Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8yRC2ovnCCKDNb88MR6BDeNCbjI.roa
File: 8yRC2ovnCCKDNb88MR6BDeNCbjI.roa (raw, json)
Hash identifier: IPqwEucfjU3/UdzauI017DCLOz2Yit9itX3QJECYBGY=
Subject key identifier: F3:24:42:DA:8B:E7:08:22:83:35:BF:3C:31:1E:81:0D:E3:42:6E:32
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018ACC30FD78292F87435CBE45957FF78521
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8yRC2ovnCCKDNb88MR6BDeNCbjI.roa
Signing time: Mon 25 Sep 2023 11:54:37 +0000
ROA not before: Mon 25 Sep 2023 11:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 2a07:3502:1070::/48 maxlen: 48
2a07:3502:11f0::/48 maxlen: 48
2a07:3502:1040::/48 maxlen: 48
2a07:3502:1090::/48 maxlen: 48
2a07:3502:11d0::/48 maxlen: 48
2a07:3500:19f8::/48 maxlen: 48
2a07:3500:19d8::/48 maxlen: 48
2a07:3500:1998::/48 maxlen: 48
2a07:3500:19e8::/48 maxlen: 48
2a07:3500:19a8::/48 maxlen: 48
2a07:3500:19a0::/48 maxlen: 48
2a07:3500:19e0::/48 maxlen: 48
2a07:3500:19f0::/48 maxlen: 48
2a07:3500:19b0::/48 maxlen: 48
2a07:3500:1200::/48 maxlen: 48
2a07:3500:1a00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Sep 2023 07:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:30:fd:78:29:2f:87:43:5c:be:45:95:7f:f7:85:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Sep 25 11:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f32442da8be708228335bf3c311e810de3426e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:73:d1:23:fb:4c:cd:65:08:7a:14:3a:10:
1d:0c:cc:ef:b5:d4:5b:90:c2:5e:02:17:63:c2:e5:
bf:81:f7:ae:06:71:59:d4:52:b7:2e:e0:ec:dc:6c:
f1:c8:49:ef:79:14:96:8b:95:45:06:19:06:38:aa:
5a:30:fa:1c:e8:fc:3d:2f:77:4a:e6:6f:fb:b8:be:
b5:96:27:6f:c0:81:4a:a6:7c:88:54:0d:b1:c7:2f:
dc:60:e5:a0:1e:06:92:a9:f0:22:3f:9a:3d:7b:67:
be:e1:92:58:7f:92:65:b6:cb:12:ff:8f:e1:40:2e:
75:2b:ed:d2:d2:12:3b:fa:e2:83:6d:cf:e1:c5:4a:
47:97:da:b9:9c:bf:b2:15:92:f9:26:b4:8b:8c:ec:
56:d9:37:db:b3:f4:2c:dc:6a:c9:41:b0:74:f5:ac:
56:b9:2b:48:d2:f2:e1:10:c8:cc:8c:9f:69:44:6c:
13:db:36:8d:96:a5:8e:ac:22:c3:ff:3a:a2:d9:0e:
93:cb:cb:88:4e:bb:99:a8:4d:b3:9a:ce:d0:d1:8e:
22:d3:84:4c:88:c1:12:8d:22:8f:ee:34:50:fb:34:
63:f9:3a:79:9f:eb:2d:0c:cf:83:a8:24:d4:89:b0:
1f:c4:73:f2:ee:9d:81:7c:b7:ab:ad:f3:4f:60:c8:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:42:DA:8B:E7:08:22:83:35:BF:3C:31:1E:81:0D:E3:42:6E:32
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8yRC2ovnCCKDNb88MR6BDeNCbjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1200::/48
2a07:3500:1998::/48
2a07:3500:19a0::/48
2a07:3500:19a8::/48
2a07:3500:19b0::/48
