Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yXTlrXmVP_mbgHXdEI6SbsOKkcM.roa
File: yXTlrXmVP_mbgHXdEI6SbsOKkcM.roa (raw, json)
Hash identifier: x8YNNWbBJNRTG84q6g0DLomJEfDjZVwJxQPRyOLdnxo=
Subject key identifier: C9:74:E5:AD:79:95:3F:F9:9B:80:75:DD:10:8E:92:6E:C3:8A:91:C3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DA21E2B9B413915A427E1D116FA259830
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yXTlrXmVP_mbgHXdEI6SbsOKkcM.roa
Signing time: Tue 13 Feb 2024 10:58:22 +0000
ROA not before: Tue 13 Feb 2024 10:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a03:3ae0::/29 maxlen: 29
2a07:e4c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 15 Feb 2024 10:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:1e:2b:9b:41:39:15:a4:27:e1:d1:16:fa:25:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 10:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c974e5ad79953ff99b8075dd108e926ec38a91c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:3f:7c:d5:16:90:53:60:e5:23:ee:72:17:
c6:cc:f6:56:ad:bc:9e:19:31:bb:8a:e8:2d:43:bd:
d9:37:b5:93:20:0b:69:e8:ed:db:7f:1b:fc:0c:f3:
15:a5:b6:95:df:01:09:d2:7b:a6:70:5c:75:95:93:
0d:89:a0:3e:6b:a6:24:0f:fe:0d:0b:78:19:2e:21:
17:16:44:69:57:d3:e8:39:71:24:dc:0c:76:01:8c:
5b:5e:b3:bf:f5:0d:d9:35:c9:f0:12:2c:fa:d5:fe:
1a:e7:08:90:5b:c8:b4:5a:d0:45:7e:eb:ef:9f:0a:
00:aa:e9:21:a9:77:c4:c9:d8:21:31:40:d4:2f:de:
f3:c6:20:c0:fe:77:d0:c0:69:45:b2:37:bc:71:41:
b2:17:5b:c3:76:fa:26:de:83:9b:1a:79:ed:e0:e5:
4c:7a:d0:98:2e:37:67:6a:28:14:07:99:c2:33:5e:
d7:49:bb:29:47:46:9e:0f:a7:f0:ea:44:0a:9c:53:
b5:35:28:96:97:9d:f4:63:ef:48:54:93:88:75:b0:
7b:45:20:bc:67:e1:f2:40:fe:00:f8:82:ba:21:04:
15:9e:e9:39:2b:31:dd:69:6a:c0:03:e5:80:4a:e5:
03:1f:f9:ca:ed:fd:a3:df:4f:3e:1a:49:83:97:b9:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:E5:AD:79:95:3F:F9:9B:80:75:DD:10:8E:92:6E:C3:8A:91:C3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yXTlrXmVP_mbgHXdEI6SbsOKkcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:3ae0::/29
2a07:e4c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
5e:02:02:3f:e8:36:d1:1e:41:89:f6:be:bd:f1:c5:e9:fe:a5:
93:c8:a9:18:12:79:f0:38:5b:f8:23:2c:6b:c3:0d:96:da:24:
3b:5b:05:ba:3d:30:50:a2:c6:33:a5:11:c5:ac:4f:74:ec:0f:
28:10:0e:b5:91:a7:4a:a5:d6:b7:d4:12:f8:70:80:54:d3:75:
12:d4:2e:05:e5:d3:b2:fe:9a:db:60:60:65:9a:93:7e:cb:1a:
89:fd:79:01:64:6d:11:b2:0a:47:e7:49:a9:34:d8:66:3a:fc:
70:cc:6a:aa:64:bf:fb:e7:98:e1:48:cd:df:d2:27:e2:1a:ea:
d7:07:d5:6e:58:9f:86:74:41:29:67:85:77:b0:ac:47:20:3a:
1c:fd:85:de:f0:27:82:63:3a:58:eb:c4:3f:ed:5c:0f:60:7e:
22:4a:bb:70:61:7c:58:7e:80:2e:fc:07:2b:ae:e6:1e:a5:88:
26:c8:4b:dc:d9:8f:fe:1c:9b:cd:96:3b:27:03:43:9b:a2:b9:
e3:ff:2a:eb:ef:71:c8:47:21:b2:c0:b6:8e:87:0d:e2:05:60:
72:0b:bc:bc:24:ae:d5:84:e0:e8:fd:97:5e:9d:8b:4f:7a:54:
29:65:ab:55:e4:1e:a6:37:1f:7e:69:ce:1e:61:0a:72:2a:89:
51:c4:1a:03
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY2iHiubQTkVpCfh0Rb6JZgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjEzMTA1ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTc0ZTVhZDc5OTUzZmY5OWI4MDc1ZGQxMDhlOTI2ZWMzOGE5MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ak/fNUWkFNg5SPuchfGzPZWrbye
GTG7iugtQ73ZN7WTIAtp6O3bfxv8DPMVpbaV3wEJ0numcFx1lZMNiaA+a6YkD/4N
C3gZLiEXFkRpV9PoOXEk3Ax2AYxbXrO/9Q3ZNcnwEiz61f4a5wiQW8i0WtBFfuvv
nwoAqukhqXfEydghMUDUL97zxiDA/nfQwGlFsje8cUGyF1vDdvom3oObGnnt4OVM
etCYLjdnaigUB5nCM17XSbspR0aeD6fw6kQKnFO1NSiWl530Y+9IVJOIdbB7RSC8
Z+HyQP4A+IK6IQQVnuk5KzHdaWrAA+WASuUDH/nK7f2j308+GkmDl7kmiQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMl05a15lT/5m4B13RCOkm7DipHDMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveVhUbHJYbVZQX21iZ0hYZEVJNlNic09La2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgM64AMF
AyoH5MADBQMqDP9AMA0GCSqGSIb3DQEBCwUAA4IBAQBeAgI/6DbRHkGJ9r698cXp
/qWTyKkYEnnwOFv4Iyxrww2W2iQ7WwW6PTBQosYzpRHFrE907A8oEA61kadKpda3
1BL4cIBU03US1C4F5dOy/prbYGBlmpN+yxqJ/XkBZG0RsgpH50mpNNhmOvxwzGqq
ZL/755jhSM3f0ifiGurXB9VuWJ+GdEEpZ4V3sKxHIDoc/YXe8CeCYzpY68Q/7VwP
YH4iSrtwYXxYfoAu/AcrruYepYgmyEvc2Y/+HJvNljsnA0Obornj/yrr73HIRyGy
wLaOhw3iBWByC7y8JK7VhODo/ZdenYtPelQpZatV5B6mNx9+ac4eYQpyKolRxBoD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:52 2024 by rpki-client on console-ams.rpki-client.org