Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/exV4lSHwLanevlo0pSLc25mT4Do.roa
File: exV4lSHwLanevlo0pSLc25mT4Do.roa (raw, json)
Hash identifier: YWOjGciNrBbLpHYT8xz2UrsY2+zUBhUdNKSkzXRLzZg=
Subject key identifier: 7B:15:78:95:21:F0:2D:A9:DE:BE:5A:34:A5:22:DC:DB:99:93:E0:3A
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 01856F9DB205EF54981F23AEAD23A8FEF25D
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/exV4lSHwLanevlo0pSLc25mT4Do.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29018
IP address blocks: 2a0b:1306:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b2:05:ef:54:98:1f:23:ae:ad:23:a8:fe:f2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b15789521f02da9debe5a34a522dcdb9993e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:2d:f2:c9:a1:24:6e:9c:80:e1:a9:cd:f1:
81:6b:98:a9:5d:b0:0e:5d:ee:fb:05:57:46:49:71:
e3:9c:55:3f:eb:f5:2e:04:86:d2:3c:96:ad:ed:b2:
7a:74:57:02:78:18:e9:7f:53:83:20:ff:4e:91:b8:
7a:3c:64:a7:6c:b1:0a:a1:5a:c9:cb:07:fd:07:e1:
83:3f:72:b0:19:11:42:89:57:28:79:42:12:28:6d:
d8:58:4d:fa:80:e6:ef:bf:a8:7d:c7:cb:ac:09:a5:
e8:cf:65:cb:33:44:3f:6f:5c:8a:db:ad:97:a4:9e:
dc:2e:95:9a:47:6b:64:5e:3d:51:20:d7:9d:71:ae:
2c:30:78:20:44:07:42:91:c2:35:4c:9f:87:e9:38:
fc:50:bc:65:6a:b6:a1:d9:e7:42:ae:6c:7e:8b:87:
55:38:52:7b:6d:5a:63:f8:46:fc:a1:41:66:a4:94:
fe:07:74:3f:cf:7d:9d:ae:13:27:41:9d:5e:1e:7a:
2c:1f:c4:ff:09:70:62:9b:09:53:b9:8e:5c:68:57:
bb:2d:e4:c1:ff:63:cf:bb:e2:30:95:c8:43:fc:1b:
47:16:f9:4f:b9:ef:7e:8f:5e:f2:7f:ac:6b:0f:13:
90:9d:0a:cb:97:ed:6d:c3:9c:ef:25:9b:b3:c7:b4:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:78:95:21:F0:2D:A9:DE:BE:5A:34:A5:22:DC:DB:99:93:E0:3A
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/exV4lSHwLanevlo0pSLc25mT4Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1306:3::/48
Signature Algorithm: sha256WithRSAEncryption
30:02:09:9a:a4:74:21:d1:b9:fa:c1:33:8e:e0:64:e1:b2:be:
ea:3b:38:f0:c4:99:2c:09:2e:85:a0:18:5f:33:ac:28:76:58:
af:5e:38:fe:45:ed:9a:6c:0b:79:34:c8:e3:72:6f:c8:a1:61:
41:bc:a0:26:a4:5b:1d:35:93:26:c9:31:16:62:9b:d8:43:6e:
fe:79:db:85:dd:10:c8:3b:a7:e4:dd:c7:67:ba:be:df:cc:c8:
b6:9f:8f:60:cb:2e:71:d8:a2:78:9e:9e:c9:f5:2c:66:3f:a6:
92:cb:5c:96:82:64:f0:ea:7f:50:c0:cb:32:d9:1b:47:7f:b2:
0e:f4:11:37:11:c6:c4:c9:55:59:5a:a3:2d:07:9b:df:79:f0:
c8:4a:8b:c2:ca:09:45:8e:f8:35:49:0d:f3:48:79:5d:d7:c6:
02:7f:fd:da:77:41:a8:b7:8a:a1:53:02:61:fb:b4:fb:5c:bf:
c5:30:d4:4b:6a:8b:65:02:09:d3:15:f5:51:72:14:1e:bc:d4:
d7:8d:d6:e8:91:17:7b:5c:c8:6b:89:ff:bc:a9:dd:db:97:0f:
c0:03:0e:9a:0e:29:99:4b:6f:9e:c9:fb:4c:cf:b6:61:b7:f1:
24:67:3f:26:91:b2:2c:1e:11:4b:95:df:6d:0e:05:c1:d7:2e:
dc:db:e3:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvnbIF71SYHyOurSOo/vJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez
ZDg2MTQwHhcNMjMwMTAxMjMxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjE1Nzg5NTIxZjAyZGE5ZGViZTVhMzRhNTIyZGNkYjk5OTNlMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbot8smhJG6cgOGpzfGBa5ipXbAO
Xe77BVdGSXHjnFU/6/UuBIbSPJat7bJ6dFcCeBjpf1ODIP9Okbh6PGSnbLEKoVrJ
ywf9B+GDP3KwGRFCiVcoeUISKG3YWE36gObvv6h9x8usCaXoz2XLM0Q/b1yK262X
pJ7cLpWaR2tkXj1RINedca4sMHggRAdCkcI1TJ+H6Tj8ULxlarah2edCrmx+i4dV
OFJ7bVpj+Eb8oUFmpJT+B3Q/z32drhMnQZ1eHnosH8T/CXBimwlTuY5caFe7LeTB
/2PPu+IwlchD/BtHFvlPue9+j17yf6xrDxOQnQrLl+1tw5zvJZuzx7RK7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHsVeJUh8C2p3r5aNKUi3NuZk+A6MB8GA1UdIwQY
MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct
YmMwZTUxMWMyMGNlLzEvZXhWNGxTSHdMYW5ldmxvMHBTTGMyNW1UNERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl
LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsTBgAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAwAgmapHQh0bn6wTOO4GThsr7qOzjwxJksCS6F
oBhfM6wodlivXjj+Re2abAt5NMjjcm/IoWFBvKAmpFsdNZMmyTEWYpvYQ27+eduF
3RDIO6fk3cdnur7fzMi2n49gyy5x2KJ4np7J9SxmP6aSy1yWgmTw6n9QwMsy2RtH
f7IO9BE3EcbEyVVZWqMtB5vfefDISovCyglFjvg1SQ3zSHld18YCf/3ad0Got4qh
UwJh+7T7XL/FMNRLaotlAgnTFfVRchQevNTXjdbokRd7XMhrif+8qd3blw/AAw6a
DimZS2+eyftMz7Zht/EkZz8mkbIsHhFLld9tDgXB1y7c2+Nh
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:00 2024 by rpki-client on console-ams.rpki-client.org