Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/F_D5QRIi4iK5nuKiHXPTS8M2HHA.roa
File: F_D5QRIi4iK5nuKiHXPTS8M2HHA.roa (raw, json)
Hash identifier: HsrOWoXjFXMk8gp4Cnlam4RHE6HZiOOuGzTcWMqmiSg=
Subject key identifier: 17:F0:F9:41:12:22:E2:22:B9:9E:E2:A2:1D:73:D3:4B:C3:36:1C:70
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 018AFC6B313FC5163FF2593E57D0AAE69F29
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/F_D5QRIi4iK5nuKiHXPTS8M2HHA.roa
Signing time: Wed 04 Oct 2023 20:39:57 +0000
ROA not before: Wed 04 Oct 2023 20:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216219
IP address blocks: 2a13:f740::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:6b:31:3f:c5:16:3f:f2:59:3e:57:d0:aa:e6:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Oct 4 20:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f0f9411222e222b99ee2a21d73d34bc3361c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:b4:a0:dc:23:7f:f8:48:ef:db:12:dd:31:
62:84:48:cb:2f:92:e6:1d:f1:cd:3d:de:dd:70:26:
02:c6:f3:f8:16:ff:f8:4d:b9:31:8e:b3:4e:e6:7f:
5d:c0:29:f4:95:a9:a7:48:08:7d:81:99:39:9a:2a:
51:bf:05:c0:ff:ff:6b:5f:b6:b1:43:b9:ee:af:db:
4d:3d:c6:1c:a7:31:79:19:03:16:32:e7:01:9e:e3:
4e:10:30:60:6a:b0:bf:b2:ab:30:57:5a:a3:17:ff:
1e:ea:a9:05:62:a1:85:c7:f7:d5:6b:b3:dc:82:ab:
ac:79:fa:32:c5:17:c3:28:12:ea:20:24:11:df:ff:
88:a4:b7:14:cb:5b:db:4c:4b:a0:b3:6a:e4:b8:d5:
f4:be:d4:94:fd:83:ac:df:1d:da:d1:e8:1f:93:aa:
3c:9b:14:fb:44:14:df:35:46:e5:8d:50:40:93:0a:
60:10:a8:7b:56:50:81:0d:aa:a7:ef:25:7e:49:79:
3f:74:37:8a:00:79:26:59:28:b3:73:ed:51:2e:99:
64:3d:ee:9d:a3:60:df:38:45:a4:e2:35:bf:c7:16:
11:e1:86:17:c0:bb:ee:9b:c1:33:fe:3b:8c:27:92:
ef:4a:f6:0b:28:0d:88:b7:86:f0:1a:53:db:0a:ad:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:F9:41:12:22:E2:22:B9:9E:E2:A2:1D:73:D3:4B:C3:36:1C:70
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/F_D5QRIi4iK5nuKiHXPTS8M2HHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f740::/48
Signature Algorithm: sha256WithRSAEncryption
4b:04:b8:e7:77:3e:b3:8f:7e:93:5a:76:07:3d:4e:74:7b:1e:
2d:06:b3:0a:aa:2e:62:29:2f:3e:91:51:94:a4:e8:a7:83:4a:
1a:a1:9c:e1:f9:a0:6b:76:4c:bb:52:19:9f:ff:fa:05:9c:a8:
79:93:73:d2:62:ac:73:97:60:e3:22:ad:48:ff:9a:22:2f:3d:
98:10:d4:23:be:48:14:5e:f4:9c:92:97:98:21:ca:ec:1c:d6:
d2:05:eb:b9:8d:52:a9:38:83:bf:05:e3:32:f6:b3:37:84:ad:
9d:4f:f1:ad:63:10:38:af:d4:18:66:72:5a:b8:0c:78:29:5a:
ce:ed:38:14:e5:a1:07:e9:69:bb:f8:68:00:c8:b2:0a:e6:eb:
5b:9a:12:f4:7b:b3:cd:76:20:45:0c:07:43:55:c4:bd:d4:0b:
be:25:e5:4f:de:39:86:8c:f2:1b:b3:23:74:a1:b5:f0:5b:1c:
58:da:78:51:1f:3d:5f:6d:2e:51:f3:0c:c7:8e:ec:34:14:ef:
34:e8:91:cb:b7:34:00:f0:7b:83:2a:b2:9e:ad:9c:0b:c6:d3:
df:12:36:bb:46:6b:da:37:c4:85:96:5f:21:a3:0b:d5:ee:5c:
a4:0b:c1:78:ef:6c:bd:a5:2a:59:fa:49:db:03:b0:a6:2c:c5:
cd:ef:bc:2b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYr8azE/xRY/8lk+V9Cq5p8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YThhNjkwMDlhZDJlODkwOTg2YmRkNzZjNjMzYzFiMzFm
MDZmM2EwHhcNMjMxMDA0MjAzOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2YwZjk0MTEyMjJlMjIyYjk5ZWUyYTIxZDczZDM0YmMzMzYxYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXm0oNwjf/hI79sS3TFihEjLL5Lm
HfHNPd7dcCYCxvP4Fv/4TbkxjrNO5n9dwCn0lamnSAh9gZk5mipRvwXA//9rX7ax
Q7nur9tNPcYcpzF5GQMWMucBnuNOEDBgarC/sqswV1qjF/8e6qkFYqGFx/fVa7Pc
gqusefoyxRfDKBLqICQR3/+IpLcUy1vbTEugs2rkuNX0vtSU/YOs3x3a0egfk6o8
mxT7RBTfNUbljVBAkwpgEKh7VlCBDaqn7yV+SXk/dDeKAHkmWSizc+1RLplkPe6d
o2DfOEWk4jW/xxYR4YYXwLvum8Ez/juMJ5LvSvYLKA2It4bwGlPbCq0yOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBfw+UESIuIiuZ7ioh1z00vDNhxwMB8GA1UdIwQY
MBaAFKWoppAJrS6JCYa912xjPBsx8G86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYt
YjEyZWJmMzQ1YmMzLzEvRl9ENVFSSWk0aUs1bnVLaUhYUFRTOE0ySEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jNGRhZGEtMWEyOS00NDlhLTlhYzYtYjEyZWJmMzQ1YmMz
LzEvcGFpbWtBbXRMb2tKaHIzWGJHTThHekh3YnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhP3QAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBLBLjndz6zj36TWnYHPU50ex4tBrMKqi5iKS8+
kVGUpOing0oaoZzh+aBrdky7Uhmf//oFnKh5k3PSYqxzl2DjIq1I/5oiLz2YENQj
vkgUXvSckpeYIcrsHNbSBeu5jVKpOIO/BeMy9rM3hK2dT/GtYxA4r9QYZnJauAx4
KVrO7TgU5aEH6Wm7+GgAyLIK5utbmhL0e7PNdiBFDAdDVcS91Au+JeVP3jmGjPIb
syN0obXwWxxY2nhRHz1fbS5R8wzHjuw0FO806JHLtzQA8HuDKrKerZwLxtPfEja7
RmvaN8SFll8howvV7lykC8F472y9pSpZ+knbA7CmLMXN77wr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:10 2024 by rpki-client on console-ams.rpki-client.org