Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/a849R8xaZuC44b3ymvGqtsyTBWw.roa
File: a849R8xaZuC44b3ymvGqtsyTBWw.roa (raw, json)
Hash identifier: 8gMEPR4EaTOahj9M3q6Y+3874W7XeT9EvGXK3f3xung=
Subject key identifier: 6B:CE:3D:47:CC:5A:66:E0:B8:E1:BD:F2:9A:F1:AA:B6:CC:93:05:6C
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 018665E340FC7284859ECD9569E3D94A2F0B
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/a849R8xaZuC44b3ymvGqtsyTBWw.roa
Signing time: Sat 18 Feb 2023 18:57:17 +0000
ROA not before: Sat 18 Feb 2023 18:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200056
IP address blocks: 2a13:79c7:17a0::/46 maxlen: 46
Validation: Failed, certificate revoked on Sat 25 Feb 2023 21:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:e3:40:fc:72:84:85:9e:cd:95:69:e3:d9:4a:2f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Feb 18 18:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bce3d47cc5a66e0b8e1bdf29af1aab6cc93056c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4f:a5:46:49:71:cd:4a:be:01:6e:c5:e4:71:
77:8c:5b:cb:c9:7f:7a:eb:a1:ac:99:3e:15:d0:66:
d2:ad:9e:4b:f8:b8:7a:28:85:1a:69:e5:55:f6:a8:
68:6a:8a:f2:27:cd:af:68:dd:6b:2a:6f:1a:44:88:
24:9c:b4:10:56:64:c5:f8:45:e5:be:dd:2b:af:44:
13:1b:d9:cb:e9:9d:d3:04:01:09:bb:56:f7:03:be:
20:43:74:43:2f:2e:20:af:86:8f:7e:d5:e7:57:26:
a9:cf:af:ac:18:ec:67:f0:4a:2c:d4:4d:34:de:ff:
8c:be:db:d5:a1:c2:b5:3f:cf:96:6d:e3:1f:96:19:
61:f1:fe:c1:0e:fe:75:15:4a:ee:05:b3:ba:8d:94:
20:4e:20:c6:a9:0a:f5:65:5a:50:a1:70:97:87:70:
7f:98:3c:f2:15:c2:31:92:87:c8:d0:11:c4:df:88:
72:e4:b4:e6:e2:80:63:fc:16:78:79:4d:67:ab:97:
5f:94:9b:28:84:a0:93:b8:ad:ad:92:63:9b:00:55:
1f:31:e9:4e:c3:5d:02:b1:b3:0b:47:fc:cc:2b:55:
31:2b:b5:a6:c0:c7:8d:6c:e0:01:59:df:e8:60:c9:
f2:79:6a:af:a4:f2:04:ae:2f:ae:e9:db:da:64:46:
c9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:3D:47:CC:5A:66:E0:B8:E1:BD:F2:9A:F1:AA:B6:CC:93:05:6C
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/a849R8xaZuC44b3ymvGqtsyTBWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:79c7:17a0::/46
Signature Algorithm: sha256WithRSAEncryption
1e:63:24:e5:ef:73:f8:af:44:92:74:14:e5:2f:b9:8c:d4:51:
8a:68:73:ff:af:d1:27:ed:d2:cf:63:0a:fa:a4:e5:a1:9d:08:
a1:e4:c3:c2:a8:a6:41:eb:15:81:72:e4:95:2c:12:bb:ad:08:
46:49:e6:eb:d0:38:76:48:e3:91:c1:e5:66:2b:d5:5f:14:0c:
b1:2c:b2:5b:27:7d:b7:dd:4a:12:85:49:30:47:e0:8f:1b:af:
88:2d:b1:8e:be:03:30:98:c6:db:32:18:76:87:a2:41:9d:4c:
98:dd:da:c3:85:89:f9:ac:15:58:54:3b:a1:4d:8c:c9:f3:9a:
38:b6:9e:5e:02:b6:51:ba:a0:e0:a0:fe:66:5d:4c:7b:5d:26:
8d:ac:5d:5d:a2:7e:02:6d:fe:04:a4:bc:36:24:14:05:e3:d6:
09:5f:12:23:88:31:29:7d:e6:eb:24:82:62:83:9f:53:23:a9:
82:3b:f9:4e:9e:bf:8d:8e:20:47:eb:0f:30:61:f4:e8:8d:a3:
ab:51:d1:1c:72:1d:83:d7:99:3a:2e:fe:d4:07:85:5c:91:52:
1b:f8:f4:a4:4a:2a:a4:03:af:df:d1:97:6a:68:42:84:49:d4:
24:24:ff:ac:e6:f0:61:d3:20:27:63:24:0a:42:10:99:24:10:
51:e5:67:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZl40D8coSFns2VaePZSi8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTY1ZWE2YjM5YzIyYWVjMmFkMmQ0ZDRjMGEzYTMxM2Rm
MWRlZmEwHhcNMjMwMjE4MTg1NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmNlM2Q0N2NjNWE2NmUwYjhlMWJkZjI5YWYxYWFiNmNjOTMwNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk+lRklxzUq+AW7F5HF3jFvLyX96
66GsmT4V0GbSrZ5L+Lh6KIUaaeVV9qhoaoryJ82vaN1rKm8aRIgknLQQVmTF+EXl
vt0rr0QTG9nL6Z3TBAEJu1b3A74gQ3RDLy4gr4aPftXnVyapz6+sGOxn8Eos1E00
3v+MvtvVocK1P8+WbeMflhlh8f7BDv51FUruBbO6jZQgTiDGqQr1ZVpQoXCXh3B/
mDzyFcIxkofI0BHE34hy5LTm4oBj/BZ4eU1nq5dflJsohKCTuK2tkmObAFUfMelO
w10CsbMLR/zMK1UxK7WmwMeNbOABWd/oYMnyeWqvpPIEri+u6dvaZEbJkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGvOPUfMWmbguOG98prxqrbMkwVsMB8GA1UdIwQY
MBaAFH2WXqaznCKuwq0tTUwKOjE98d76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpaZXByT2NJcTdDclMxTlRBbzZNVDN4M3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kYmIyMmItMmExYS00NzYyLWEwZjct
MzJmNWE5NTA3NzMxLzEvYTg0OVI4eGFadUM0NGIzeW12R3F0c3lUQld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kYmIyMmItMmExYS00NzYyLWEwZjctMzJmNWE5NTA3NzMx
LzEvZlpaZXByT2NJcTdDclMxTlRBbzZNVDN4M3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhN5xxeg
MA0GCSqGSIb3DQEBCwUAA4IBAQAeYyTl73P4r0SSdBTlL7mM1FGKaHP/r9En7dLP
Ywr6pOWhnQih5MPCqKZB6xWBcuSVLBK7rQhGSebr0Dh2SOORweVmK9VfFAyxLLJb
J3233UoShUkwR+CPG6+ILbGOvgMwmMbbMhh2h6JBnUyY3drDhYn5rBVYVDuhTYzJ
85o4tp5eArZRuqDgoP5mXUx7XSaNrF1don4Cbf4EpLw2JBQF49YJXxIjiDEpfebr
JIJig59TI6mCO/lOnr+NjiBH6w8wYfTojaOrUdEcch2D15k6Lv7UB4VckVIb+PSk
SiqkA6/f0ZdqaEKESdQkJP+s5vBh0yAnYyQKQhCZJBBR5Wc4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:37 2024 by rpki-client on console-fra.rpki-client.org