Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/1-IPencr-c9FtzLPgnk0hQaCRwi4.roa
File: 1-IPencr-c9FtzLPgnk0hQaCRwi4.roa (raw, json)
Hash identifier: 3H8m/uwjhqbTjBNQ8h759sHg0KKqIZgGzE0OdifDuos=
Subject key identifier: F8:83:DE:9D:CA:FE:73:D1:6D:CC:B3:E0:9E:4D:21:41:A0:91:C2:2E
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 018C432EE0C87DE73ADF70564E4A8CBBE55C
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/1-IPencr-c9FtzLPgnk0hQaCRwi4.roa
Signing time: Thu 07 Dec 2023 07:29:54 +0000
ROA not before: Thu 07 Dec 2023 07:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:6bf:fa17::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Dec 2023 14:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:2e:e0:c8:7d:e7:3a:df:70:56:4e:4a:8c:bb:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Dec 7 07:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f883de9dcafe73d16dccb3e09e4d2141a091c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:63:cf:41:b8:54:c6:2b:94:92:aa:f7:67:
be:75:66:52:41:6d:ef:38:60:b8:96:a6:97:e6:d2:
4e:c0:85:78:2d:ca:18:69:d0:36:2e:5d:c1:29:d0:
bc:29:eb:0c:73:d1:db:28:0a:ad:8f:d5:11:aa:b6:
12:9b:04:63:de:4c:37:4a:c9:7d:90:64:99:98:c4:
d3:2c:18:b3:2d:77:24:ab:53:c9:13:bd:6a:10:4e:
8f:ec:77:6b:f1:e7:1e:9b:80:50:4b:48:29:19:f5:
19:e8:c8:45:4e:ea:f6:86:3d:62:59:fc:54:1d:35:
c3:c1:29:12:c2:0b:b2:d2:26:86:2d:f6:ef:f9:11:
31:0a:2c:01:68:66:0f:60:84:95:99:ac:74:da:d0:
4f:72:fd:e0:f0:59:48:63:bc:bc:24:c1:d9:16:1c:
0e:e5:7a:26:39:6b:74:1c:76:78:b1:e3:8f:b8:10:
d6:0e:96:f4:25:29:d3:dd:bd:16:d5:9e:9b:6e:20:
b0:bf:33:02:0e:d6:80:40:92:86:31:de:a7:fa:e2:
3f:86:29:bc:e6:15:f8:bc:a9:b8:46:b5:5b:05:05:
c1:99:4f:6c:e7:33:32:d9:aa:71:96:bc:44:3f:de:
5b:9b:b4:ac:16:89:86:8e:e1:69:f8:3d:4e:dd:99:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:DE:9D:CA:FE:73:D1:6D:CC:B3:E0:9E:4D:21:41:A0:91:C2:2E
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/1-IPencr-c9FtzLPgnk0hQaCRwi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6bf:fa17::/48
Signature Algorithm: sha256WithRSAEncryption
b4:28:24:c4:09:ff:67:26:42:73:fa:2d:f8:a0:9f:ea:a9:7e:
66:ae:1c:e8:85:08:87:b1:17:5d:0a:d0:ec:9d:ad:a1:48:e8:
85:e6:74:d1:ee:c7:31:a3:6a:17:53:62:40:09:f2:91:a9:ff:
d6:df:41:30:da:17:54:49:6f:92:6f:a9:7b:ec:82:68:f7:6c:
d2:25:fe:b6:63:49:f6:c9:85:df:59:77:6d:3a:ca:77:3c:07:
64:37:71:72:d8:63:0f:68:f1:22:87:ea:9b:2b:69:61:45:8b:
e6:2d:74:92:7f:9b:b1:4c:17:4c:ae:38:0a:52:b2:ce:db:9f:
d9:d9:e4:64:c6:77:35:98:81:ba:86:18:2a:04:99:67:4c:21:
1d:61:d6:44:cb:06:f3:84:23:d0:82:11:23:36:e3:70:1d:75:
4f:02:bd:77:d1:f6:7a:25:56:21:e3:69:05:fa:d1:e7:84:a2:
94:29:46:00:11:d6:6a:1a:bb:7f:67:ca:44:d5:a6:2e:89:01:
d4:7b:9d:7d:3a:88:77:7c:8a:a3:55:5c:32:f4:38:75:ef:53:
66:1c:2e:ac:18:82:82:64:14:dd:ac:50:57:13:3d:df:f8:35:
bd:c7:bd:66:b1:0d:cb:7a:2f:dd:af:be:36:fe:0c:0d:89:6c:
2f:09:f9:92
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYxDLuDIfec633BWTkqMu+VcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjMxMjA3MDcyOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODgzZGU5ZGNhZmU3M2QxNmRjY2IzZTA5ZTRkMjE0MWEwOTFjMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKdjz0G4VMYrlJKq92e+dWZSQW3v
OGC4lqaX5tJOwIV4LcoYadA2Ll3BKdC8KesMc9HbKAqtj9URqrYSmwRj3kw3Ssl9
kGSZmMTTLBizLXckq1PJE71qEE6P7Hdr8ecem4BQS0gpGfUZ6MhFTur2hj1iWfxU
HTXDwSkSwguy0iaGLfbv+RExCiwBaGYPYISVmax02tBPcv3g8FlIY7y8JMHZFhwO
5XomOWt0HHZ4seOPuBDWDpb0JSnT3b0W1Z6bbiCwvzMCDtaAQJKGMd6n+uI/him8
5hX4vKm4RrVbBQXBmU9s5zMy2apxlrxEP95bm7SsFomGjuFp+D1O3ZmfHwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPiD3p3K/nPRbcyz4J5NIUGgkcIuMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvMS1JUGVuY3ItYzlGdHpMUGduazBoUWFDUndpNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2EvZDUxZjY0LTVkMDYtNGZjMC1hYjY5LTJjZDk4ZWU1MzU2
OS8xL2pZUkFUbC1LU3hGNjVFNXoxVHhFN04xWGcwSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCBr/6
FzANBgkqhkiG9w0BAQsFAAOCAQEAtCgkxAn/ZyZCc/ot+KCf6ql+Zq4c6IUIh7EX
XQrQ7J2toUjoheZ00e7HMaNqF1NiQAnykan/1t9BMNoXVElvkm+pe+yCaPds0iX+
tmNJ9smF31l3bTrKdzwHZDdxcthjD2jxIofqmytpYUWL5i10kn+bsUwXTK44ClKy
ztuf2dnkZMZ3NZiBuoYYKgSZZ0whHWHWRMsG84Qj0IIRIzbjcB11TwK9d9H2eiVW
IeNpBfrR54SilClGABHWahq7f2fKRNWmLokB1HudfTqId3yKo1VcMvQ4de9TZhwu
rBiCgmQU3axQVxM93/g1vce9ZrENy3ov3a++Nv4MDYlsLwn5kg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org