Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/m9Pz4N-vmiKkZLzZJg63tfv4clc.roa
File: m9Pz4N-vmiKkZLzZJg63tfv4clc.roa (raw, json)
Hash identifier: 2qkwh6ednbFTJ2XqzremufQYdWQDCI5bzZLfw+hHKf8=
Subject key identifier: 9B:D3:F3:E0:DF:AF:9A:22:A4:64:BC:D9:26:0E:B7:B5:FB:F8:72:57
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 018CC56E9F7EADCF3C92C1D71615E3F4E3BD
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/m9Pz4N-vmiKkZLzZJg63tfv4clc.roa
Signing time: Mon 01 Jan 2024 14:30:10 +0000
ROA not before: Mon 01 Jan 2024 14:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29691
IP address blocks: 2a05:9a80::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 17:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:9f:7e:ad:cf:3c:92:c1:d7:16:15:e3:f4:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 1 14:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd3f3e0dfaf9a22a464bcd9260eb7b5fbf87257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:43:c4:57:02:f8:e8:ac:d1:8e:20:08:5c:
e6:8e:39:de:ae:a3:66:83:9c:7e:9e:83:95:12:26:
26:08:9a:c1:3c:b1:1c:f6:0e:8a:cd:c7:cd:7a:82:
a9:51:b6:6b:1e:3a:f4:c2:a6:01:90:79:13:78:24:
55:68:ec:17:75:c2:6c:6a:1f:9e:66:26:e2:9d:bf:
89:9a:ab:df:a5:6e:a3:6e:e5:c1:a6:00:7d:5b:57:
c1:92:0a:11:3f:af:55:28:44:d2:2d:8d:ab:ba:00:
e2:93:a7:b8:fd:cf:78:4a:fd:ea:e3:9c:4a:29:c4:
15:63:8f:44:7e:06:d3:4f:e1:d4:16:48:5e:b6:1f:
d4:fc:d3:51:1f:20:b9:6a:3b:fa:ef:8f:83:5d:cc:
01:ac:d7:18:39:fb:27:1e:2c:f0:49:9e:5a:8a:39:
21:9c:b5:47:5d:9a:c9:93:0c:b2:49:3e:2b:69:53:
3a:19:b1:18:5a:f2:d1:59:37:65:fe:6b:8a:69:0c:
13:f3:90:8a:84:f3:ae:bc:d3:af:6c:ac:e9:a1:0c:
84:31:71:92:72:b2:14:5a:a5:0e:ef:99:01:f9:c1:
e7:1c:fa:26:42:b9:da:33:27:91:a2:89:de:74:37:
81:16:23:8d:42:7d:e7:ff:7b:ff:84:25:5a:07:7c:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:F3:E0:DF:AF:9A:22:A4:64:BC:D9:26:0E:B7:B5:FB:F8:72:57
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/m9Pz4N-vmiKkZLzZJg63tfv4clc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
11:44:ab:61:09:01:ed:41:92:ad:7d:e0:62:22:09:7f:df:51:
d3:40:37:be:17:67:de:1d:3c:cd:80:7a:d8:ec:58:56:73:40:
dd:8e:3f:ca:47:03:48:f0:a6:29:c8:77:0d:df:f5:4a:6c:39:
5e:14:27:6b:36:19:c4:28:6c:48:d4:1e:cf:ac:d3:82:a6:b0:
af:69:fe:d1:e7:65:11:fa:ba:b8:ad:29:ef:87:54:cf:2b:f8:
38:0f:85:f8:ba:6b:cc:52:0a:c4:d2:51:db:d6:d8:cb:8a:27:
0a:ae:22:1a:27:96:5e:75:e4:d8:be:45:16:01:3e:2e:68:9a:
9f:91:86:d0:4d:da:c4:0e:a2:f5:90:a0:d3:ba:05:41:96:46:
bc:b1:d6:09:a4:b9:7c:27:47:01:05:6a:67:30:14:4d:3d:25:
e3:07:a7:7a:1f:0a:a8:20:dc:85:10:b7:6c:d3:c3:8e:04:6a:
f3:1a:64:1c:6b:c3:93:f7:f8:67:eb:36:39:9a:9f:d9:c0:82:
d9:76:5b:2a:86:24:29:51:b8:09:38:65:c6:eb:60:ee:38:89:
df:97:a7:97:e3:8a:23:38:77:1e:7d:f2:87:f3:d8:6f:40:13:
42:72:9b:8c:9a:41:96:31:d8:8d:dc:b7:16:f1:ca:9c:85:34:
8d:f1:8c:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFbp9+rc88ksHXFhXj9OO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi
MjJiOTEwHhcNMjQwMTAxMTQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmQzZjNlMGRmYWY5YTIyYTQ2NGJjZDkyNjBlYjdiNWZiZjg3MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UtDxFcC+Ois0Y4gCFzmjjnerqNm
g5x+noOVEiYmCJrBPLEc9g6KzcfNeoKpUbZrHjr0wqYBkHkTeCRVaOwXdcJsah+e
Zibinb+JmqvfpW6jbuXBpgB9W1fBkgoRP69VKETSLY2rugDik6e4/c94Sv3q45xK
KcQVY49EfgbTT+HUFkheth/U/NNRHyC5ajv674+DXcwBrNcYOfsnHizwSZ5aijkh
nLVHXZrJkwyyST4raVM6GbEYWvLRWTdl/muKaQwT85CKhPOuvNOvbKzpoQyEMXGS
crIUWqUO75kB+cHnHPomQrnaMyeRoonedDeBFiONQn3n/3v/hCVaB3yA+wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJvT8+Dfr5oipGS82SYOt7X7+HJXMB8GA1UdIwQY
MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt
NzQzNzY1YmQwZjNlLzEvbTlQejROLXZtaUtrWkx6WkpnNjN0ZnY0Y2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl
LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgWagDAN
BgkqhkiG9w0BAQsFAAOCAQEAEUSrYQkB7UGSrX3gYiIJf99R00A3vhdn3h08zYB6
2OxYVnNA3Y4/ykcDSPCmKch3Dd/1Smw5XhQnazYZxChsSNQez6zTgqawr2n+0edl
Efq6uK0p74dUzyv4OA+F+LprzFIKxNJR29bYy4onCq4iGieWXnXk2L5FFgE+Lmia
n5GG0E3axA6i9ZCg07oFQZZGvLHWCaS5fCdHAQVqZzAUTT0l4weneh8KqCDchRC3
bNPDjgRq8xpkHGvDk/f4Z+s2OZqf2cCC2XZbKoYkKVG4CThlxutg7jiJ35enl+OK
Izh3Hn3yh/PYb0ATQnKbjJpBljHYjdy3FvHKnIU0jfGMMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:52 2024 by rpki-client on console-ams.rpki-client.org