lBZXsU8v3+86buBs7c+FrTIbmIWv9dAFgY4k6gYZGkdcKiKqYsyFaSRQiyS
QMe4Jk5B+Zua3KiV58/Ml9H4eTR46nw1VUVJ44C3xeDimde3NwD9MFHrJVnXXIPT
60uW3qnJyhcWddLCsgivENoXBaA2FpufD01vSl41lfv8FcbhZB/DYkpoKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFO1lMVI42n7J8jOvtBgXrY/hVCr2MB8GA1UdIwQY
MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt
M2UxOGVlNmI0YTVhLzEvN1dVeFVqamFmc255TTYtMEdCZXRqLUZVS3ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh
LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMMQDAN
BgkqhkiG9w0BAQsFAAOCAQEAr4GbceMqV4EvuVfrZ1uXXeYnqyF9Hw3BWCxmKLbR
q+f3IYsLF3KTCPMvL1U4U4BGybbI8NXm5o8avjVworCjGarr8WShsfJ9Oim+dLdM
uSH4Fs/pJg928JRRWs8ZBNFehD9jYxGFh1wbyVxPctfD1dW3MOc5Bc08uDOVrVkk
CQtD0E1Ph2ieC6ru0btBZ0N+MJM3/XDMOdICXnkeifRNxqCRaUE1/Otw8Hnf6IS8
s4JjvUaF1ENQ3+q6xgd6KeIzDD2inXbQYVkyf/XITMHd8xxvHauQ8RbqUzPWlTg8
nmEDABU4d4I3FYhkGQw1Tk6tHvzGeZvouKfwEH152e2zig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:10 2024 by rpki-client on console-fra.rpki-client.org