Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/2p0q231j5pkOadC2J9hEDR7PatE.roa
File: 2p0q231j5pkOadC2J9hEDR7PatE.roa (raw, json)
Hash identifier: BTTgNarp/WZFhL9Uk/qjiH+Pbtk/LJ+2O3btD+uYbDQ=
Subject key identifier: DA:9D:2A:DB:7D:63:E6:99:0E:69:D0:B6:27:D8:44:0D:1E:CF:6A:D1
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 0185771E6FC42733DBE38FCBAF350E100FA0
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/2p0q231j5pkOadC2J9hEDR7PatE.roa
Signing time: Tue 03 Jan 2023 10:12:41 +0000
ROA not before: Tue 03 Jan 2023 10:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15776
IP address blocks: 2001:15f8:1000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:1e:6f:c4:27:33:db:e3:8f:cb:af:35:0e:10:0f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 3 10:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9d2adb7d63e6990e69d0b627d8440d1ecf6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:a5:2a:be:c1:69:d0:e6:98:05:98:b1:50:
08:8f:f6:46:fd:bb:66:2d:e9:b9:26:a0:76:61:49:
70:65:0a:29:df:30:5b:20:1f:44:40:67:35:3f:a2:
20:68:98:10:53:bb:41:6f:17:f6:ed:40:27:3d:97:
d7:db:1d:35:ef:76:9a:c3:94:05:ed:8a:c0:d7:88:
e0:84:70:49:fa:fb:e3:ee:51:bc:97:c6:79:3e:52:
f0:ec:15:1a:2a:e6:eb:2a:bf:c1:78:4b:fc:c0:ab:
e8:3c:5d:d0:75:e6:17:5e:90:1e:78:b8:43:7e:2d:
2f:d0:e7:de:f1:02:08:13:c1:78:88:68:e6:a6:22:
f9:ff:86:c4:8f:96:b1:3a:01:db:41:76:ca:5b:f7:
b2:b5:d1:85:a1:81:b3:f6:a9:7c:a0:d0:8a:7d:b2:
69:46:bd:57:0f:a5:2d:6e:a4:48:db:f1:59:7d:04:
a2:f8:2a:08:29:5f:1e:d6:20:16:a5:d1:08:59:10:
aa:73:7b:e6:0e:20:a6:36:eb:eb:f0:98:e0:31:02:
63:55:e3:02:0e:c8:b5:87:66:28:95:11:b5:6f:74:
f1:ac:1c:82:5e:14:6e:f2:1d:20:86:ca:a7:34:03:
45:15:8a:92:36:3b:f3:0b:b6:ed:43:86:76:79:e4:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9D:2A:DB:7D:63:E6:99:0E:69:D0:B6:27:D8:44:0D:1E:CF:6A:D1
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/2p0q231j5pkOadC2J9hEDR7PatE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:15f8:1000::/40
Signature Algorithm: sha256WithRSAEncryption
41:d4:8d:d2:e3:82:49:eb:f9:a6:ca:64:3d:bc:93:dd:65:cc:
d7:d0:bc:11:a3:a5:d5:05:09:76:6b:61:85:6b:9f:f8:69:fe:
e2:0f:2d:95:0b:63:bd:12:fd:ac:74:14:7a:73:e0:e9:e5:f8:
a6:bb:ef:81:4e:fb:36:7c:5f:a3:bb:76:9f:1b:60:b0:fd:2b:
90:ac:02:c7:8e:03:bf:24:36:a0:ea:bd:34:14:35:86:07:61:
56:4f:81:33:fe:10:8c:e5:12:ab:84:69:22:27:a0:e8:c6:b3:
90:bc:b7:95:9c:72:37:08:ab:5c:47:05:db:0d:47:3a:f4:82:
b1:0e:22:5d:23:cb:2d:d3:dd:3b:8c:49:f0:6c:8a:fb:e5:1c:
81:bc:5a:19:be:97:f4:8b:5b:c9:1f:17:83:63:32:40:87:63:
61:2d:d9:c1:24:96:34:56:b5:a3:b8:05:ff:02:61:c6:4d:ec:
3e:14:a3:2e:91:dc:64:24:95:92:f7:7d:2f:15:5d:36:8b:80:
e3:ce:9e:30:6c:d1:f5:95:9b:19:fb:53:28:df:77:e2:90:77:
c1:2c:6c:aa:17:93:3a:ad:b9:1c:84:1d:25:a2:a2:95:43:ad:
a7:29:52:6f:76:df:46:34:db:5c:a8:79:cf:24:4a:5a:3e:bd:
8b:b2:40:92
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYV3Hm/EJzPb44/LrzUOEA+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy
MmY0NGIwHhcNMjMwMTAzMTAxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTlkMmFkYjdkNjNlNjk5MGU2OWQwYjYyN2Q4NDQwZDFlY2Y2YWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HylKr7BadDmmAWYsVAIj/ZG/btm
Lem5JqB2YUlwZQop3zBbIB9EQGc1P6IgaJgQU7tBbxf27UAnPZfX2x0173aaw5QF
7YrA14jghHBJ+vvj7lG8l8Z5PlLw7BUaKubrKr/BeEv8wKvoPF3QdeYXXpAeeLhD
fi0v0Ofe8QIIE8F4iGjmpiL5/4bEj5axOgHbQXbKW/eytdGFoYGz9ql8oNCKfbJp
Rr1XD6UtbqRI2/FZfQSi+CoIKV8e1iAWpdEIWRCqc3vmDiCmNuvr8JjgMQJjVeMC
Dsi1h2YolRG1b3TxrByCXhRu8h0ghsqnNANFFYqSNjvzC7btQ4Z2eeQMGwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNqdKtt9Y+aZDmnQtifYRA0ez2rRMB8GA1UdIwQY
MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt
NzZjMDVjZjVmMmU2LzEvMnAwcTIzMWo1cGtPYWRDMko5aEVEUjdQYXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2
LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEV+BAw
DQYJKoZIhvcNAQELBQADggEBAEHUjdLjgknr+abKZD28k91lzNfQvBGjpdUFCXZr
YYVrn/hp/uIPLZULY70S/ax0FHpz4Onl+Ka774FO+zZ8X6O7dp8bYLD9K5CsAseO
A78kNqDqvTQUNYYHYVZPgTP+EIzlEquEaSInoOjGs5C8t5WccjcIq1xHBdsNRzr0
grEOIl0jyy3T3TuMSfBsivvlHIG8Whm+l/SLW8kfF4NjMkCHY2Et2cEkljRWtaO4
Bf8CYcZN7D4Uoy6R3GQklZL3fS8VXTaLgOPOnjBs0fWVmxn7Uyjfd+KQd8EsbKoX
kzqtuRyEHSWiopVDracpUm9230Y021yoec8kSlo+vYuyQJI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:54 2024 by rpki-client on console-ams.rpki-client.org