Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/u1cHeHNhdCHPHoL6TCHzw2-URr0.roa
File: u1cHeHNhdCHPHoL6TCHzw2-URr0.roa (raw, json)
Hash identifier: qQvUS+P+UbQ+HbAUphp3cp1nI9GIQDUJJmuGb3coXU0=
Subject key identifier: BB:57:07:78:73:61:74:21:CF:1E:82:FA:4C:21:F3:C3:6F:94:46:BD
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019310968B35CCBF48C7F0CD7B9FA0831360
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/u1cHeHNhdCHPHoL6TCHzw2-URr0.roa
Signing time: Sat 09 Nov 2024 11:02:01 +0000
ROA not before: Sat 09 Nov 2024 11:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203466
IP address blocks: 213.134.13.0/24 maxlen: 24
2a06:f940:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 11 Nov 2024 09:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:96:8b:35:cc:bf:48:c7:f0:cd:7b:9f:a0:83:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Nov 9 11:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb57077873617421cf1e82fa4c21f3c36f9446bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:54:74:74:29:ba:1f:9e:3d:f2:44:92:2a:
f1:9c:c7:0b:f9:c2:1d:1d:1e:1b:c5:b1:00:1f:f1:
4f:9a:9c:89:37:b6:e4:36:d9:45:66:05:72:2b:05:
0e:5f:03:3c:4d:7e:4d:d4:12:f3:a7:44:0b:8c:e3:
59:b4:90:26:de:54:c0:53:7d:e1:2f:0a:46:9f:05:
78:1a:45:16:cf:62:14:34:fd:d8:d1:44:9b:4e:8f:
6d:07:ab:02:02:67:e6:f3:f7:87:9a:a0:7a:cb:83:
12:fd:62:13:19:64:e0:d5:7f:43:44:0f:8a:ea:e7:
c9:0d:b0:7c:7c:8e:1e:e1:09:d5:b5:95:b2:96:6e:
8e:c0:88:a5:6f:48:9c:27:24:29:64:fe:c4:b5:98:
37:4e:6d:53:e6:27:71:29:ad:32:13:0a:bc:88:ca:
09:e5:33:90:c3:50:59:1c:31:c1:43:ed:b0:89:ae:
80:7f:d2:c7:95:8e:7c:56:0c:a8:10:ce:29:43:b8:
bc:2e:3a:aa:65:a0:2a:13:7f:72:c5:1c:1b:6a:71:
b8:b5:48:d5:22:56:64:9d:c9:91:8c:3d:40:0b:fe:
12:50:2d:b4:15:9e:7f:da:40:fb:92:51:c1:fe:48:
6a:54:79:96:52:bf:c5:6a:bd:65:c3:eb:69:cd:20:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:07:78:73:61:74:21:CF:1E:82:FA:4C:21:F3:C3:6F:94:46:BD
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/u1cHeHNhdCHPHoL6TCHzw2-URr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.13.0/24
IPv6:
2a06:f940:1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:a4:cb:b5:83:0e:54:36:b1:30:90:fa:db:e7:11:c0:6d:64:
68:24:49:27:9a:9f:cb:46:b8:6a:f0:45:2b:49:22:ac:e2:f5:
ea:f5:2b:7f:36:e8:f6:77:c4:35:74:09:86:9e:37:09:e2:ba:
32:64:68:aa:be:48:06:53:b2:c0:ae:5d:fa:a9:ca:4f:06:da:
ab:93:69:59:63:62:64:61:ef:7d:94:69:02:15:ac:a7:90:e4:
d0:f2:26:97:b5:d7:c5:2c:cb:f4:b4:7d:f8:6c:8a:96:9d:ab:
3a:bc:7a:3e:af:09:c7:4e:19:17:a4:39:0b:f1:d5:61:3b:99:
a4:94:5d:c3:0b:91:66:07:fa:c6:4a:0e:c2:65:70:15:94:97:
de:aa:73:51:02:c0:98:00:99:36:44:d4:38:9e:d0:f1:db:2b:
e1:fb:17:8c:a1:f9:1d:52:47:9d:74:b4:2d:cb:72:ba:84:9f:
9e:89:4d:ff:2b:c1:66:8d:71:aa:91:5f:35:d5:04:f7:30:e6:
b1:25:2f:8d:86:7d:89:39:54:de:32:07:46:a5:74:6f:9e:b1:
5a:34:5f:73:7b:fa:86:22:85:90:a6:3a:a3:81:c9:bf:7e:14:
da:d6:8d:98:69:58:70:9e:ea:0f:13:cf:c1:7e:a1:cc:0a:a7:
7e:e4:54:1a
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZMQlos1zL9Ix/DNe5+ggxNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjQxMTA5MTEwMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjU3MDc3ODczNjE3NDIxY2YxZTgyZmE0YzIxZjNjMzZmOTQ0NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoJUdHQpuh+ePfJEkirxnMcL+cId
HR4bxbEAH/FPmpyJN7bkNtlFZgVyKwUOXwM8TX5N1BLzp0QLjONZtJAm3lTAU33h
LwpGnwV4GkUWz2IUNP3Y0USbTo9tB6sCAmfm8/eHmqB6y4MS/WITGWTg1X9DRA+K
6ufJDbB8fI4e4QnVtZWylm6OwIilb0icJyQpZP7EtZg3Tm1T5idxKa0yEwq8iMoJ
5TOQw1BZHDHBQ+2wia6Af9LHlY58VgyoEM4pQ7i8LjqqZaAqE39yxRwbanG4tUjV
IlZkncmRjD1AC/4SUC20FZ5/2kD7klHB/khqVHmWUr/Far1lw+tpzSDYJwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFLtXB3hzYXQhzx6C+kwh88NvlEa9MB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xL3UxY0hlSE5oZENIUEhvTDZUQ0h6dzItVVJyMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADVhg0w
DwQCAAIwCQMHACoG+UAAATANBgkqhkiG9w0BAQsFAAOCAQEAqqTLtYMOVDaxMJD6
2+cRwG1kaCRJJ5qfy0a4avBFK0kirOL16vUrfzbo9nfENXQJhp43CeK6MmRoqr5I
BlOywK5d+qnKTwbaq5NpWWNiZGHvfZRpAhWsp5Dk0PIml7XXxSzL9LR9+GyKlp2r
Orx6Pq8Jx04ZF6Q5C/HVYTuZpJRdwwuRZgf6xkoOwmVwFZSX3qpzUQLAmACZNkTU
OJ7Q8dsr4fsXjKH5HVJHnXS0LctyuoSfnolN/yvBZo1xqpFfNdUE9zDmsSUvjYZ9
iTlU3jIHRqV0b56xWjRfc3v6hiKFkKY6o4HJv34U2taNmGlYcJ7qDxPPwX6hzAqn
fuRUGg==
Generated at Mon Nov 11 12:47:38 2024 by rpki-client on console-fra.rpki-client.org