Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/jhIFDMtZNbxpuOnXpW-qoNlVF_c.roa
File: jhIFDMtZNbxpuOnXpW-qoNlVF_c.roa (raw, json)
Hash identifier: DtkeC+ZMJMrAmc2227Hgq+Y2P2wWNmiWnBRkHFmYxmI=
Subject key identifier: 8E:12:05:0C:CB:59:35:BC:69:B8:E9:D7:A5:6F:AA:A0:D9:55:17:F7
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 01856F1DA8E79906BB0A0A58E557DBC14689
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/jhIFDMtZNbxpuOnXpW-qoNlVF_c.roa
Signing time: Sun 01 Jan 2023 20:54:52 +0000
ROA not before: Sun 01 Jan 2023 20:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52042
IP address blocks: 2a13:3f81::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jan 2023 22:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a8:e7:99:06:bb:0a:0a:58:e5:57:db:c1:46:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 1 20:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e12050ccb5935bc69b8e9d7a56faaa0d95517f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:da:94:c0:16:0e:6b:f9:1c:a2:40:22:3e:
2a:60:e7:a7:3a:4a:29:31:e1:7c:1c:fb:70:73:2c:
90:d4:9c:0c:59:5d:86:f3:ef:29:6b:02:51:e7:a7:
95:1d:3d:59:41:94:57:ca:e1:61:d6:36:eb:c4:d8:
58:71:07:98:fc:9b:ec:a0:a6:f6:a4:f3:ee:36:95:
66:3a:c7:73:05:3d:20:99:c2:ba:37:99:dd:2e:0d:
99:53:af:9d:c6:5a:fd:fe:e1:8b:09:c0:4e:2a:6c:
58:7c:7f:bd:b2:8f:3f:68:fb:b0:41:7f:71:c1:d6:
e1:6d:b7:99:18:88:30:95:e3:22:5b:9d:c9:21:80:
5a:35:71:bf:75:88:fa:27:a4:ec:e8:ab:34:b8:e6:
f5:cf:cc:e8:ca:c2:7f:c8:c7:f5:a0:0b:a8:3c:dd:
3e:d6:67:b5:41:2c:36:65:c1:8d:4e:be:00:81:ee:
32:7e:d0:b7:91:b1:e1:1e:53:84:1a:b6:9f:7c:53:
93:70:e5:ce:61:25:e7:13:02:89:dd:0e:b8:d3:c1:
25:df:f1:53:1a:c6:21:f6:0b:9d:29:48:76:36:d6:
89:ea:67:62:ca:5e:57:14:ef:4d:f9:e9:9d:a5:96:
27:c8:43:1b:ff:a2:8e:fd:89:6d:c3:5f:e7:96:74:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:05:0C:CB:59:35:BC:69:B8:E9:D7:A5:6F:AA:A0:D9:55:17:F7
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/jhIFDMtZNbxpuOnXpW-qoNlVF_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::-2a13:3f84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:2c:23:f3:b0:bc:40:8b:49:d7:1e:79:c3:45:b9:d5:c0:9d:
77:c4:4f:50:7e:b6:9f:67:d5:d2:2b:f0:fe:21:13:dc:f6:5a:
50:48:88:65:5c:e3:2d:04:43:1d:86:d7:5a:0d:6e:1d:d5:76:
58:8b:80:90:73:f7:7e:0e:ff:2d:60:1c:f8:43:9a:8e:39:0c:
71:75:91:54:8b:cf:6e:7a:89:3a:d0:07:b2:ac:bd:d1:ad:2a:
58:3b:fb:58:b6:47:c0:ef:63:4b:8a:3b:9a:c7:69:7a:ad:40:
48:9f:bd:b1:d3:ce:23:66:a8:ff:11:79:b7:19:9a:34:3f:81:
1d:fa:7b:c9:79:29:29:04:95:32:32:e6:a3:76:9e:3b:18:63:
c9:cd:d7:56:9d:de:28:b2:51:54:d6:54:fe:0f:cd:28:2d:5c:
cd:b5:c1:38:f0:6e:e1:47:44:70:35:c9:9d:65:13:5f:54:d4:
e9:b0:e0:5b:c9:06:a2:bc:59:b9:b6:cd:c3:68:02:1d:6f:f0:
29:a2:c2:a4:ef:8f:1a:d3:66:d0:e5:67:0c:aa:68:e1:5b:33:
d5:89:9e:cb:ad:6f:d2:76:1b:26:77:7b:a1:c0:32:f8:70:69:
1e:fa:09:f9:e7:5f:ca:8f:cb:a5:cb:d4:4d:e8:b2:75:98:a1:
ae:3c:43:32
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYVvHajnmQa7CgpY5VfbwUaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjMwMTAxMjA1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTEyMDUwY2NiNTkzNWJjNjliOGU5ZDdhNTZmYWFhMGQ5NTUxN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssjalMAWDmv5HKJAIj4qYOenOkop
MeF8HPtwcyyQ1JwMWV2G8+8pawJR56eVHT1ZQZRXyuFh1jbrxNhYcQeY/JvsoKb2
pPPuNpVmOsdzBT0gmcK6N5ndLg2ZU6+dxlr9/uGLCcBOKmxYfH+9so8/aPuwQX9x
wdbhbbeZGIgwleMiW53JIYBaNXG/dYj6J6Ts6Ks0uOb1z8zoysJ/yMf1oAuoPN0+
1me1QSw2ZcGNTr4Age4yftC3kbHhHlOEGraffFOTcOXOYSXnEwKJ3Q6408El3/FT
GsYh9gudKUh2NtaJ6mdiyl5XFO9N+emdpZYnyEMb/6KO/Yltw1/nlnQQtQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFI4SBQzLWTW8abjp16VvqqDZVRf3MB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvamhJRkRNdFpOYnhwdU9uWHBXLXFvTmxWRl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqEz+B
AwUAKhM/hDANBgkqhkiG9w0BAQsFAAOCAQEAlSwj87C8QItJ1x55w0W51cCdd8RP
UH62n2fV0ivw/iET3PZaUEiIZVzjLQRDHYbXWg1uHdV2WIuAkHP3fg7/LWAc+EOa
jjkMcXWRVIvPbnqJOtAHsqy90a0qWDv7WLZHwO9jS4o7msdpeq1ASJ+9sdPOI2ao
/xF5txmaND+BHfp7yXkpKQSVMjLmo3aeOxhjyc3XVp3eKLJRVNZU/g/NKC1czbXB
OPBu4UdEcDXJnWUTX1TU6bDgW8kGorxZubbNw2gCHW/wKaLCpO+PGtNm0OVnDKpo
4Vsz1Ymey61v0nYbJnd7ocAy+HBpHvoJ+edfyo/LpcvUTeiydZihrjxDMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org