Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/Lt1lAZQ8OeC1f6Nt6Lixo_VDnt8.roa
File: Lt1lAZQ8OeC1f6Nt6Lixo_VDnt8.roa (raw, json)
Hash identifier: L3EJghwXE3HHN7l63wF1W5h8dCD4BaeBtMtOes2zbI8=
Subject key identifier: 2E:DD:65:01:94:3C:39:E0:B5:7F:A3:6D:E8:B8:B1:A3:F5:43:9E:DF
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 0185F359AE3DCD69E109FD502FA8968986B1
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/Lt1lAZQ8OeC1f6Nt6Lixo_VDnt8.roa
Signing time: Fri 27 Jan 2023 13:10:18 +0000
ROA not before: Fri 27 Jan 2023 13:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 2001:2000:3000::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:59:ae:3d:cd:69:e1:09:fd:50:2f:a8:96:89:86:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 27 13:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2edd6501943c39e0b57fa36de8b8b1a3f5439edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:d2:90:ff:38:ee:73:27:5e:40:8c:b3:a7:
97:7a:ba:13:96:1f:32:6a:ab:31:50:7a:27:ad:06:
60:9e:45:56:11:eb:3c:1a:92:f0:53:2e:bd:79:d0:
f8:3d:ac:2c:5e:56:a5:af:55:30:8d:e6:da:0b:42:
7e:f2:fc:21:9d:65:d3:4c:d6:31:5a:9c:e6:7d:d6:
f1:2c:c0:a5:86:0d:fb:59:4f:8e:ca:39:76:9d:02:
01:2e:41:24:2e:45:4c:b3:ae:bc:a7:08:4e:3f:c6:
57:03:9a:ff:42:dc:3d:eb:65:12:d3:88:0a:3d:a8:
a2:5f:4b:75:ba:5e:d4:9a:f8:c0:fd:1d:5c:3e:93:
d1:3b:a7:04:3c:80:4c:ff:bd:c6:9b:63:65:8b:c8:
fe:84:ba:61:2d:2c:47:84:61:ec:c0:0c:59:5c:92:
2f:58:41:32:59:46:59:b0:06:4e:18:aa:45:3d:a5:
c1:90:c4:b6:ee:28:df:6c:9a:17:67:a6:9e:92:86:
9a:c1:ba:fd:9e:f1:39:d1:4c:6d:33:2c:63:09:71:
1a:da:75:84:5e:c1:26:cf:e7:81:02:c4:74:4a:45:
94:c1:d0:7d:be:88:d8:bb:22:53:f3:3c:93:4d:40:
a3:2c:e4:34:ee:b8:63:25:49:5f:63:20:26:51:9e:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:65:01:94:3C:39:E0:B5:7F:A3:6D:E8:B8:B1:A3:F5:43:9E:DF
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/Lt1lAZQ8OeC1f6Nt6Lixo_VDnt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2000:3000::/40
Signature Algorithm: sha256WithRSAEncryption
18:3f:a4:f4:c7:44:32:30:d6:9b:3b:5a:69:5e:12:85:ef:82:
e6:b1:f5:9b:f5:58:08:2b:8b:f4:69:fe:2a:1f:dc:25:dc:c8:
ef:04:d3:38:dc:09:92:ac:eb:89:77:49:7d:74:c3:91:36:7e:
16:04:a8:11:83:4f:08:40:29:8f:b2:43:7f:84:f5:32:a7:fd:
eb:81:64:73:3c:06:03:a1:d4:2b:cb:7c:4f:46:9a:47:b2:83:
76:d6:c3:be:45:c5:e3:11:6b:38:9c:93:2c:72:e6:fa:a5:d2:
ea:9d:c0:1a:2f:38:12:60:02:c6:42:f2:5a:6d:37:ed:2c:aa:
01:2a:01:34:47:ba:6d:9d:6f:04:48:2a:a7:0c:ae:b1:47:75:
8a:48:4a:7a:f1:3d:9e:2e:bd:ab:20:15:d8:cc:c5:22:cf:40:
4a:68:83:cc:9a:bb:26:27:e5:e3:a5:51:8c:c0:8d:8d:5e:40:
be:ec:92:40:38:2a:cc:12:11:c1:99:f7:35:85:9c:4c:8b:26:
b9:c8:aa:db:d9:4c:9b:23:87:3a:59:13:6b:7f:c5:87:e3:f9:
bd:0d:89:c8:db:23:84:28:ec:d7:78:94:4c:41:fe:78:9c:2d:
38:74:75:c6:95:a5:af:3e:b2:21:3d:16:ba:6a:90:63:f0:40:
f5:ae:3b:5c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYXzWa49zWnhCf1QL6iWiYaxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjMwMTI3MTMxMDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWRkNjUwMTk0M2MzOWUwYjU3ZmEzNmRlOGI4YjFhM2Y1NDM5ZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPnSkP847nMnXkCMs6eXeroTlh8y
aqsxUHonrQZgnkVWEes8GpLwUy69edD4PawsXlalr1UwjebaC0J+8vwhnWXTTNYx
WpzmfdbxLMClhg37WU+Oyjl2nQIBLkEkLkVMs668pwhOP8ZXA5r/Qtw962US04gK
PaiiX0t1ul7UmvjA/R1cPpPRO6cEPIBM/73Gm2Nli8j+hLphLSxHhGHswAxZXJIv
WEEyWUZZsAZOGKpFPaXBkMS27ijfbJoXZ6aekoaawbr9nvE50UxtMyxjCXEa2nWE
XsEmz+eBAsR0SkWUwdB9vojYuyJT8zyTTUCjLOQ07rhjJUlfYyAmUZ6fDwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFC7dZQGUPDngtX+jbei4saP1Q57fMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTHQxbEFaUThPZUMxZjZOdDZMaXhvX1ZEbnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEgADAw
DQYJKoZIhvcNAQELBQADggEBABg/pPTHRDIw1ps7WmleEoXvguax9Zv1WAgri/Rp
/iof3CXcyO8E0zjcCZKs64l3SX10w5E2fhYEqBGDTwhAKY+yQ3+E9TKn/euBZHM8
BgOh1CvLfE9Gmkeyg3bWw75FxeMRazickyxy5vql0uqdwBovOBJgAsZC8lptN+0s
qgEqATRHum2dbwRIKqcMrrFHdYpISnrxPZ4uvasgFdjMxSLPQEpog8yauyYn5eOl
UYzAjY1eQL7skkA4KswSEcGZ9zWFnEyLJrnIqtvZTJsjhzpZE2t/xYfj+b0Nicjb
I4Qo7Nd4lExB/nicLTh0dcaVpa8+siE9FrpqkGPwQPWuO1w=
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:34 2024 by rpki-client on console.sobornost.net