Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/R6K7UxdvABgPe6waiKcR_hel9dw.roa
File: R6K7UxdvABgPe6waiKcR_hel9dw.roa (raw, json)
Hash identifier: eDrLGPeurqLEGMa2O0fnhuUmhDIY5bKquGRqZCn6bV8=
Subject key identifier: 47:A2:BB:53:17:6F:00:18:0F:7B:AC:1A:88:A7:11:FE:17:A5:F5:DC
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018655CD25406FBB4B41840751BE718B0BE9
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/R6K7UxdvABgPe6waiKcR_hel9dw.roa
Signing time: Wed 15 Feb 2023 15:59:12 +0000
ROA not before: Wed 15 Feb 2023 15:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199829
IP address blocks: 2a0d:2146:8640::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:cd:25:40:6f:bb:4b:41:84:07:51:be:71:8b:0b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Feb 15 15:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a2bb53176f00180f7bac1a88a711fe17a5f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:2f:92:cf:39:42:8c:7e:ca:b6:27:6b:33:
86:c7:38:ff:d2:6c:30:cd:25:64:1a:2e:04:46:fe:
16:da:d0:29:8e:7b:e6:3d:5a:b9:37:4f:97:eb:45:
b7:af:22:c9:6e:a7:90:c0:a9:cd:50:34:97:47:61:
d5:91:5f:ba:0f:db:b6:d3:f0:e6:0f:d7:08:b8:5c:
9a:cb:9c:38:6f:fd:14:f0:f4:17:f7:01:98:f7:97:
a6:c6:72:24:05:4b:b3:98:b6:5d:6b:19:c4:5d:c4:
5c:54:c8:44:47:fc:17:fc:be:8c:ab:07:7e:08:8e:
2a:ae:c1:29:a2:76:fe:41:73:e7:0a:93:18:08:1d:
fb:b1:06:1d:25:1d:6f:6b:67:f6:ed:21:e3:69:f8:
b3:e9:69:b5:79:7a:1b:47:af:70:24:96:a3:05:89:
58:67:9e:5e:86:6a:31:78:a9:68:68:95:cb:d0:67:
36:c5:6b:3f:69:61:1d:48:f0:77:75:c7:aa:66:1d:
2e:9a:d3:58:f6:33:57:2b:63:27:ed:7a:cf:0d:4d:
c3:f7:2f:ed:f6:27:39:37:ed:71:2c:b5:fc:71:4c:
54:53:6e:00:30:a5:6b:c2:cb:df:64:f1:49:e7:47:
20:c4:8f:29:3e:81:12:37:af:a2:25:d1:77:9a:f6:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:BB:53:17:6F:00:18:0F:7B:AC:1A:88:A7:11:FE:17:A5:F5:DC
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/R6K7UxdvABgPe6waiKcR_hel9dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8640::/44
Signature Algorithm: sha256WithRSAEncryption
c9:fd:31:df:50:f1:63:25:18:a8:68:d5:7a:85:53:c5:e2:6d:
a4:f5:ae:56:1e:9d:b9:81:96:50:d2:82:86:ff:f2:48:a7:a8:
3b:a0:82:9a:c8:59:3f:20:58:1d:31:1e:7c:e1:1a:54:36:d6:
9c:de:4e:f6:99:5d:7f:1b:a1:41:26:21:c4:1b:d8:f5:77:7d:
20:42:2d:24:d4:f9:be:c9:41:06:5d:e3:ac:3b:35:63:4e:e8:
f6:c6:20:55:43:87:52:be:34:a5:2f:12:bf:e8:a2:01:ab:4d:
7e:f6:dc:77:bb:eb:e9:e5:56:c2:69:9f:fa:8d:99:11:df:91:
38:8d:1f:f4:71:c6:96:b6:f3:9e:17:89:4e:7a:e3:4d:ad:3a:
6f:b5:9b:8a:4e:22:d5:fc:6b:8b:b9:43:3e:d6:e8:4f:7e:e7:
7f:96:2e:0f:4d:87:33:f9:17:6c:58:8b:cd:40:3b:cd:7a:8e:
b0:46:31:b9:fd:bb:3d:cd:90:11:b6:ba:7f:b1:7a:0a:e8:98:
15:ce:c9:ba:f6:f9:23:7c:5c:67:ed:07:d3:8e:d1:08:2b:a4:
1d:33:58:8a:70:84:df:b5:c3:a6:e5:49:2e:73:cb:f4:ae:7e:
d9:e6:18:de:9d:8e:92:f6:d1:7e:2b:f1:4a:c8:1a:40:ad:57:
fd:71:59:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZVzSVAb7tLQYQHUb5xiwvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMjE1MTU1OTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2EyYmI1MzE3NmYwMDE4MGY3YmFjMWE4OGE3MTFmZTE3YTVmNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hUvks85Qox+yrYnazOGxzj/0mww
zSVkGi4ERv4W2tApjnvmPVq5N0+X60W3ryLJbqeQwKnNUDSXR2HVkV+6D9u20/Dm
D9cIuFyay5w4b/0U8PQX9wGY95emxnIkBUuzmLZdaxnEXcRcVMhER/wX/L6Mqwd+
CI4qrsEponb+QXPnCpMYCB37sQYdJR1va2f27SHjafiz6Wm1eXobR69wJJajBYlY
Z55ehmoxeKloaJXL0Gc2xWs/aWEdSPB3dceqZh0umtNY9jNXK2Mn7XrPDU3D9y/t
9ic5N+1xLLX8cUxUU24AMKVrwsvfZPFJ50cgxI8pPoESN6+iJdF3mvaR6wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEeiu1MXbwAYD3usGoinEf4XpfXcMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvUjZLN1V4ZHZBQmdQZTZ3YWlLY1JfaGVsOWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoZA
MA0GCSqGSIb3DQEBCwUAA4IBAQDJ/THfUPFjJRioaNV6hVPF4m2k9a5WHp25gZZQ
0oKG//JIp6g7oIKayFk/IFgdMR584RpUNtac3k72mV1/G6FBJiHEG9j1d30gQi0k
1Pm+yUEGXeOsOzVjTuj2xiBVQ4dSvjSlLxK/6KIBq01+9tx3u+vp5VbCaZ/6jZkR
35E4jR/0ccaWtvOeF4lOeuNNrTpvtZuKTiLV/GuLuUM+1uhPfud/li4PTYcz+Rds
WIvNQDvNeo6wRjG5/bs9zZARtrp/sXoK6JgVzsm69vkjfFxn7QfTjtEIK6QdM1iK
cITftcOm5Ukuc8v0rn7Z5hjenY6S9tF+K/FKyBpArVf9cVn4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org