Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/oaQLFzNMTJTSd7cBx5hMTNleTGU.roa
File: oaQLFzNMTJTSd7cBx5hMTNleTGU.roa (raw, json)
Hash identifier: dtc8pqvQ+TVCO1lE7UA/so5AOZ7C5wR2jkcAM9WATDw=
Subject key identifier: A1:A4:0B:17:33:4C:4C:94:D2:77:B7:01:C7:98:4C:4C:D9:5E:4C:65
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018654B5E6681B4C6048B7BB14ECFC56BC63
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/oaQLFzNMTJTSd7cBx5hMTNleTGU.roa
Signing time: Wed 15 Feb 2023 10:54:12 +0000
ROA not before: Wed 15 Feb 2023 10:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208240
IP address blocks: 2a07:3500:1060::/48 maxlen: 48
2a07:3500:1061::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:b5:e6:68:1b:4c:60:48:b7:bb:14:ec:fc:56:bc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 15 10:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a40b17334c4c94d277b701c7984c4cd95e4c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:17:a5:bc:5d:c0:2b:6a:2b:17:56:64:1a:
94:c7:90:bc:a1:2b:73:8d:40:df:ca:a3:5d:bf:6b:
9d:e6:33:31:2a:55:ea:fa:e7:d9:60:c4:1b:a2:3f:
77:48:ae:84:55:03:1d:4e:e8:eb:e6:41:5e:b0:60:
09:b0:8c:11:f7:85:37:ed:f7:50:56:74:fb:d7:f4:
e6:2e:87:26:19:5b:8a:cb:7e:0f:21:67:a9:d4:51:
8c:c6:23:6a:6a:7e:87:8f:b9:b8:55:5e:a4:0c:1e:
0c:97:7d:31:50:34:d8:08:c4:c1:41:7a:fc:16:6e:
2a:d5:e9:35:cc:43:7a:a3:fe:a4:87:8a:c1:80:26:
e0:9b:c2:cf:f7:11:81:b6:eb:c5:8d:59:4d:95:1e:
9f:56:ac:7a:9f:5c:88:a9:d3:30:2e:61:d3:f6:f8:
a8:44:9a:f6:75:07:2d:22:10:b5:25:50:d1:3c:c3:
e1:59:1d:82:57:d9:c9:dc:7f:0a:c0:c2:90:f7:60:
1f:2f:f5:f5:99:10:ae:7b:2c:26:94:2d:2c:34:14:
8b:6b:64:eb:0a:4d:4f:d3:bf:8c:a5:d6:ef:10:ce:
21:f1:e0:d1:ee:d1:63:18:86:79:2e:ae:fd:49:77:
66:4d:37:9e:16:22:d7:90:e9:7f:c2:b7:cb:31:fe:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:0B:17:33:4C:4C:94:D2:77:B7:01:C7:98:4C:4C:D9:5E:4C:65
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/oaQLFzNMTJTSd7cBx5hMTNleTGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1060::/47
Signature Algorithm: sha256WithRSAEncryption
1e:63:d7:7a:79:51:6f:7b:0e:73:5a:ab:22:10:78:80:47:56:
24:4f:d1:3d:ae:8a:4d:19:02:1f:27:a9:9d:5c:36:66:94:d3:
aa:6f:c1:c5:f2:5d:ba:f1:6d:86:90:07:35:57:d6:a7:0d:e5:
1f:fe:ab:62:83:fc:26:85:bf:d9:c0:b9:ee:a8:4a:e6:14:36:
9b:b8:a9:8d:66:25:69:e9:b2:24:0e:18:3f:ca:5c:3a:08:6b:
94:c8:6f:81:39:c5:d2:cc:51:89:d0:77:34:b2:2f:a3:c0:4f:
96:f0:b8:d9:37:f0:d7:34:81:8e:b0:0f:d9:d1:5d:c0:03:e0:
18:9c:c2:86:4d:be:ec:07:a7:cb:b8:f8:85:a9:7b:ef:f0:6a:
33:f1:24:fd:54:27:9d:32:b9:c8:58:ba:2c:14:3b:ef:1a:76:
a5:0b:b9:d4:ac:23:2d:a6:d0:67:dd:72:0e:68:e5:32:ed:d9:
fe:a7:cc:65:8c:71:a9:51:2d:50:6b:1b:c4:89:a7:77:c7:8a:
60:87:17:95:5a:97:6f:b7:ef:95:02:49:2b:98:d7:75:57:ca:
d1:18:87:e6:6b:b7:d7:3e:1f:36:91:d5:6a:39:fd:df:67:e3:
ed:5b:0a:36:fa:c2:5d:ea:5f:1c:8b:ae:14:39:92:6c:53:59:
38:fe:c7:54
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZUteZoG0xgSLe7FOz8VrxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl
MTQwNzEwHhcNMjMwMjE1MTA1NDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE0MGIxNzMzNGM0Yzk0ZDI3N2I3MDFjNzk4NGM0Y2Q5NWU0YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliIXpbxdwCtqKxdWZBqUx5C8oStz
jUDfyqNdv2ud5jMxKlXq+ufZYMQboj93SK6EVQMdTujr5kFesGAJsIwR94U37fdQ
VnT71/TmLocmGVuKy34PIWep1FGMxiNqan6Hj7m4VV6kDB4Ml30xUDTYCMTBQXr8
Fm4q1ek1zEN6o/6kh4rBgCbgm8LP9xGBtuvFjVlNlR6fVqx6n1yIqdMwLmHT9vio
RJr2dQctIhC1JVDRPMPhWR2CV9nJ3H8KwMKQ92AfL/X1mRCueywmlC0sNBSLa2Tr
Ck1P07+MpdbvEM4h8eDR7tFjGIZ5Lq79SXdmTTeeFiLXkOl/wrfLMf7+IQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKGkCxczTEyU0ne3AceYTEzZXkxlMB8GA1UdIwQY
MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt
YWQ1NzU1MjJiMzY1LzEvb2FRTEZ6Tk1USlRTZDdjQng1aE1UTmxlVEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1
LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgc1ABBg
MA0GCSqGSIb3DQEBCwUAA4IBAQAeY9d6eVFvew5zWqsiEHiAR1YkT9E9ropNGQIf
J6mdXDZmlNOqb8HF8l268W2GkAc1V9anDeUf/qtig/wmhb/ZwLnuqErmFDabuKmN
ZiVp6bIkDhg/ylw6CGuUyG+BOcXSzFGJ0Hc0si+jwE+W8LjZN/DXNIGOsA/Z0V3A
A+AYnMKGTb7sB6fLuPiFqXvv8Goz8ST9VCedMrnIWLosFDvvGnalC7nUrCMtptBn
3XIOaOUy7dn+p8xljHGpUS1QaxvEiad3x4pghxeVWpdvt++VAkkrmNd1V8rRGIfm
a7fXPh82kdVqOf3fZ+PtWwo2+sJd6l8ci64UOZJsU1k4/sdU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org