Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/o3kcRzETTJHkUldcwUlGUybtEhc.roa
File: o3kcRzETTJHkUldcwUlGUybtEhc.roa (raw, json)
Hash identifier: ph3+JbPK2pe7kJdFHfcUkpPpXmW92tVr2f+ME5lL0ac=
Subject key identifier: A3:79:1C:47:31:13:4C:91:E4:52:57:5C:C1:49:46:53:26:ED:12:17
Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial: 01890DAF45DFB4F777585F46AADB1D069DDC
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/o3kcRzETTJHkUldcwUlGUybtEhc.roa
Signing time: Fri 30 Jun 2023 19:02:17 +0000
ROA not before: Fri 30 Jun 2023 19:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199116
IP address blocks: 2a09:6847::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Sep 2023 01:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0d:af:45:df:b4:f7:77:58:5f:46:aa:db:1d:06:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
Validity
Not Before: Jun 30 19:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3791c4731134c91e452575cc149465326ed1217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:e0:d0:9d:d0:29:65:0c:98:8d:cc:74:ff:
9b:29:21:a9:83:e5:05:51:9c:5b:3b:81:3f:f7:36:
1d:93:d8:61:62:7b:cd:46:c3:ff:e8:75:d5:30:5e:
c2:12:7a:89:b7:06:36:f8:b2:9a:a8:3d:09:d6:9b:
59:57:35:74:02:c5:f1:88:67:32:2e:db:95:4b:c6:
fa:45:4b:0b:12:65:fb:ee:cc:81:e6:69:24:55:ad:
4a:c2:6d:c8:94:43:9b:dd:c1:a1:e6:89:b1:7f:f7:
35:0e:7c:6c:7e:2a:19:ef:b7:65:b5:df:ba:b9:2a:
d6:83:52:e6:8c:d8:ed:25:99:80:36:91:28:5f:df:
44:15:2b:f9:04:e6:3f:e9:6e:a9:dc:08:33:6a:fc:
95:a8:67:4c:07:5a:0e:17:a0:a8:23:08:57:67:73:
f2:e1:62:28:09:a4:16:ef:a5:35:fc:e8:0b:90:51:
5c:7e:f3:ad:82:6e:d1:f8:83:2b:56:91:cb:d2:5f:
58:83:ca:d9:d4:d6:04:29:a6:66:2e:2e:76:5e:84:
cb:59:3c:6c:5a:b2:ee:a8:7a:f3:af:85:3a:74:8f:
9b:16:31:5d:6f:b1:f7:e8:b9:bd:97:fd:0a:9b:04:
4d:59:70:cc:76:1a:dd:3a:5c:f5:1a:e1:ed:b6:84:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:1C:47:31:13:4C:91:E4:52:57:5C:C1:49:46:53:26:ED:12:17
X509v3 Authority Key Identifier:
keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/o3kcRzETTJHkUldcwUlGUybtEhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6847::/32
Signature Algorithm: sha256WithRSAEncryption
65:33:f1:3a:6e:e7:27:1c:63:78:f0:3a:76:71:6f:57:fd:fd:
40:49:06:f1:2b:b0:0f:e7:89:30:44:79:8b:17:3b:21:56:92:
a7:b5:50:1f:d6:a0:af:12:7c:c2:d8:f1:1d:e5:57:06:69:71:
75:10:82:08:c2:73:33:30:2a:5f:84:55:d2:68:12:ff:02:74:
52:d9:74:59:41:c6:28:80:31:e4:94:9f:d1:d5:a1:4f:ab:0b:
63:aa:1d:2b:42:be:70:28:21:49:9f:49:08:b2:90:b1:85:5f:
9b:25:89:04:77:71:1b:7e:28:77:24:a1:43:d8:9e:b3:e1:80:
6d:ab:f2:cf:5d:4f:23:b8:7d:5e:d1:fb:4b:0a:35:98:bb:5a:
75:70:a4:97:1b:e8:bd:36:ff:31:c4:1a:16:c5:e7:c5:04:ce:
03:e4:25:10:de:45:dc:08:04:c1:c4:c3:96:f0:94:c1:fa:93:
34:ba:2f:f1:63:cb:f2:54:a4:44:b6:29:28:a1:99:d2:24:38:
19:fc:fe:5c:53:c7:c6:d1:bb:ca:68:d3:cb:0c:ee:40:51:65:
84:78:6c:f5:dc:60:06:13:e0:42:30:54:be:37:ba:cd:c9:9f:
8b:7b:2d:84:c4:33:84:37:36:b2:28:96:34:00:f9:35:af:07:
c9:b6:33:b7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYkNr0XftPd3WF9GqtsdBp3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2QzNzdkZDRjODMwYzI0NmNiNDhhOTM0Njk5Njk5ZTRi
Mzc3NDEwHhcNMjMwNjMwMTkwMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzc5MWM0NzMxMTM0YzkxZTQ1MjU3NWNjMTQ5NDY1MzI2ZWQxMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQHg0J3QKWUMmI3MdP+bKSGpg+UF
UZxbO4E/9zYdk9hhYnvNRsP/6HXVMF7CEnqJtwY2+LKaqD0J1ptZVzV0AsXxiGcy
LtuVS8b6RUsLEmX77syB5mkkVa1Kwm3IlEOb3cGh5omxf/c1DnxsfioZ77dltd+6
uSrWg1LmjNjtJZmANpEoX99EFSv5BOY/6W6p3AgzavyVqGdMB1oOF6CoIwhXZ3Py
4WIoCaQW76U1/OgLkFFcfvOtgm7R+IMrVpHL0l9Yg8rZ1NYEKaZmLi52XoTLWTxs
WrLuqHrzr4U6dI+bFjFdb7H36Lm9l/0KmwRNWXDMdhrdOlz1GuHttoQixwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKN5HEcxE0yR5FJXXMFJRlMm7RIXMB8GA1UdIwQY
MBaAFGZ9N33UyDDCRstIqTRplpnks3dBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEt
MTIxZmY0NjAxOGYzLzEvbzNrY1J6RVRUSkhrVWxkY3dVbEdVeWJ0RWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEtMTIxZmY0NjAxOGYz
LzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgloRzAN
BgkqhkiG9w0BAQsFAAOCAQEAZTPxOm7nJxxjePA6dnFvV/39QEkG8SuwD+eJMER5
ixc7IVaSp7VQH9agrxJ8wtjxHeVXBmlxdRCCCMJzMzAqX4RV0mgS/wJ0Utl0WUHG
KIAx5JSf0dWhT6sLY6odK0K+cCghSZ9JCLKQsYVfmyWJBHdxG34odyShQ9ies+GA
bavyz11PI7h9XtH7Swo1mLtadXCklxvovTb/McQaFsXnxQTOA+QlEN5F3AgEwcTD
lvCUwfqTNLov8WPL8lSkRLYpKKGZ0iQ4Gfz+XFPHxtG7ymjTywzuQFFlhHhs9dxg
BhPgQjBUvje6zcmfi3sthMQzhDc2siiWNAD5Na8HybYztw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-fra.rpki-client.org