Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/47FAzTMeP0udmTCKaL2A8f2nT0s.roa
File: 47FAzTMeP0udmTCKaL2A8f2nT0s.roa (raw, json)
Hash identifier: A83P3LcWbijWJ3pbmNBP1XG5NwK0OEnlYftc3yTqkEY=
Subject key identifier: E3:B1:40:CD:33:1E:3F:4B:9D:99:30:8A:68:BD:80:F1:FD:A7:4F:4B
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01886B6694286EE65D184B58D707C056C9D8
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/47FAzTMeP0udmTCKaL2A8f2nT0s.roa
Signing time: Tue 30 May 2023 06:44:24 +0000
ROA not before: Tue 30 May 2023 06:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213065
IP address blocks: 2a07:3502:1122::/47 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:66:94:28:6e:e6:5d:18:4b:58:d7:07:c0:56:c9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 30 06:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3b140cd331e3f4b9d99308a68bd80f1fda74f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:0f:ea:3b:eb:d6:d7:44:4f:1e:f2:11:31:
d2:e0:b1:fc:ec:88:42:fe:0a:13:88:7b:f4:77:2d:
6b:c6:99:6d:89:41:dc:83:c4:f4:7a:b4:45:9e:28:
d8:79:2f:a1:49:f2:7e:1c:0e:53:47:bf:1f:d1:e1:
61:90:6d:45:e1:02:4e:e4:d7:fb:7e:ee:2b:6d:dc:
f4:16:58:00:c5:5c:24:de:a4:77:a2:c6:e6:5d:4c:
f0:33:93:63:fa:e4:c5:9d:2e:5f:25:af:73:fa:26:
30:13:4c:7a:4f:10:e9:d3:b2:87:6d:98:07:a9:b5:
1b:8e:62:be:3e:8c:8e:61:40:23:70:4d:a4:75:6d:
94:34:7c:d4:00:d0:b1:62:dd:5f:04:6b:15:6a:31:
e5:e5:bb:16:6c:79:80:64:1d:0c:70:41:f7:9f:7e:
bd:9c:a8:8d:3f:01:da:01:bb:1c:c6:91:5e:e3:72:
3b:58:8c:92:8a:a5:ed:2b:67:15:62:72:dd:56:bd:
bf:7d:9a:7a:7f:7e:79:f6:88:c4:f0:8c:7d:aa:e5:
25:2c:14:bf:0c:a1:34:09:ea:f9:65:65:b2:e4:4d:
3a:f1:06:ff:87:96:dd:17:96:9c:3b:d3:48:f8:5b:
46:6a:6d:66:f9:75:0b:70:47:fc:8d:72:6e:8f:81:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:40:CD:33:1E:3F:4B:9D:99:30:8A:68:BD:80:F1:FD:A7:4F:4B
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/47FAzTMeP0udmTCKaL2A8f2nT0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3502:1122::/47
Signature Algorithm: sha256WithRSAEncryption
a2:94:74:b3:d8:dc:34:d7:7a:4f:e7:41:9a:98:6c:6e:0c:00:
57:b6:8e:84:8f:5f:29:b3:a1:55:07:11:a0:82:bf:a2:cb:1d:
e3:a2:b2:be:49:a3:a9:88:e1:b0:bf:8e:bd:9d:b0:12:45:ac:
a4:7d:22:6e:56:bb:9d:99:78:69:63:0c:a1:96:16:d2:a5:af:
f8:64:54:26:7a:59:fc:61:3f:1f:4d:3f:b3:07:4b:8e:90:0f:
71:f5:70:a0:37:e3:3c:d8:31:19:52:bd:c7:fc:1d:50:19:54:
b2:4e:78:1d:83:a0:14:dc:2b:6e:13:d3:29:2c:c9:52:d1:b2:
02:da:ba:ad:45:2f:c2:2c:bc:bf:8d:fd:5b:db:51:39:f9:ea:
47:6d:6c:fd:e4:7c:3d:c7:eb:28:5f:40:df:22:99:6e:3d:a9:
c1:2f:27:07:7d:01:d6:53:fe:c6:a2:f0:49:e2:0e:72:90:d3:
e6:2e:ee:c6:df:b2:12:d8:69:3f:29:c3:44:ad:49:d4:e0:66:
11:ca:2e:9b:03:6a:ac:e9:54:15:38:6c:4d:c8:01:ef:43:12:
99:0f:ab:60:06:b9:96:7e:af:f4:c5:61:a5:66:9e:b6:a0:ac:
2c:c9:ae:5a:72:f6:7b:c9:f5:64:63:d4:66:ec:90:21:73:12:
1e:70:ea:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYhrZpQobuZdGEtY1wfAVsnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMwNTMwMDY0NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IxNDBjZDMzMWUzZjRiOWQ5OTMwOGE2OGJkODBmMWZkYTc0ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kP6jvr1tdETx7yETHS4LH87IhC
/goTiHv0dy1rxpltiUHcg8T0erRFnijYeS+hSfJ+HA5TR78f0eFhkG1F4QJO5Nf7
fu4rbdz0FlgAxVwk3qR3osbmXUzwM5Nj+uTFnS5fJa9z+iYwE0x6TxDp07KHbZgH
qbUbjmK+PoyOYUAjcE2kdW2UNHzUANCxYt1fBGsVajHl5bsWbHmAZB0McEH3n369
nKiNPwHaAbscxpFe43I7WIySiqXtK2cVYnLdVr2/fZp6f3559ojE8Ix9quUlLBS/
DKE0Cer5ZWWy5E068Qb/h5bdF5acO9NI+FtGam1m+XULcEf8jXJuj4G3ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOOxQM0zHj9LnZkwimi9gPH9p09LMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvNDdGQXpUTWVQMHVkbVRDS2FMMkE4ZjJuVDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgc1AhEi
MA0GCSqGSIb3DQEBCwUAA4IBAQCilHSz2Nw013pP50GamGxuDABXto6Ej18ps6FV
BxGggr+iyx3jorK+SaOpiOGwv469nbASRaykfSJuVrudmXhpYwyhlhbSpa/4ZFQm
eln8YT8fTT+zB0uOkA9x9XCgN+M82DEZUr3H/B1QGVSyTngdg6AU3CtuE9MpLMlS
0bIC2rqtRS/CLLy/jf1b21E5+epHbWz95Hw9x+soX0DfIpluPanBLycHfQHWU/7G
ovBJ4g5ykNPmLu7G37IS2Gk/KcNErUnU4GYRyi6bA2qs6VQVOGxNyAHvQxKZD6tg
BrmWfq/0xWGlZp62oKwsya5acvZ7yfVkY9Rm7JAhcxIecOp0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org