Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_77QtisAKf3zISyeXMDRzAKVn7k.roa
File: _77QtisAKf3zISyeXMDRzAKVn7k.roa (raw, json)
Hash identifier: LwCpPCQuHuSKGAKD0b8efV2W5/06E/6SxWR5BWGLIeU=
Subject key identifier: FF:BE:D0:B6:2B:00:29:FD:F3:21:2C:9E:5C:C0:D1:CC:02:95:9F:B9
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0187FE10D786432D1036457B64730D180724
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_77QtisAKf3zISyeXMDRzAKVn7k.roa
Signing time: Tue 09 May 2023 01:12:09 +0000
ROA not before: Tue 09 May 2023 01:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205138
IP address blocks: 2a01:8740:10::/46 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:10:d7:86:43:2d:10:36:45:7b:64:73:0d:18:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 9 01:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffbed0b62b0029fdf3212c9e5cc0d1cc02959fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:74:c3:ca:d1:8c:fd:b0:d4:30:1a:a6:3c:
74:2a:7a:ed:65:c7:9d:75:52:20:56:b3:23:c3:09:
54:6c:f0:74:8a:e6:7c:69:7c:03:25:8c:48:76:25:
21:9e:82:2d:d6:69:82:56:10:e4:27:f1:e3:bd:1b:
6d:d6:18:2d:d0:de:54:b8:f7:13:57:9b:f7:9c:77:
2a:8d:a7:db:72:72:1e:4e:08:78:81:c7:84:64:df:
d7:65:cd:c1:cf:5f:9c:f0:7d:b7:38:42:32:44:ab:
27:e2:2b:ff:0c:14:a5:20:86:24:0b:c3:52:90:81:
9e:74:32:0f:56:5f:dd:c1:9d:bc:a6:c6:22:86:52:
68:ee:64:b0:b2:42:1a:e0:3d:07:2a:8a:40:9b:cb:
84:a8:3e:14:fa:21:2b:30:4b:a4:50:6d:f0:a5:da:
fb:47:42:ee:f9:1d:5a:63:22:c0:40:b5:1a:b2:f4:
60:0f:95:db:30:7a:f7:8b:c4:e4:25:b0:44:b9:b3:
d7:59:b5:7a:3d:80:e4:a2:17:46:1a:ac:be:05:c7:
80:6f:55:45:28:1f:37:f9:70:27:ff:67:53:7d:46:
bf:8c:b5:48:01:d2:24:f1:cf:4b:90:5d:22:c8:bb:
c4:7d:67:6d:7d:47:60:b8:ab:6f:14:47:a9:e0:76:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:D0:B6:2B:00:29:FD:F3:21:2C:9E:5C:C0:D1:CC:02:95:9F:B9
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/_77QtisAKf3zISyeXMDRzAKVn7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8740:10::/46
Signature Algorithm: sha256WithRSAEncryption
24:9f:01:30:51:93:40:18:08:35:38:f5:3c:67:cd:1d:4a:01:
73:6b:a9:86:4d:54:a2:68:0c:bf:6b:58:09:a5:97:10:a5:20:
8b:75:68:d3:69:f8:ef:fc:12:f3:37:7f:b9:a6:8d:ec:ba:24:
62:e1:89:13:50:a4:6a:5b:44:b1:9a:e2:ba:a9:26:ac:1e:30:
f4:80:c3:b9:9d:79:bb:18:de:b9:3a:7b:82:c9:53:f4:6b:94:
98:2c:ad:d2:6d:af:31:95:af:10:b7:c8:c1:a4:f9:16:df:73:
61:77:f0:b4:52:f0:cd:36:fa:5e:86:00:d0:31:95:17:7b:b9:
db:6b:27:8c:8f:db:6a:78:fd:a0:5c:d1:52:de:7e:1f:8e:a8:
d1:81:e2:db:66:0e:dc:47:30:ba:b6:1e:f4:ec:c7:de:53:75:
c1:f9:54:90:51:cf:02:a8:01:b7:3e:30:09:b7:1e:07:95:94:
c7:6f:4d:85:7e:ea:3b:4b:af:b4:7c:7c:06:42:1f:28:83:50:
ab:2a:bc:20:b7:9b:bc:8c:57:72:f5:80:dc:a6:02:a9:7d:a0:
d3:24:e0:aa:85:b7:bb:69:a5:f6:95:4c:0a:9b:57:70:80:21:
c5:a0:79:28:e5:6d:43:c5:f1:3e:1b:55:32:bd:71:97:a2:55:
45:92:af:69
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYf+ENeGQy0QNkV7ZHMNGAckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjMwNTA5MDExMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmJlZDBiNjJiMDAyOWZkZjMyMTJjOWU1Y2MwZDFjYzAyOTU5ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggJ0w8rRjP2w1DAapjx0KnrtZced
dVIgVrMjwwlUbPB0iuZ8aXwDJYxIdiUhnoIt1mmCVhDkJ/HjvRtt1hgt0N5UuPcT
V5v3nHcqjafbcnIeTgh4gceEZN/XZc3Bz1+c8H23OEIyRKsn4iv/DBSlIIYkC8NS
kIGedDIPVl/dwZ28psYihlJo7mSwskIa4D0HKopAm8uEqD4U+iErMEukUG3wpdr7
R0Lu+R1aYyLAQLUasvRgD5XbMHr3i8TkJbBEubPXWbV6PYDkohdGGqy+BceAb1VF
KB83+XAn/2dTfUa/jLVIAdIk8c9LkF0iyLvEfWdtfUdguKtvFEep4HaPqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP++0LYrACn98yEsnlzA0cwClZ+5MB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvXzc3UXRpc0FLZjN6SVN5ZVhNRFJ6QUtWbjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgGHQAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAknwEwUZNAGAg1OPU8Z80dSgFza6mGTVSiaAy/
a1gJpZcQpSCLdWjTafjv/BLzN3+5po3suiRi4YkTUKRqW0SxmuK6qSasHjD0gMO5
nXm7GN65OnuCyVP0a5SYLK3Sba8xla8Qt8jBpPkW33Nhd/C0UvDNNvpehgDQMZUX
e7nbayeMj9tqeP2gXNFS3n4fjqjRgeLbZg7cRzC6th707MfeU3XB+VSQUc8CqAG3
PjAJtx4HlZTHb02Ffuo7S6+0fHwGQh8og1CrKrwgt5u8jFdy9YDcpgKpfaDTJOCq
hbe7aaX2lUwKm1dwgCHFoHko5W1DxfE+G1UyvXGXolVFkq9p
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:30 2024 by rpki-client on console-fra.rpki-client.org