Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/DdWk0yUx9eQ9y34yrXb4hb-v9pU.roa
File: DdWk0yUx9eQ9y34yrXb4hb-v9pU.roa (raw, json)
Hash identifier: MWe9LeFRDGbBXXJqpg8hqBTUUWmzeNzZGIBJJEt7m6c=
Subject key identifier: 0D:D5:A4:D3:25:31:F5:E4:3D:CB:7E:32:AD:76:F8:85:BF:AF:F6:95
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 01862BFF7D16DB0C6D1174523E11CDECBC0A
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/DdWk0yUx9eQ9y34yrXb4hb-v9pU.roa
Signing time: Tue 07 Feb 2023 13:10:09 +0000
ROA not before: Tue 07 Feb 2023 13:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134450
IP address blocks: 2a13:c44::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:ff:7d:16:db:0c:6d:11:74:52:3e:11:cd:ec:bc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Feb 7 13:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dd5a4d32531f5e43dcb7e32ad76f885bfaff695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f7:95:0f:74:7e:d2:22:de:0d:0e:77:16:71:
7e:51:1b:ee:1f:a8:5f:47:1e:36:92:17:a8:99:24:
51:fc:23:95:96:2f:ea:1c:ff:de:06:b6:17:a1:02:
31:b3:b8:b7:18:4a:74:05:ea:ed:07:5b:95:83:f9:
bf:c9:76:a0:55:69:a5:ff:11:1b:1d:23:3d:97:d6:
d6:d7:57:8d:5d:cb:24:91:3f:65:50:7c:69:99:d6:
bd:30:b2:cc:d9:30:61:2d:36:9d:e1:46:99:09:02:
a1:b9:b2:be:a7:a5:78:b8:aa:70:7b:4d:87:c4:e1:
c2:b5:e4:3b:8b:d6:65:80:be:e8:f9:04:cf:4f:04:
b8:88:70:36:0c:de:49:9c:56:11:6f:0b:5a:8d:cd:
d8:18:4a:5b:76:b7:16:6e:3a:89:aa:39:35:33:00:
f2:4b:34:73:f8:38:b9:6c:57:d6:55:cb:2b:60:80:
be:2f:51:29:4a:8e:d2:4b:f8:6b:12:ba:db:f5:a2:
5b:b9:2d:29:9f:d6:8e:31:74:cf:c2:8e:c8:e0:a7:
2d:1d:46:4d:40:75:ea:fe:d6:3a:ef:03:7b:c5:56:
f3:68:54:bd:c8:5b:0a:2a:6c:ec:2b:7c:a8:85:0e:
ed:94:36:b9:fa:ea:81:17:1b:de:46:5c:c6:df:89:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D5:A4:D3:25:31:F5:E4:3D:CB:7E:32:AD:76:F8:85:BF:AF:F6:95
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/DdWk0yUx9eQ9y34yrXb4hb-v9pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c44::/30
Signature Algorithm: sha256WithRSAEncryption
4d:f4:d8:63:17:28:d2:d9:12:01:89:c8:75:24:76:51:c9:4c:
de:65:ed:15:5f:0c:e9:b3:1d:6d:b6:8f:6a:eb:2d:af:f4:cf:
75:c9:c0:a7:d9:68:7e:b2:67:81:fe:79:cb:8a:27:cc:9a:8b:
c2:c5:95:bd:96:af:95:76:e2:de:91:e9:d9:4f:46:03:1b:21:
59:14:61:ad:8a:53:f4:77:3b:ae:a4:6b:00:da:e8:11:7e:22:
a7:2b:b3:d3:74:72:3d:f5:82:da:a6:2f:a0:a4:3c:fa:0d:38:
af:c0:6e:0e:3b:4c:4a:03:28:93:02:96:a6:eb:8b:96:3c:89:
ca:a1:af:bd:4a:10:04:45:a1:d7:5e:aa:6e:5b:c8:3c:c8:86:
65:82:e7:ad:50:67:b0:02:f0:ca:a3:59:9a:08:30:ae:02:18:
c8:55:90:33:3d:bc:89:a1:9e:3f:2a:af:5c:aa:7b:9d:85:ec:
0e:16:ab:70:bb:a7:0e:63:fa:dc:36:43:6b:cd:08:fc:7f:38:
96:f0:87:fd:4c:91:c1:cf:61:e9:a6:fd:f2:7e:b9:a8:24:28:
d0:91:86:fc:be:99:af:3a:32:63:28:bb:13:96:80:32:ea:f6:
06:eb:95:ba:e1:0e:19:25:00:2b:a0:55:88:4d:80:ba:e9:9b:
50:d7:11:db
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYYr/30W2wxtEXRSPhHN7LwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj
YzI1MmYwHhcNMjMwMjA3MTMxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGQ1YTRkMzI1MzFmNWU0M2RjYjdlMzJhZDc2Zjg4NWJmYWZmNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/eVD3R+0iLeDQ53FnF+URvuH6hf
Rx42kheomSRR/COVli/qHP/eBrYXoQIxs7i3GEp0BertB1uVg/m/yXagVWml/xEb
HSM9l9bW11eNXcskkT9lUHxpmda9MLLM2TBhLTad4UaZCQKhubK+p6V4uKpwe02H
xOHCteQ7i9ZlgL7o+QTPTwS4iHA2DN5JnFYRbwtajc3YGEpbdrcWbjqJqjk1MwDy
SzRz+Di5bFfWVcsrYIC+L1EpSo7SS/hrErrb9aJbuS0pn9aOMXTPwo7I4KctHUZN
QHXq/tY67wN7xVbzaFS9yFsKKmzsK3yohQ7tlDa5+uqBFxveRlzG34mNjQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA3VpNMlMfXkPct+Mq12+IW/r/aVMB8GA1UdIwQY
MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt
M2UxOGVlNmI0YTVhLzEvRGRXazB5VXg5ZVE5eTM0eXJYYjRoYi12OXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh
LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhMMRDAN
BgkqhkiG9w0BAQsFAAOCAQEATfTYYxco0tkSAYnIdSR2UclM3mXtFV8M6bMdbbaP
austr/TPdcnAp9lofrJngf55y4onzJqLwsWVvZavlXbi3pHp2U9GAxshWRRhrYpT
9Hc7rqRrANroEX4ipyuz03RyPfWC2qYvoKQ8+g04r8BuDjtMSgMokwKWpuuLljyJ
yqGvvUoQBEWh116qblvIPMiGZYLnrVBnsALwyqNZmggwrgIYyFWQMz28iaGePyqv
XKp7nYXsDharcLunDmP63DZDa80I/H84lvCH/UyRwc9h6ab98n65qCQo0JGG/L6Z
rzoyYyi7E5aAMur2BuuVuuEOGSUAK6BViE2AuumbUNcR2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:10 2024 by rpki-client on console-fra.rpki-client.org