Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/3rFEvs1A9GkYN747VXHL01TTbek.roa
File: 3rFEvs1A9GkYN747VXHL01TTbek.roa (raw, json)
Hash identifier: bFpfeIEo+/nhTvnzy6LIyo8IWn85ZRG/2FGakJOth3c=
Subject key identifier: DE:B1:44:BE:CD:40:F4:69:18:37:BE:3B:55:71:CB:D3:54:D3:6D:E9
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 0185728379FB5D652D1FEF12409FEA460AE7
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/3rFEvs1A9GkYN747VXHL01TTbek.roa
Signing time: Mon 02 Jan 2023 12:44:57 +0000
ROA not before: Mon 02 Jan 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 394144
IP address blocks: 2a0e:7580::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:79:fb:5d:65:2d:1f:ef:12:40:9f:ea:46:0a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Jan 2 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb144becd40f4691837be3b5571cbd354d36de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:5a:c6:24:57:52:fd:94:7b:f9:76:ae:45:
cf:99:18:4e:de:2d:6c:a9:d0:53:1e:05:8f:36:6f:
46:5e:e6:d3:e6:17:bb:92:5a:56:2c:a4:18:d2:4d:
da:22:02:b6:32:7c:2c:ca:13:82:1f:6d:9e:91:51:
f9:15:51:bd:39:25:fc:57:6d:58:9b:17:9f:30:5d:
36:a0:44:4e:f9:f8:df:93:60:70:3b:dc:62:00:dc:
4f:65:11:6b:2e:64:cf:9e:8b:91:76:59:3e:a4:3c:
c9:11:69:13:bc:95:bd:44:29:3e:ef:7b:95:9c:be:
a0:23:15:a7:1a:b6:21:6c:3a:a7:1f:f7:d2:33:49:
02:a8:08:93:2a:9a:70:80:f6:a4:b3:e2:f4:b9:db:
40:44:4b:92:43:5f:cd:d2:99:77:6f:2c:3f:35:01:
da:70:ab:40:2b:73:e3:9b:ad:ea:90:3b:c7:e6:bb:
24:85:f9:58:c5:bf:fb:9b:88:f8:c2:91:a3:cb:57:
a4:33:1e:fc:7c:58:10:21:97:94:bf:eb:d4:90:c2:
c5:d1:7f:49:b1:12:a8:00:dd:2b:50:c3:83:33:d6:
b0:4f:08:54:ab:41:a5:3f:0b:eb:a0:47:30:04:db:
c0:bb:e7:2f:29:f0:e3:8b:a3:ea:2b:d4:0a:c9:47:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:44:BE:CD:40:F4:69:18:37:BE:3B:55:71:CB:D3:54:D3:6D:E9
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/3rFEvs1A9GkYN747VXHL01TTbek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
5b:d6:d7:2d:f9:1d:ae:f9:9e:6b:28:91:be:6f:0b:c8:67:b4:
4f:08:7d:ea:8a:2a:e0:9b:bf:16:ad:fd:48:2f:2a:d0:79:91:
1b:3c:37:86:ea:ce:eb:6d:ef:18:41:70:22:24:30:84:ab:9f:
2f:ab:23:dc:4b:58:c3:c5:40:fd:7f:8d:82:c8:1c:a1:e3:f0:
88:23:2a:ee:85:94:cc:3e:35:18:d1:c4:0c:05:1a:41:08:a5:
73:36:1e:ce:5b:99:83:37:77:4a:55:94:0c:ca:b7:93:0e:b7:
ee:4f:3f:16:95:ca:9c:74:0a:19:7b:61:9f:8c:d2:33:22:ca:
e7:0b:ee:f0:bf:6d:ec:b2:67:c2:61:10:7b:79:fb:25:f0:8f:
30:43:2d:88:59:71:3a:22:8a:77:19:c2:15:4d:ad:91:cc:bc:
c1:2d:25:27:d6:ee:91:3c:1f:44:73:33:69:c9:77:da:2b:99:
c1:6d:a4:24:90:10:7d:05:22:8f:24:d6:e0:00:9b:7c:ae:d1:
fd:b6:b9:64:18:e7:17:bf:f3:f1:3e:89:27:67:3b:14:9e:44:
a9:1f:23:6b:7f:98:35:91:e4:01:d4:00:46:71:4e:38:fc:a1:
82:76:c8:6c:73:27:9e:4b:44:48:a9:7e:ee:a8:49:cf:15:62:
8e:76:e7:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyg3n7XWUtH+8SQJ/qRgrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTJiZTk4NDM4Yjk4ZWU2OGEwZDFiOGM0MTQ0NTIwYmQw
YTYyM2QwHhcNMjMwMTAyMTI0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWIxNDRiZWNkNDBmNDY5MTgzN2JlM2I1NTcxY2JkMzU0ZDM2ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr39axiRXUv2Ue/l2rkXPmRhO3i1s
qdBTHgWPNm9GXubT5he7klpWLKQY0k3aIgK2MnwsyhOCH22ekVH5FVG9OSX8V21Y
mxefMF02oERO+fjfk2BwO9xiANxPZRFrLmTPnouRdlk+pDzJEWkTvJW9RCk+73uV
nL6gIxWnGrYhbDqnH/fSM0kCqAiTKppwgPaks+L0udtAREuSQ1/N0pl3byw/NQHa
cKtAK3Pjm63qkDvH5rskhflYxb/7m4j4wpGjy1ekMx78fFgQIZeUv+vUkMLF0X9J
sRKoAN0rUMODM9awTwhUq0GlPwvroEcwBNvAu+cvKfDji6PqK9QKyUcBgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN6xRL7NQPRpGDe+O1Vxy9NU023pMB8GA1UdIwQY
MBaAFHuivphDi5juaKDRuMQURSC9CmI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYt
NDkzNWIzZjVjMjA5LzEvM3JGRXZzMUE5R2tZTjc0N1ZYSEwwMVRUYmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYtNDkzNWIzZjVjMjA5
LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg51gDAN
BgkqhkiG9w0BAQsFAAOCAQEAW9bXLfkdrvmeayiRvm8LyGe0Twh96ooq4Ju/Fq39
SC8q0HmRGzw3hurO623vGEFwIiQwhKufL6sj3EtYw8VA/X+NgsgcoePwiCMq7oWU
zD41GNHEDAUaQQilczYezluZgzd3SlWUDMq3kw637k8/FpXKnHQKGXthn4zSMyLK
5wvu8L9t7LJnwmEQe3n7JfCPMEMtiFlxOiKKdxnCFU2tkcy8wS0lJ9bukTwfRHMz
acl32iuZwW2kJJAQfQUijyTW4ACbfK7R/ba5ZBjnF7/z8T6JJ2c7FJ5EqR8ja3+Y
NZHkAdQARnFOOPyhgnbIbHMnnktESKl+7qhJzxVijnbn3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:26 2024 by rpki-client on console-fra.rpki-client.org