Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/lN8lHqfg7G_ViSnQGN9_x6SRrxA.roa
File: lN8lHqfg7G_ViSnQGN9_x6SRrxA.roa (raw, json)
Hash identifier: B6aHByCglRnu10TRGbVDGS52FbrhDxzUPbR9lbQAjFM=
Subject key identifier: 94:DF:25:1E:A7:E0:EC:6F:D5:89:29:D0:18:DF:7F:C7:A4:91:AF:10
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 018B85206B54B4317A0F2EFB88B01BD85DF2
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/lN8lHqfg7G_ViSnQGN9_x6SRrxA.roa
Signing time: Tue 31 Oct 2023 09:46:16 +0000
ROA not before: Tue 31 Oct 2023 09:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216063
IP address blocks: 2a12:de40:20::/48 maxlen: 48
2a12:de40:21::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Oct 2023 14:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:20:6b:54:b4:31:7a:0f:2e:fb:88:b0:1b:d8:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Oct 31 09:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94df251ea7e0ec6fd58929d018df7fc7a491af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:a0:75:55:cc:75:e4:b6:6b:0d:16:08:9d:
17:85:a1:9c:2c:57:89:d0:09:6c:40:a5:68:88:7a:
9a:c6:49:db:a8:9a:c6:2c:35:fc:9c:47:b5:7d:4b:
dd:9a:ad:f2:8a:6c:5c:04:8c:20:3f:95:3b:98:11:
5c:3b:ae:e9:ac:32:00:37:89:12:36:36:c6:03:e4:
a7:ea:38:d1:f0:5d:61:e2:4b:b0:f4:fe:b0:3e:19:
e3:a4:bc:df:99:3d:3f:65:e4:72:ef:7e:5e:3e:be:
11:10:6f:23:86:80:20:f8:58:84:6e:ac:14:91:3a:
c2:f6:2d:f7:fe:4c:74:2c:8a:73:ac:82:57:2f:7e:
27:9d:c9:ae:0c:43:59:8d:28:0c:f7:51:c3:90:55:
5a:59:65:53:b9:a5:95:f5:ea:84:5c:0a:d0:ff:f4:
07:29:d5:4f:c8:c1:5e:69:e2:4d:ee:85:1f:ab:ff:
21:70:28:ae:ea:71:6b:8d:02:6c:e9:a4:af:a0:ad:
14:ec:a9:88:cc:fb:fb:fa:8c:9c:f6:65:e6:9a:7b:
2e:aa:f2:5d:b3:be:e3:06:25:86:2d:b2:e2:59:c8:
25:9b:12:c5:6a:1b:47:83:00:8a:9b:9e:17:2f:8e:
6c:66:d7:a4:e8:8c:ff:e4:1d:68:2d:25:14:cd:17:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:25:1E:A7:E0:EC:6F:D5:89:29:D0:18:DF:7F:C7:A4:91:AF:10
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/lN8lHqfg7G_ViSnQGN9_x6SRrxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:20::/47
Signature Algorithm: sha256WithRSAEncryption
5c:ce:6f:d2:7b:bd:af:1d:1f:64:f5:d5:84:41:ff:1b:83:41:
c2:1e:cd:30:29:b5:a9:4d:cd:8f:b8:27:a5:6b:d5:03:56:c7:
01:79:63:6f:20:c9:72:62:7c:8c:9b:23:b6:94:12:b3:a3:78:
76:f5:d2:93:7a:5a:8e:82:b5:23:e3:8b:36:0a:93:6d:42:09:
2b:e4:91:14:94:b3:36:6c:3d:55:5a:b4:88:dc:4f:f8:35:db:
29:68:c0:22:fd:14:dd:2d:8d:1a:13:a2:51:dc:f0:83:5a:36:
d3:90:22:6c:de:c7:0b:7e:05:16:4a:24:68:76:b3:bb:e1:42:
d6:37:97:6e:3a:54:14:7b:4b:ff:47:68:6f:47:e6:2f:85:fa:
b3:ef:c7:b8:5b:b3:db:8f:ab:c2:52:40:9a:cd:c0:c6:a5:39:
a3:9d:03:05:53:e3:e6:f2:88:eb:7e:da:4e:9a:0f:25:7a:ec:
d8:d3:dd:cd:6e:19:2c:bd:78:f9:1a:e2:4e:18:4c:6e:d7:dc:
34:a4:15:ca:16:bb:79:29:23:6a:09:9f:26:51:08:fb:eb:d7:
4c:0c:7c:f6:37:d8:72:7f:1a:2e:6c:19:75:72:26:25:4b:1d:
43:7e:54:60:65:e1:b6:39:6f:9b:a1:91:1b:9b:08:05:8b:cc:
17:4c:7b:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYuFIGtUtDF6Dy77iLAb2F3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjMxMDMxMDk0NjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGRmMjUxZWE3ZTBlYzZmZDU4OTI5ZDAxOGRmN2ZjN2E0OTFhZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fOgdVXMdeS2aw0WCJ0XhaGcLFeJ
0AlsQKVoiHqaxknbqJrGLDX8nEe1fUvdmq3yimxcBIwgP5U7mBFcO67prDIAN4kS
NjbGA+Sn6jjR8F1h4kuw9P6wPhnjpLzfmT0/ZeRy735ePr4REG8jhoAg+FiEbqwU
kTrC9i33/kx0LIpzrIJXL34nncmuDENZjSgM91HDkFVaWWVTuaWV9eqEXArQ//QH
KdVPyMFeaeJN7oUfq/8hcCiu6nFrjQJs6aSvoK0U7KmIzPv7+oyc9mXmmnsuqvJd
s77jBiWGLbLiWcglmxLFahtHgwCKm54XL45sZtek6Iz/5B1oLSUUzRfqLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJTfJR6n4Oxv1Ykp0Bjff8ekka8QMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvbE44bEhxZmc3R19WaVNuUUdOOV94NlNScnhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhLeQAAg
MA0GCSqGSIb3DQEBCwUAA4IBAQBczm/Se72vHR9k9dWEQf8bg0HCHs0wKbWpTc2P
uCela9UDVscBeWNvIMlyYnyMmyO2lBKzo3h29dKTelqOgrUj44s2CpNtQgkr5JEU
lLM2bD1VWrSI3E/4NdspaMAi/RTdLY0aE6JR3PCDWjbTkCJs3scLfgUWSiRodrO7
4ULWN5duOlQUe0v/R2hvR+Yvhfqz78e4W7Pbj6vCUkCazcDGpTmjnQMFU+Pm8ojr
ftpOmg8leuzY093NbhksvXj5GuJOGExu19w0pBXKFrt5KSNqCZ8mUQj769dMDHz2
N9hyfxoubBl1ciYlSx1DflRgZeG2OW+boZEbmwgFi8wXTHuH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org