Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/BEc5wMqTKXv77Bz7Y9yx69p9QG0.roa
File: BEc5wMqTKXv77Bz7Y9yx69p9QG0.roa (raw, json)
Hash identifier: TeuSogoWcEwGjdeSo+6cvt7B6lH+GWuS7IYebhCo8DQ=
Subject key identifier: 04:47:39:C0:CA:93:29:7B:FB:EC:1C:FB:63:DC:B1:EB:DA:7D:40:6D
Certificate issuer: /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial: 018BCD2A83BD3CE4A6B4AE9C000D69313BD8
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/BEc5wMqTKXv77Bz7Y9yx69p9QG0.roa
Signing time: Tue 14 Nov 2023 09:29:57 +0000
ROA not before: Tue 14 Nov 2023 09:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210821
IP address blocks: 2a14:1900::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:2a:83:bd:3c:e4:a6:b4:ae:9c:00:0d:69:31:3b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Validity
Not Before: Nov 14 09:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=044739c0ca93297bfbec1cfb63dcb1ebda7d406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:36:13:3e:44:ff:53:f8:04:a7:58:a8:d8:
80:0b:46:32:fb:03:ef:65:22:e3:0f:d1:2e:27:2a:
30:e4:14:74:c1:7a:bc:af:de:57:ae:27:34:23:5f:
d7:75:5b:8e:28:93:34:b0:25:44:29:d7:dc:b4:fe:
88:7e:2d:46:d8:f8:b2:69:2e:ae:ce:3c:13:5f:b3:
1b:c8:22:7f:70:cd:d2:3b:ec:9d:46:f3:89:de:2d:
4f:4d:eb:59:a3:c0:41:69:94:fe:f9:0f:0f:95:03:
62:15:08:5a:88:56:41:45:8c:a2:ee:02:49:01:41:
ac:b7:da:9f:b7:2a:a7:95:67:f7:3a:76:62:7a:ad:
29:b0:ce:99:3d:9e:3f:5b:de:7c:12:dc:26:ca:97:
81:82:d0:01:5c:ba:2e:db:b9:39:10:d5:86:f3:22:
54:92:cf:95:d7:0d:f6:cf:cd:36:88:c8:8e:e7:f1:
6b:e2:f3:03:42:d1:fe:92:ba:7a:51:8d:17:cf:48:
0d:ab:36:3e:fe:1c:03:1e:09:30:8c:d8:f5:51:ff:
90:3d:6f:5a:57:84:f4:01:87:d3:15:0a:33:25:5c:
63:64:29:bb:45:d0:5b:b3:82:be:e8:66:c8:76:00:
47:2d:70:17:6a:f1:4a:f9:c9:d0:c0:93:16:fd:ee:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:39:C0:CA:93:29:7B:FB:EC:1C:FB:63:DC:B1:EB:DA:7D:40:6D
X509v3 Authority Key Identifier:
keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/BEc5wMqTKXv77Bz7Y9yx69p9QG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1900::/29
Signature Algorithm: sha256WithRSAEncryption
19:72:35:74:41:70:c5:c1:a2:b1:3f:76:16:f8:b3:26:17:54:
b4:93:20:01:9a:9e:90:9a:b9:46:5d:05:f1:22:61:a2:9e:70:
dd:5b:25:10:3d:cb:2b:c7:df:15:49:f8:42:c1:44:92:8e:4c:
f6:16:cc:a0:ad:48:26:77:01:ad:eb:5a:be:fa:db:29:c0:42:
b9:09:b6:09:7b:2e:76:e9:c7:04:d4:ac:b1:ea:e5:f3:cb:ba:
49:16:d6:d3:5f:6f:d7:6a:25:dd:ef:75:81:74:b7:ae:bd:a6:
21:41:31:db:c7:33:8e:22:b1:4d:65:97:d1:01:24:55:51:70:
24:6e:ec:63:f0:4b:05:da:70:de:50:91:9d:84:c4:a3:c8:b0:
44:c5:72:0b:1a:a0:9b:e5:9f:e3:9c:f7:7f:e5:2e:07:4e:87:
f7:9e:5d:d2:d6:68:57:4d:17:da:be:b1:27:b8:16:18:a8:bc:
8d:a0:74:9b:77:e6:2d:d3:88:7d:61:26:8b:91:bf:10:38:eb:
d5:fc:e3:d9:d9:91:4e:40:a1:a2:24:a7:96:b5:af:39:8b:6d:
ba:8d:19:d6:e6:ce:a5:08:46:10:f1:cd:a3:ac:7c:50:a9:2d:
40:3d:35:4e:f5:c2:68:1a:bd:a6:3d:76:06:78:59:43:e6:ff:
91:52:42:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYvNKoO9POSmtK6cAA1pMTvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmEwOTAyYmM5ODUzYjc1ZWQyZGIxOTY4M2VlMmYzYTIy
NjE1NDAwHhcNMjMxMTE0MDkyOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDQ3MzljMGNhOTMyOTdiZmJlYzFjZmI2M2RjYjFlYmRhN2Q0MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4M2Ez5E/1P4BKdYqNiAC0Yy+wPv
ZSLjD9EuJyow5BR0wXq8r95Xric0I1/XdVuOKJM0sCVEKdfctP6Ifi1G2PiyaS6u
zjwTX7MbyCJ/cM3SO+ydRvOJ3i1PTetZo8BBaZT++Q8PlQNiFQhaiFZBRYyi7gJJ
AUGst9qftyqnlWf3OnZieq0psM6ZPZ4/W958EtwmypeBgtABXLou27k5ENWG8yJU
ks+V1w32z802iMiO5/Fr4vMDQtH+krp6UY0Xz0gNqzY+/hwDHgkwjNj1Uf+QPW9a
V4T0AYfTFQozJVxjZCm7RdBbs4K+6GbIdgBHLXAXavFK+cnQwJMW/e5DIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFARHOcDKkyl7++wc+2PcsevafUBtMB8GA1UdIwQY
MBaAFPlqCQK8mFO3XtLbGWg+4vOiJhVAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Xb0pBcnlZVTdkZTB0c1phRDdpODZJbUZVQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBk
LWM0YTc3YzE5MmFmMC8xL0JFYzV3TXFUS1h2NzdCejdZOXl4NjlwOVFHMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBkLWM0YTc3YzE5MmFm
MC8xLzEtV29KQXJ5WVU3ZGUwdHNaYUQ3aTg2SW1GVUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqFBkA
MA0GCSqGSIb3DQEBCwUAA4IBAQAZcjV0QXDFwaKxP3YW+LMmF1S0kyABmp6QmrlG
XQXxImGinnDdWyUQPcsrx98VSfhCwUSSjkz2FsygrUgmdwGt61q++tspwEK5CbYJ
ey526ccE1Kyx6uXzy7pJFtbTX2/XaiXd73WBdLeuvaYhQTHbxzOOIrFNZZfRASRV
UXAkbuxj8EsF2nDeUJGdhMSjyLBExXILGqCb5Z/jnPd/5S4HTof3nl3S1mhXTRfa
vrEnuBYYqLyNoHSbd+Yt04h9YSaLkb8QOOvV/OPZ2ZFOQKGiJKeWta85i226jRnW
5s6lCEYQ8c2jrHxQqS1APTVO9cJoGr2mPXYGeFlD5v+RUkLn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:43 2024 by rpki-client on console-ams.rpki-client.org