Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/equLCWzwfd6MNK3ttnilvHOQRvc.roa
File: equLCWzwfd6MNK3ttnilvHOQRvc.roa (raw, json)
Hash identifier: pnSfXXZkJ5jjkLvwtMwC6NJyU0AT82WCj0CCwmQRH6g=
Subject key identifier: 7A:AB:8B:09:6C:F0:7D:DE:8C:34:AD:ED:B6:78:A5:BC:73:90:46:F7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 018C71D9C4C15AFF752DCC514118B20B205C
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/equLCWzwfd6MNK3ttnilvHOQRvc.roa
Signing time: Sat 16 Dec 2023 08:59:06 +0000
ROA not before: Sat 16 Dec 2023 08:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215837
IP address blocks: 2a13:5682:400::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:d9:c4:c1:5a:ff:75:2d:cc:51:41:18:b2:0b:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Dec 16 08:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aab8b096cf07dde8c34adedb678a5bc739046f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:f7:0e:f9:ba:00:a0:bd:6e:3d:54:48:5b:
6c:78:13:1d:8b:ad:b2:3c:87:2b:7a:cf:f2:ea:be:
c5:2b:ff:7a:26:ab:34:9e:6d:66:aa:13:80:fb:46:
ee:4f:5a:19:f6:53:0a:30:5b:03:35:64:5f:db:23:
a1:90:10:3b:3c:56:e3:b4:51:0d:42:ec:a6:05:3e:
f2:d1:fa:a9:31:65:2b:72:c9:45:ab:da:49:76:08:
3f:4b:8c:d2:e1:f1:0f:b8:dd:5a:5b:c4:d1:a4:6e:
ab:cd:3c:5b:67:89:bd:13:32:d6:e2:9e:f2:21:28:
97:f8:89:61:b8:90:8d:14:6f:2b:65:e4:9c:9a:48:
16:5f:24:7a:8b:7b:23:41:fc:22:2b:4f:94:e3:83:
41:75:a7:71:e3:50:b8:5f:05:16:53:ba:af:bc:26:
6f:27:c3:e2:60:ed:17:49:72:b8:03:3e:f3:95:e4:
a7:a0:9d:4b:45:8e:a9:c4:c9:c8:f8:72:bc:de:a3:
b8:94:54:42:74:2b:cb:5d:af:6c:e1:76:63:20:2a:
86:d6:fc:7a:c9:18:e2:34:e4:77:13:54:cc:e9:56:
d9:d7:e0:ce:39:9f:95:75:46:4b:fe:b1:ef:86:dc:
77:0e:28:3d:87:10:7a:89:32:a0:d4:e0:68:27:b2:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:8B:09:6C:F0:7D:DE:8C:34:AD:ED:B6:78:A5:BC:73:90:46:F7
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/equLCWzwfd6MNK3ttnilvHOQRvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5682:400::/44
Signature Algorithm: sha256WithRSAEncryption
34:77:65:4c:07:5c:f1:ca:6c:ed:99:89:a4:83:95:26:d3:b7:
9a:94:c7:46:3c:d7:93:4a:25:54:73:38:bb:aa:dd:9e:0f:17:
f3:42:5a:18:03:24:30:0d:75:f1:52:28:f0:1f:f5:d3:1e:ad:
a2:1f:dc:b6:07:78:c5:de:71:73:ae:af:cb:0f:d7:11:bc:da:
60:05:51:ff:5f:f7:8e:37:1d:f8:a3:32:65:0e:5a:84:df:a6:
a7:23:3c:06:df:8f:86:3b:17:ab:50:7a:a5:d9:e7:5d:33:6b:
88:57:d0:2c:89:a9:6c:6a:7f:e8:ef:14:55:2d:e6:5b:a4:77:
a9:da:ed:81:a8:42:19:0b:02:66:f0:3a:1e:6e:1c:b5:2e:92:
52:34:1b:30:f8:91:9d:7a:54:c6:ee:4c:2f:84:b6:b0:79:a5:
d3:61:98:de:ac:e1:c3:fc:51:07:7e:0b:91:f6:ae:c1:fe:9d:
f3:9d:88:ba:59:44:aa:4e:ef:7d:5d:ec:76:4a:ed:22:06:26:
3e:97:94:09:38:02:c7:61:f9:83:1c:58:f5:8f:41:35:6f:8b:
bb:28:4b:a7:0c:8e:b8:09:4a:e3:7b:43:53:b3:fd:18:d2:e0:
0e:01:15:4d:01:10:90:74:7e:ae:88:8f:47:98:86:ea:97:0d:
62:11:78:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYxx2cTBWv91LcxRQRiyCyBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjMxMjE2MDg1OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWFiOGIwOTZjZjA3ZGRlOGMzNGFkZWRiNjc4YTViYzczOTA0NmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZX3Dvm6AKC9bj1USFtseBMdi62y
PIcres/y6r7FK/96Jqs0nm1mqhOA+0buT1oZ9lMKMFsDNWRf2yOhkBA7PFbjtFEN
QuymBT7y0fqpMWUrcslFq9pJdgg/S4zS4fEPuN1aW8TRpG6rzTxbZ4m9EzLW4p7y
ISiX+IlhuJCNFG8rZeScmkgWXyR6i3sjQfwiK0+U44NBdadx41C4XwUWU7qvvCZv
J8PiYO0XSXK4Az7zleSnoJ1LRY6pxMnI+HK83qO4lFRCdCvLXa9s4XZjICqG1vx6
yRjiNOR3E1TM6VbZ1+DOOZ+VdUZL/rHvhtx3Dig9hxB6iTKg1OBoJ7IKlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHqriwls8H3ejDSt7bZ4pbxzkEb3MB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvZXF1TENXendmZDZNTkszdHRuaWx2SE9RUnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhNWggQA
MA0GCSqGSIb3DQEBCwUAA4IBAQA0d2VMB1zxymztmYmkg5Um07ealMdGPNeTSiVU
czi7qt2eDxfzQloYAyQwDXXxUijwH/XTHq2iH9y2B3jF3nFzrq/LD9cRvNpgBVH/
X/eONx34ozJlDlqE36anIzwG34+GOxerUHql2eddM2uIV9Asialsan/o7xRVLeZb
pHep2u2BqEIZCwJm8Doebhy1LpJSNBsw+JGdelTG7kwvhLaweaXTYZjerOHD/FEH
fguR9q7B/p3znYi6WUSqTu99Xex2Su0iBiY+l5QJOALHYfmDHFj1j0E1b4u7KEun
DI64CUrje0NTs/0Y0uAOARVNARCQdH6uiI9HmIbqlw1iEXjm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org