Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kwdzogQq0DaOO-Uv3HSbPJvNDxs.roa
File: kwdzogQq0DaOO-Uv3HSbPJvNDxs.roa (raw, json)
Hash identifier: 2B4Ql8NK1qkCCPCPiK+LozY6meYUm9IapJ6CY6iYETc=
Subject key identifier: 93:07:73:A2:04:2A:D0:36:8E:3B:E5:2F:DC:74:9B:3C:9B:CD:0F:1B
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018655CD25F446699CC39E5251D561031557
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kwdzogQq0DaOO-Uv3HSbPJvNDxs.roa
Signing time: Wed 15 Feb 2023 15:59:13 +0000
ROA not before: Wed 15 Feb 2023 15:59:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199854
IP address blocks: 2a0d:2146:bd00::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:cd:25:f4:46:69:9c:c3:9e:52:51:d5:61:03:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Feb 15 15:59:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=930773a2042ad0368e3be52fdc749b3c9bcd0f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:dc:1b:8f:df:2f:03:5d:1d:07:8a:51:ce:
75:eb:68:10:82:ae:99:00:bc:ea:73:a9:2b:57:6f:
94:9e:b0:0f:3c:3a:2b:c6:75:b0:06:8e:6a:79:0d:
29:20:a9:30:7a:15:d7:3e:29:8e:7e:d0:15:0f:ec:
51:db:50:24:f6:54:60:d3:fe:90:ea:07:32:f7:af:
af:66:49:db:ac:80:d8:47:3d:58:a2:59:7c:fc:5e:
87:e1:0e:a8:78:f1:ca:e6:ce:0f:27:68:8e:5e:c8:
63:cb:92:06:4c:1e:4c:ec:a5:ed:11:d9:da:64:b1:
a8:e1:ff:40:a8:be:8e:1e:b5:ec:20:61:e3:b1:4f:
c5:2d:22:35:08:f9:1a:9f:f2:83:29:a1:a8:9b:55:
0b:6b:8a:08:de:89:26:fa:b8:65:d3:57:03:db:c4:
e1:3a:83:30:80:45:e1:a3:d2:df:94:9e:f6:1a:13:
9f:7e:8f:8c:2a:c0:42:e4:30:f8:95:b1:c9:4b:28:
6a:e8:62:6a:0e:bb:ed:e4:5d:ce:99:29:6a:86:47:
20:5e:cb:76:0a:c1:18:a0:7b:e8:24:d7:01:fe:5a:
f6:52:80:2f:39:f6:19:92:8d:91:d3:b6:8c:7c:2d:
16:cf:8d:b2:0d:b1:d6:ce:c8:a9:60:20:9c:78:10:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:73:A2:04:2A:D0:36:8E:3B:E5:2F:DC:74:9B:3C:9B:CD:0F:1B
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/kwdzogQq0DaOO-Uv3HSbPJvNDxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:bd00::/44
Signature Algorithm: sha256WithRSAEncryption
3e:cf:7c:46:11:2d:29:38:7a:5c:73:42:d9:83:f1:f2:93:0e:
79:6d:a9:4b:31:6e:ae:06:f3:6f:42:50:90:3b:96:1a:19:b7:
ef:bd:61:9f:68:9d:3e:cc:18:b9:59:97:c8:9e:ad:67:a3:d8:
3e:37:b9:1a:9b:fd:15:05:4e:49:fa:71:d6:e9:82:50:4e:bd:
0e:9c:9c:d7:29:0d:f9:9d:2e:f2:0c:84:7f:1e:e3:a7:4b:9e:
03:45:f2:69:82:12:28:86:72:93:47:07:bc:0d:a0:77:7a:05:
d2:1c:2b:5c:e8:ba:59:6a:b6:0e:6a:8c:d0:15:74:c1:2f:a3:
23:b8:21:9f:be:de:6f:77:44:43:ad:fd:41:42:5f:97:3f:98:
f1:73:01:7a:80:53:d5:b0:c8:51:b9:7b:d1:56:6b:16:b9:57:
93:5c:49:e3:5e:34:9a:e8:fa:76:99:54:6f:b3:ab:9c:1b:d3:
d5:d6:f0:2a:c8:17:c0:cf:ca:2e:d0:b3:c3:6a:f8:b4:24:fa:
c2:28:7b:c0:25:bf:ea:5f:9d:4d:08:d5:d5:6c:3e:d7:20:47:
9b:85:48:3e:84:45:2d:42:42:3f:e5:0a:e7:5a:f4:df:7c:e6:
67:82:cc:f6:7e:5e:f1:bc:76:71:78:f8:aa:11:20:dd:73:05:
4d:72:1a:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZVzSX0Rmmcw55SUdVhAxVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMjE1MTU1OTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzA3NzNhMjA0MmFkMDM2OGUzYmU1MmZkYzc0OWIzYzliY2QwZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDfcG4/fLwNdHQeKUc5162gQgq6Z
ALzqc6krV2+UnrAPPDorxnWwBo5qeQ0pIKkwehXXPimOftAVD+xR21Ak9lRg0/6Q
6gcy96+vZknbrIDYRz1Yoll8/F6H4Q6oePHK5s4PJ2iOXshjy5IGTB5M7KXtEdna
ZLGo4f9AqL6OHrXsIGHjsU/FLSI1CPkan/KDKaGom1ULa4oI3okm+rhl01cD28Th
OoMwgEXho9LflJ72GhOffo+MKsBC5DD4lbHJSyhq6GJqDrvt5F3OmSlqhkcgXst2
CsEYoHvoJNcB/lr2UoAvOfYZko2R07aMfC0Wz42yDbHWzsipYCCceBCTdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJMHc6IEKtA2jjvlL9x0mzybzQ8bMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEva3dkem9nUXEwRGFPTy1VdjNIU2JQSnZORHhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRr0A
MA0GCSqGSIb3DQEBCwUAA4IBAQA+z3xGES0pOHpcc0LZg/Hykw55balLMW6uBvNv
QlCQO5YaGbfvvWGfaJ0+zBi5WZfInq1no9g+N7kam/0VBU5J+nHW6YJQTr0OnJzX
KQ35nS7yDIR/HuOnS54DRfJpghIohnKTRwe8DaB3egXSHCtc6LpZarYOaozQFXTB
L6MjuCGfvt5vd0RDrf1BQl+XP5jxcwF6gFPVsMhRuXvRVmsWuVeTXEnjXjSa6Pp2
mVRvs6ucG9PV1vAqyBfAz8ou0LPDavi0JPrCKHvAJb/qX51NCNXVbD7XIEebhUg+
hEUtQkI/5QrnWvTffOZngsz2fl7xvHZxePiqESDdcwVNchpa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org