Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JJYYw_sKzz4VNbkio0L4TUv350c.roa
File: JJYYw_sKzz4VNbkio0L4TUv350c.roa (raw, json)
Hash identifier: l5HZlQ1TMdVQWJWplVdi1Ps+8dx2GCcMBXdMSlL3rzQ=
Subject key identifier: 24:96:18:C3:FB:0A:CF:3E:15:35:B9:22:A3:42:F8:4D:4B:F7:E7:47
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4937158D5E5313D67C1BF9383D02319
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JJYYw_sKzz4VNbkio0L4TUv350c.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199854
IP address blocks: 2a0d:2146:bd00::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Jan 2024 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:71:58:d5:e5:31:3d:67:c1:bf:93:83:d0:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249618c3fb0acf3e1535b922a342f84d4bf7e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:80:81:07:0f:92:0e:ee:0c:3c:41:d5:3b:
69:af:40:d4:e0:b2:c9:5a:e4:f5:fc:86:8f:6c:9c:
f5:53:8a:0b:31:0a:3f:9f:bb:ca:5d:1f:f4:bd:f3:
3d:dc:31:49:36:f5:9f:5f:7e:5d:7d:0b:a7:a0:0e:
0a:e6:30:7c:5d:c0:20:2a:17:14:21:f0:4f:4a:38:
4a:8b:e4:d6:5d:28:4d:de:21:03:c8:5c:ee:50:a1:
26:77:df:97:a7:3d:46:44:5b:66:37:90:f4:f4:8e:
5a:2a:a8:5f:5f:c8:8e:56:34:22:49:e0:5a:ad:48:
3a:39:01:74:27:b8:47:e6:cb:6f:93:67:b6:87:e5:
90:c5:eb:8d:b1:16:01:5e:3e:df:bb:22:4d:d8:69:
55:1b:53:36:e5:c3:fa:9c:22:04:0f:82:4b:0e:ec:
04:1e:43:2a:97:38:f5:1f:40:b5:8d:46:ff:d6:93:
a3:ce:a0:82:75:00:17:87:5e:cd:bf:5f:fe:13:78:
57:6c:6f:b8:26:b0:3f:01:9f:fb:0f:c1:ec:ec:bd:
8b:d0:07:a5:dd:a1:bf:f1:d3:60:98:b6:49:25:90:
4f:92:5d:fe:2c:68:9b:f8:a5:c4:7b:75:4f:2e:12:
06:56:9f:d5:9d:9e:ce:0d:33:4d:f9:cb:bf:d3:73:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:18:C3:FB:0A:CF:3E:15:35:B9:22:A3:42:F8:4D:4B:F7:E7:47
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/JJYYw_sKzz4VNbkio0L4TUv350c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:bd00::/44
Signature Algorithm: sha256WithRSAEncryption
cb:2b:f4:a1:c9:29:66:0e:0a:43:ba:0d:21:e8:af:cb:d9:77:
77:7a:fc:e2:1e:de:52:0e:e5:62:72:e2:6f:a0:8f:55:b8:b6:
55:02:37:66:ef:ae:aa:98:6f:d8:8d:2d:24:bf:80:cc:90:9d:
29:c6:8e:14:08:51:98:87:3f:60:8f:26:47:fc:f4:c4:16:46:
3e:16:12:2b:d4:0c:cc:3b:3b:51:e9:6a:7a:c7:04:09:6b:fd:
12:95:04:07:2b:12:30:76:71:44:81:78:4e:3a:a9:44:33:a8:
20:9d:13:8c:22:27:5d:ec:c6:2d:c3:0e:4c:df:1d:6b:ff:b9:
15:31:0f:3e:27:62:82:0c:3f:52:d8:18:42:db:5a:bc:4f:db:
56:88:f1:b3:7e:26:6f:39:dd:75:c3:59:b3:c8:66:bb:d0:79:
f5:6d:92:39:8c:24:59:ae:e7:1a:59:74:17:b4:d7:27:65:72:
51:06:99:e5:c8:23:de:12:d7:5c:6f:e1:be:13:0d:16:a6:90:
f6:23:bf:1e:8f:40:18:d4:6d:49:88:a9:aa:90:7c:b6:d0:04:
50:bc:17:58:a1:42:db:a2:52:b4:a5:cc:46:ee:23:74:7d:58:
95:76:81:f9:5d:e9:c9:0c:35:44:74:ea:76:ef:10:76:bf:1b:
98:bf:af:37
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEk3FY1eUxPWfBv5OD0CMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDk2MThjM2ZiMGFjZjNlMTUzNWI5MjJhMzQyZjg0ZDRiZjdlNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiaAgQcPkg7uDDxB1Ttpr0DU4LLJ
WuT1/IaPbJz1U4oLMQo/n7vKXR/0vfM93DFJNvWfX35dfQunoA4K5jB8XcAgKhcU
IfBPSjhKi+TWXShN3iEDyFzuUKEmd9+Xpz1GRFtmN5D09I5aKqhfX8iOVjQiSeBa
rUg6OQF0J7hH5stvk2e2h+WQxeuNsRYBXj7fuyJN2GlVG1M25cP6nCIED4JLDuwE
HkMqlzj1H0C1jUb/1pOjzqCCdQAXh17Nv1/+E3hXbG+4JrA/AZ/7D8Hs7L2L0Ael
3aG/8dNgmLZJJZBPkl3+LGib+KXEe3VPLhIGVp/VnZ7ODTNN+cu/03NZYQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCSWGMP7Cs8+FTW5IqNC+E1L9+dHMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvSkpZWXdfc0t6ejRWTmJraW8wTDRUVXYzNTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRr0A
MA0GCSqGSIb3DQEBCwUAA4IBAQDLK/ShySlmDgpDug0h6K/L2Xd3evziHt5SDuVi
cuJvoI9VuLZVAjdm766qmG/YjS0kv4DMkJ0pxo4UCFGYhz9gjyZH/PTEFkY+FhIr
1AzMOztR6Wp6xwQJa/0SlQQHKxIwdnFEgXhOOqlEM6ggnROMIidd7MYtww5M3x1r
/7kVMQ8+J2KCDD9S2BhC21q8T9tWiPGzfiZvOd11w1mzyGa70Hn1bZI5jCRZruca
WXQXtNcnZXJRBpnlyCPeEtdcb+G+Ew0WppD2I78ej0AY1G1JiKmqkHy20ARQvBdY
oULbolK0pcxG7iN0fViVdoH5XenJDDVEdOp27xB2vxuYv683
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org