2a07:3500:19d8::/48
2a07:3500:19e0::/48
2a07:3500:19e8::/48
2a07:3500:19f0::/48
2a07:3500:19f8::/48
2a07:3500:1a00::/48
2a07:3502:1040::/48
2a07:3502:1070::/48
2a07:3502:1090::/48
2a07:3502:11d0::/48
2a07:3502:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
82:86:1f:b1:7c:1f:c9:82:2a:20:1f:e6:33:ad:67:a6:b0:48:
11:37:68:a9:f3:11:54:27:89:8d:dd:1f:09:7f:c2:c4:d8:d4:
8f:bd:73:5e:ce:ad:09:27:18:c4:4f:96:77:3c:78:ed:3e:01:
62:88:45:3b:a0:2a:3d:30:b2:0b:37:3e:78:01:cf:32:21:28:
c4:1d:b6:59:84:c9:02:4b:5f:35:6d:c3:1b:45:cb:38:d9:87:
e7:23:59:96:f8:82:49:92:cb:85:35:56:22:55:ad:23:c4:61:
44:5e:77:14:ec:4c:14:4d:d3:fc:4a:ac:af:14:8f:f9:40:12:
c3:26:e8:46:73:89:33:23:8f:9f:5e:6f:1e:66:8d:05:f7:8d:
5e:90:a3:f8:cb:33:26:da:98:8d:2b:b5:99:c6:bc:15:04:17:
78:63:a1:8b:69:34:e6:5c:0e:0b:8a:3c:8b:75:c1:28:18:c1:
f4:82:47:e3:59:02:96:da:e8:d6:3b:5d:fc:59:c0:e0:93:62:
05:28:cb:54:67:8f:f9:a8:c8:cd:9d:b5:c9:87:23:cc:4e:b7:
f8:30:02:76:b4:a4:83:74:b2:b3:fb:4e:40:06:14:c4:78:bb:
dd:cc:30:84:ab:f5:b2:3e:da:23:60:74:a6:8d:fb:3a:30:7f:
6c:f9:ac:41
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgISAYrMMP14KS+HQ1y+RZV/94UhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMwOTI1MTE1NDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzI0NDJkYThiZTcwODIyODMzNWJmM2MzMTFlODEwZGUzNDI2ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij9z0SP7TM1lCHoUOhAdDMzvtdRb
kMJeAhdjwuW/gfeuBnFZ1FK3LuDs3GzxyEnveRSWi5VFBhkGOKpaMPoc6Pw9L3dK
5m/7uL61lidvwIFKpnyIVA2xxy/cYOWgHgaSqfAiP5o9e2e+4ZJYf5JltssS/4/h
QC51K+3S0hI7+uKDbc/hxUpHl9q5nL+yFZL5JrSLjOxW2Tfbs/Qs3GrJQbB09axW
uStI0vLhEMjMjJ9pRGwT2zaNlqWOrCLD/zqi2Q6Ty8uITruZqE2zms7Q0Y4i04RM
iMESjSKP7jRQ+zRj+Tp5n+stDM+DqCTUibAfxHPy7p2BfLerrfNPYMinRwIDAQAB
o4ICmDCCApQwHQYDVR0OBBYEFPMkQtqL5wgigzW/PDEegQ3jQm4yMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvOHlSQzJvdm5DQ0tETmI4OE1SNkJEZU5DYmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAIwgZADBwAq
BzUAEgADBwAqBzUAGZgDBwAqBzUAGaADBwAqBzUAGagDBwAqBzUAGbADBwAqBzUA
GdgDBwAqBzUAGeADBwAqBzUAGegDBwAqBzUAGfADBwAqBzUAGfgDBwAqBzUAGgAD
BwAqBzUCEEADBwAqBzUCEHADBwAqBzUCEJADBwAqBzUCEdADBwAqBzUCEfAwDQYJ
KoZIhvcNAQELBQADggEBAIKGH7F8H8mCKiAf5jOtZ6awSBE3aKnzEVQniY3dHwl/
wsTY1I+9c17OrQknGMRPlnc8eO0+AWKIRTugKj0wsgs3PngBzzIhKMQdtlmEyQJL
XzVtwxtFyzjZh+cjWZb4gkmSy4U1ViJVrSPEYURedxTsTBRN0/xKrK8Uj/lAEsMm
6EZziTMjj59ebx5mjQX3jV6Qo/jLMybamI0rtZnGvBUEF3hjoYtpNOZcDguKPIt1
wSgYwfSCR+NZApba6NY7XfxZwOCTYgUoy1Rnj/moyM2dtcmHI8xOt/gwAna0pIN0
srP7TkAGFMR4u93MMISr9bI+2iNgdKaN+zowf2z5rEE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org