Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yZk9s8KV_CHwTGf298DfD4a_QxU.roa
File: yZk9s8KV_CHwTGf298DfD4a_QxU.roa (raw, json)
Hash identifier: spFfM/VGxgsNLrXgnHwuqGPM7Hw5wQq2RvKT9KFyi0U=
Subject key identifier: C9:99:3D:B3:C2:95:FC:21:F0:4C:67:F6:F7:C0:DF:0F:86:BF:43:15
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ED468F37DBDDB70F48462F1397551
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yZk9s8KV_CHwTGf298DfD4a_QxU.roa
Signing time: Sun 01 Jan 2023 07:14:46 +0000
ROA not before: Sun 01 Jan 2023 07:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210285
IP address blocks: 2a0d:2146:8460::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d4:68:f3:7d:bd:db:70:f4:84:62:f1:39:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9993db3c295fc21f04c67f6f7c0df0f86bf4315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:d8:72:c2:b2:e8:29:a5:14:e3:72:8f:17:
31:ff:d4:fb:36:60:c0:bd:ae:74:fa:ff:79:44:14:
61:5e:d5:ed:bb:c8:38:c1:12:91:be:b3:e4:83:08:
60:18:ee:2d:9f:67:f2:7e:65:9a:7c:97:e7:fc:a0:
5f:1b:88:92:8a:1f:1a:e8:f7:c2:fc:75:11:83:6a:
ed:1a:5e:64:c9:d6:26:16:f8:f0:9e:0a:0b:f3:a9:
0d:3c:89:e9:64:ea:c0:b3:a8:a4:af:de:49:81:52:
ae:5a:a3:9a:35:07:8e:a4:ca:75:99:45:38:37:79:
54:66:2b:c3:fa:81:4f:12:cc:57:70:24:16:2a:28:
d9:2c:6c:62:c9:e8:1c:f1:17:e7:de:47:b5:ce:dd:
be:99:81:04:e5:3a:1b:c5:27:7b:f0:83:dd:ba:f0:
5c:15:27:82:1f:7e:94:b3:8e:0c:6d:8f:95:d6:0d:
13:49:50:88:70:02:d8:a2:8b:2c:da:d2:4f:b6:6e:
4a:2b:09:0f:fd:c3:ce:c6:5c:e2:fd:1a:ee:64:93:
e5:2f:96:4d:16:58:59:6d:cd:ee:de:50:c2:d9:59:
f7:77:dd:c6:23:bd:72:65:1d:9c:f5:87:65:a8:d7:
8d:bd:c4:a1:f0:fd:36:34:c0:58:d7:4a:49:a8:df:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:3D:B3:C2:95:FC:21:F0:4C:67:F6:F7:C0:DF:0F:86:BF:43:15
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/yZk9s8KV_CHwTGf298DfD4a_QxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8460::/44
Signature Algorithm: sha256WithRSAEncryption
c1:0d:f0:bc:d1:03:e9:1f:69:18:b2:9a:90:76:ea:ef:54:7b:
e6:b7:e4:de:42:d2:15:21:08:c2:4c:ea:c5:3d:3a:e7:5a:3c:
58:ff:f2:7c:39:c1:fd:fd:2c:59:48:5d:9b:4d:50:2b:e7:85:
fa:99:f2:a5:17:68:b6:dc:57:71:cd:a5:b1:1c:17:15:cd:e9:
4d:fb:f1:32:7e:28:0c:fe:ad:6a:a6:4f:66:ba:06:e1:45:76:
75:62:85:c9:e5:03:14:c3:0c:7e:90:9a:03:02:2f:1c:4e:cb:
18:a2:75:7a:11:15:e3:03:e1:29:7c:13:61:14:c5:50:8f:7e:
d0:9e:86:ba:e7:04:ab:8f:ea:fe:db:80:e3:d3:44:41:0e:25:
bd:1b:24:57:b3:18:71:7e:79:34:8b:c0:ec:98:3f:c1:40:45:
e6:28:bb:37:e3:0f:c6:f4:e2:bb:da:38:85:9b:d9:79:cf:86:
a4:bd:66:f7:19:67:d4:ef:58:ed:24:07:8d:9c:74:a5:c3:d4:
c7:71:10:70:14:47:96:0f:a1:a9:43:31:81:e7:5f:5f:df:2b:
15:e5:02:da:a7:19:c6:1f:83:62:59:c6:80:1f:e7:01:b7:44:
94:fd:d0:e7:3a:02:84:18:20:bf:10:45:65:28:49:58:8c:ac:
39:f5:f0:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsLtRo832923D0hGLxOXVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMTAxMDcxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTk5M2RiM2MyOTVmYzIxZjA0YzY3ZjZmN2MwZGYwZjg2YmY0MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuofYcsKy6CmlFONyjxcx/9T7NmDA
va50+v95RBRhXtXtu8g4wRKRvrPkgwhgGO4tn2fyfmWafJfn/KBfG4iSih8a6PfC
/HURg2rtGl5kydYmFvjwngoL86kNPInpZOrAs6ikr95JgVKuWqOaNQeOpMp1mUU4
N3lUZivD+oFPEsxXcCQWKijZLGxiyegc8Rfn3ke1zt2+mYEE5TobxSd78IPduvBc
FSeCH36Us44MbY+V1g0TSVCIcALYooss2tJPtm5KKwkP/cPOxlzi/RruZJPlL5ZN
FlhZbc3u3lDC2Vn3d93GI71yZR2c9YdlqNeNvcSh8P02NMBY10pJqN9ZiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMmZPbPClfwh8Exn9vfA3w+Gv0MVMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEveVprOXM4S1ZfQ0h3VEdmMjk4RGZENGFfUXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoRg
MA0GCSqGSIb3DQEBCwUAA4IBAQDBDfC80QPpH2kYspqQdurvVHvmt+TeQtIVIQjC
TOrFPTrnWjxY//J8OcH9/SxZSF2bTVAr54X6mfKlF2i23FdxzaWxHBcVzelN+/Ey
figM/q1qpk9mugbhRXZ1YoXJ5QMUwwx+kJoDAi8cTssYonV6ERXjA+EpfBNhFMVQ
j37Qnoa65wSrj+r+24Dj00RBDiW9GyRXsxhxfnk0i8DsmD/BQEXmKLs34w/G9OK7
2jiFm9l5z4akvWb3GWfU71jtJAeNnHSlw9THcRBwFEeWD6GpQzGB519f3ysV5QLa
pxnGH4NiWcaAH+cBt0SU/dDnOgKEGCC/EEVlKElYjKw59fAu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org