Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/9EdFnk8wZ_ijoL2NJTGN-9zGpi4.roa
File: 9EdFnk8wZ_ijoL2NJTGN-9zGpi4.roa (raw, json)
Hash identifier: bl3w4Eq3HzhtWKobnkB0OJaSn/4OPxT+L3FBO17Rtdg=
Subject key identifier: F4:47:45:9E:4F:30:67:F8:A3:A0:BD:8D:25:31:8D:FB:DC:C6:A6:2E
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC91845C548FD09F79748B9BB6FD8
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/9EdFnk8wZ_ijoL2NJTGN-9zGpi4.roa
Signing time: Sun 01 Jan 2023 07:14:43 +0000
ROA not before: Sun 01 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24940
IP address blocks: 2a0d:2146:8180::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c9:18:45:c5:48:fd:09:f7:97:48:b9:bb:6f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f447459e4f3067f8a3a0bd8d25318dfbdcc6a62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:90:90:9b:94:2b:65:21:f2:d4:7f:99:01:
8a:4e:d9:a7:0b:e8:61:44:60:9f:09:d8:a1:a9:1a:
b3:94:ba:eb:c1:96:db:84:37:05:7f:c6:e4:18:83:
68:8e:91:da:b4:fa:1d:32:48:00:29:e2:ae:2f:5b:
4a:13:bb:20:68:bb:6c:30:34:43:45:44:6b:1e:bf:
6c:db:1e:39:e1:e6:12:0f:09:4f:38:58:e5:56:fd:
9f:c0:94:98:aa:6d:28:6e:80:de:57:46:20:b0:c7:
04:b7:ee:c7:19:b8:d9:b0:09:a2:a4:59:41:dd:4c:
7d:75:1c:9c:65:ed:00:94:20:0d:76:31:8c:3a:4b:
fb:70:a3:82:dc:29:5c:c8:70:72:1e:e9:a2:ef:65:
84:55:ea:a2:9c:e3:e1:4e:b8:06:59:07:f5:11:12:
70:d3:a1:6a:11:a9:df:b1:25:5a:0b:02:ed:98:a4:
51:db:8a:3c:d5:e6:f8:39:e5:b5:93:21:c0:b7:ab:
c5:14:09:e1:72:82:df:5b:c5:92:ff:b4:88:00:a5:
47:ca:a4:e3:ea:de:dc:97:75:a3:ef:92:28:21:2a:
ff:df:9d:a3:d2:e8:e2:34:d0:32:f3:39:96:e1:9a:
70:e4:eb:2d:f1:6e:87:b3:5d:a3:87:96:dd:38:43:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:45:9E:4F:30:67:F8:A3:A0:BD:8D:25:31:8D:FB:DC:C6:A6:2E
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/9EdFnk8wZ_ijoL2NJTGN-9zGpi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8180::/44
Signature Algorithm: sha256WithRSAEncryption
7a:24:ca:12:b7:e5:3e:ef:ba:56:ac:63:50:78:e4:70:5c:d6:
04:f5:32:4d:ba:4c:1a:d3:44:a6:cb:89:b8:d4:3c:b8:ed:1b:
c1:a2:48:5c:70:1c:e4:77:74:aa:0a:9c:4b:15:a8:39:8c:b6:
45:a0:b3:d9:f2:b6:b8:8d:28:8f:10:10:45:af:ab:0f:f0:31:
5b:93:32:df:76:cc:fa:bd:47:aa:46:5d:46:45:9f:e6:1b:e1:
06:d0:91:e3:4f:93:6b:9b:b5:7f:68:d8:b7:b2:36:76:45:03:
00:11:2e:f0:2e:b4:8a:f5:58:f4:35:fe:5f:a1:55:c8:00:fe:
e1:e2:65:2b:f9:69:68:9e:63:53:82:6d:64:da:ba:b8:ae:38:
cd:0f:04:b2:a1:8e:25:40:b2:48:4a:f4:61:20:26:ce:ed:83:
68:3a:89:a0:80:5a:04:50:09:f5:40:50:1a:93:35:07:46:4f:
af:8c:de:0e:30:3e:a7:9a:17:25:66:35:58:6f:35:13:56:2b:
76:a5:82:33:56:8c:e4:bd:4f:2a:cb:34:1d:00:90:81:8b:f2:
8b:c4:a5:47:2a:6e:1d:a9:7f:01:28:7f:f4:c7:e5:db:74:9f:
8e:e6:67:fb:1b:97:8e:cf:35:7e:62:96:b2:a6:44:dc:bd:ea:
98:61:43:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsLskYRcVI/Qn3l0i5u2/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMTAxMDcxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ3NDU5ZTRmMzA2N2Y4YTNhMGJkOGQyNTMxOGRmYmRjYzZhNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUSQkJuUK2Uh8tR/mQGKTtmnC+hh
RGCfCdihqRqzlLrrwZbbhDcFf8bkGINojpHatPodMkgAKeKuL1tKE7sgaLtsMDRD
RURrHr9s2x454eYSDwlPOFjlVv2fwJSYqm0oboDeV0YgsMcEt+7HGbjZsAmipFlB
3Ux9dRycZe0AlCANdjGMOkv7cKOC3ClcyHByHumi72WEVeqinOPhTrgGWQf1ERJw
06FqEanfsSVaCwLtmKRR24o81eb4OeW1kyHAt6vFFAnhcoLfW8WS/7SIAKVHyqTj
6t7cl3Wj75IoISr/352j0ujiNNAy8zmW4Zpw5Ost8W6Hs12jh5bdOENV8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPRHRZ5PMGf4o6C9jSUxjfvcxqYuMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvOUVkRm5rOHdaX2lqb0wyTkpUR04tOXpHcGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoGA
MA0GCSqGSIb3DQEBCwUAA4IBAQB6JMoSt+U+77pWrGNQeORwXNYE9TJNukwa00Sm
y4m41Dy47RvBokhccBzkd3SqCpxLFag5jLZFoLPZ8ra4jSiPEBBFr6sP8DFbkzLf
dsz6vUeqRl1GRZ/mG+EG0JHjT5Nrm7V/aNi3sjZ2RQMAES7wLrSK9Vj0Nf5foVXI
AP7h4mUr+WlonmNTgm1k2rq4rjjNDwSyoY4lQLJISvRhICbO7YNoOomggFoEUAn1
QFAakzUHRk+vjN4OMD6nmhclZjVYbzUTVit2pYIzVozkvU8qyzQdAJCBi/KLxKVH
Km4dqX8BKH/0x+XbdJ+O5mf7G5eOzzV+YpaypkTcveqYYUML
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org