Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/2-hi9uqLezxov4N_bQ19vOTCn_w.roa
File: 2-hi9uqLezxov4N_bQ19vOTCn_w.roa (raw, json)
Hash identifier: HrMe/robyYxDdwzvBzuDex/mdQ1Xi52K+qPMNB1pEsI=
Subject key identifier: DB:E8:62:F6:EA:8B:7B:3C:68:BF:83:7F:6D:0D:7D:BC:E4:C2:9F:FC
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018B6AAFEBE4CB40A1902683431D7CE724E9
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/2-hi9uqLezxov4N_bQ19vOTCn_w.roa
Signing time: Thu 26 Oct 2023 06:33:15 +0000
ROA not before: Thu 26 Oct 2023 06:33:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3502:10c0::/48 maxlen: 48
2a07:3502:1060::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:1240::/46 maxlen: 46
2a07:3501:1340::/48 maxlen: 48
2a07:3502:11a0::/46 maxlen: 46
2a07:3502:10a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:af:eb:e4:cb:40:a1:90:26:83:43:1d:7c:e7:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 26 06:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe862f6ea8b7b3c68bf837f6d0d7dbce4c29ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:39:c1:94:f6:0c:ee:38:6a:6b:14:79:80:
4f:10:a4:01:46:99:f9:f6:22:c9:9e:cb:74:5f:ad:
75:2f:b9:a6:b9:cc:a8:bd:f7:df:3c:81:a2:9a:c6:
94:fc:59:f0:4d:1b:15:72:b9:64:cf:83:d6:02:29:
8d:05:fc:6a:fe:64:14:36:f3:01:41:e0:87:2f:8e:
57:25:0e:28:e3:10:27:47:45:ef:8f:b5:9d:ac:a3:
1a:69:81:f4:48:31:22:4d:94:c5:22:7c:dd:1d:15:
2a:40:f5:df:a0:88:25:42:e5:fd:fc:4f:d5:b8:60:
70:a9:c2:e5:df:00:5b:10:b6:b9:7a:e1:28:49:79:
f5:0c:6b:67:18:08:cf:65:6e:00:71:0b:5a:bf:53:
08:71:85:37:52:1f:30:c8:7f:2e:f3:05:a8:d4:1f:
40:29:cc:ff:ad:2b:3d:9f:98:21:65:72:99:1e:de:
72:f0:32:d7:15:e3:2b:6a:73:12:87:68:60:5b:c9:
8a:9c:43:91:b5:39:c3:cd:c1:b3:50:c3:00:a2:ec:
9d:7d:73:ff:0c:ab:5f:05:05:c5:24:c3:a1:52:d4:
ae:6c:7d:04:f2:6d:51:3b:6c:83:99:e0:9d:35:d7:
ef:e3:e3:78:c4:49:98:b5:ee:7a:fd:ec:14:93:5a:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:62:F6:EA:8B:7B:3C:68:BF:83:7F:6D:0D:7D:BC:E4:C2:9F:FC
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/2-hi9uqLezxov4N_bQ19vOTCn_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1240::/46
2a07:3500:12f8::/48
2a07:3500:15c0::/48
2a07:3501:1340::/48
2a07:3502:1060::/48
2a07:3502:10a1::/48
2a07:3502:10c0::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
02:c8:2c:c2:91:a6:54:d2:6a:aa:df:21:b9:83:ce:5f:da:df:
0f:60:af:01:38:bf:84:3b:86:d1:9b:dc:0b:70:9b:df:8b:c7:
1c:80:09:66:8f:8a:83:22:83:c3:0f:e5:d1:13:53:a9:fd:86:
12:3f:73:a5:2a:e5:27:cf:4d:95:06:83:45:7d:ca:ff:a7:cd:
39:2e:a4:76:38:b6:13:15:f8:09:bc:43:43:30:8a:d1:1d:94:
28:78:d4:7c:8c:1d:5a:79:f8:c8:9b:c3:56:35:ea:f3:22:41:
18:fe:62:7c:da:b1:7b:2c:76:14:f0:34:54:5c:f2:36:62:26:
97:83:a9:06:09:6f:0d:8c:a4:c5:c5:f2:5d:72:32:8d:8b:f2:
d0:35:ee:07:b3:e9:2f:01:dc:ba:2e:14:ed:2f:05:4a:23:c5:
d5:24:61:3b:93:4c:a3:11:3d:53:54:b3:c2:60:3f:17:c6:0a:
12:27:0a:42:23:67:aa:e7:85:d0:04:59:2c:67:d9:b3:30:52:
6b:55:6f:27:90:92:e2:e9:1b:03:50:0c:e7:a6:03:7a:33:f2:
b5:1c:23:4c:b1:48:e7:52:65:f5:34:7e:61:ec:55:c9:1f:21:
1a:46:a9:31:ca:91:ad:42:ab:38:c7:8b:4a:70:b6:99:76:76:
0d:ae:44:2e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYtqr+vky0ChkCaDQx185yTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMxMDI2MDYzMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmU4NjJmNmVhOGI3YjNjNjhiZjgzN2Y2ZDBkN2RiY2U0YzI5ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6s5wZT2DO44amsUeYBPEKQBRpn5
9iLJnst0X611L7mmucyovfffPIGimsaU/FnwTRsVcrlkz4PWAimNBfxq/mQUNvMB
QeCHL45XJQ4o4xAnR0Xvj7WdrKMaaYH0SDEiTZTFInzdHRUqQPXfoIglQuX9/E/V
uGBwqcLl3wBbELa5euEoSXn1DGtnGAjPZW4AcQtav1MIcYU3Uh8wyH8u8wWo1B9A
Kcz/rSs9n5ghZXKZHt5y8DLXFeMranMSh2hgW8mKnEORtTnDzcGzUMMAouydfXP/
DKtfBQXFJMOhUtSubH0E8m1RO2yDmeCdNdfv4+N4xEmYte56/ewUk1owGwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFNvoYvbqi3s8aL+Df20Nfbzkwp/8MB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvMi1oaTl1cUxlenhvdjROX2JRMTl2T1RDbl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAAjBIAwcCKgc1ABJA
AwcAKgc1ABL4AwcAKgc1ABXAAwcAKgc1ARNAAwcAKgc1AhBgAwcAKgc1AhChAwcA
Kgc1AhDAAwcCKgc1AhGgMA0GCSqGSIb3DQEBCwUAA4IBAQACyCzCkaZU0mqq3yG5
g85f2t8PYK8BOL+EO4bRm9wLcJvfi8ccgAlmj4qDIoPDD+XRE1Op/YYSP3OlKuUn
z02VBoNFfcr/p805LqR2OLYTFfgJvENDMIrRHZQoeNR8jB1aefjIm8NWNerzIkEY
/mJ82rF7LHYU8DRUXPI2YiaXg6kGCW8NjKTFxfJdcjKNi/LQNe4Hs+kvAdy6LhTt
LwVKI8XVJGE7k0yjET1TVLPCYD8XxgoSJwpCI2eq54XQBFksZ9mzMFJrVW8nkJLi
6RsDUAznpgN6M/K1HCNMsUjnUmX1NH5h7FXJHyEaRqkxypGtQqs4x4tKcLaZdnYN
rkQu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:53 2024 by rpki-client on console-fra.rpki-client.org