Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Jnqtd4k8vT2sqHAS3BORBLiSeNA.roa
File: Jnqtd4k8vT2sqHAS3BORBLiSeNA.roa (raw, json)
Hash identifier: nZxw3YtRELs+eR0tD5dqtsHRIS3Z7ybzA/DhpB8FyP4=
Subject key identifier: 26:7A:AD:77:89:3C:BD:3D:AC:A8:70:12:DC:13:91:04:B8:92:78:D0
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 018572BA83779085869DECA062225EC5B37F
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Jnqtd4k8vT2sqHAS3BORBLiSeNA.roa
Signing time: Mon 02 Jan 2023 13:45:03 +0000
ROA not before: Mon 02 Jan 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5606
IP address blocks: 2a07:4ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:83:77:90:85:86:9d:ec:a0:62:22:5e:c5:b3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jan 2 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267aad77893cbd3daca87012dc139104b89278d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:f0:83:1d:dd:60:6b:50:9e:51:b8:60:5b:
8d:af:91:20:2c:17:e0:75:fd:07:17:b0:ce:8e:9e:
82:6e:12:4e:1f:7b:36:91:0a:2e:85:47:80:24:5a:
dc:8d:40:73:bd:5b:70:3f:7d:70:f4:62:6b:33:4b:
0a:57:9d:ce:06:13:7b:fa:ae:0a:98:53:59:19:05:
6c:49:84:2b:eb:86:c1:e5:b2:cd:88:97:c4:91:15:
ca:14:78:ce:36:6e:66:b4:f4:bb:65:33:2d:be:1b:
1a:3d:4a:ab:5b:1a:fb:b5:4c:13:78:cd:08:3b:30:
07:f9:08:12:57:60:99:d7:cc:19:44:7e:0e:ba:a3:
4c:9e:41:9d:82:c2:af:1a:fa:5c:d4:ea:39:e5:8f:
1e:ee:83:c3:a9:ff:f2:c6:90:bb:0b:44:b9:81:4e:
cc:2a:a0:4c:d5:9b:82:81:5f:96:c0:66:85:0e:66:
2c:21:c5:ed:de:b9:92:7d:e6:b4:ab:e9:cf:10:cd:
01:61:77:37:05:7b:5f:65:ee:83:8c:55:e2:70:6a:
ab:ae:73:83:4f:ec:9c:74:56:b7:16:cb:18:8e:ad:
c9:46:d8:88:dd:91:08:f2:9b:8b:55:7a:7f:bb:8f:
df:cf:6d:8d:33:04:57:f0:be:99:f7:32:0f:0f:a3:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7A:AD:77:89:3C:BD:3D:AC:A8:70:12:DC:13:91:04:B8:92:78:D0
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/Jnqtd4k8vT2sqHAS3BORBLiSeNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
02:2d:9f:1d:67:f1:c9:ae:58:a7:65:2d:ea:60:bf:5d:fb:38:
70:53:e9:e1:64:ef:3b:c5:17:f3:96:1d:64:e5:8b:93:52:6c:
c7:e8:ed:b6:0f:fe:92:15:5b:15:6f:c7:a8:ce:2f:fe:58:fd:
08:4c:b0:c1:35:85:47:90:fc:24:6e:4f:57:2a:7b:db:08:4d:
30:8d:2f:d9:37:47:46:c4:93:19:45:bf:5b:6c:ff:45:6a:72:
85:7b:1b:65:c9:75:f5:cc:a7:8f:e2:59:6d:26:12:98:67:a9:
bf:86:c7:8f:e5:95:13:61:f2:f1:75:9d:60:a4:61:8c:12:a4:
5d:09:d6:9e:dc:c8:9c:9e:8c:02:bf:2b:d3:0b:e4:1c:b1:1b:
4b:7b:3a:ec:68:9b:ec:d8:21:5f:37:d6:78:cf:60:3e:4e:c8:
39:a3:12:f8:f3:de:a8:99:40:fb:43:64:66:ca:15:15:4b:a2:
b1:fc:b4:59:60:ae:ee:bf:50:4d:9f:af:9c:ae:a3:bd:96:cb:
47:4a:ae:47:03:a0:2b:6a:63:fc:d4:2d:41:62:1b:2e:bf:b2:
55:87:1d:12:d3:0f:bf:4a:71:d7:67:c0:7d:0d:08:9b:68:ba:
29:70:2c:70:e8:b1:8a:15:97:ca:85:51:4d:5a:8c:8c:6e:89:
73:93:c4:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyuoN3kIWGneygYiJexbN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjMwMTAyMTM0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjdhYWQ3Nzg5M2NiZDNkYWNhODcwMTJkYzEzOTEwNGI4OTI3OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzTwgx3dYGtQnlG4YFuNr5EgLBfg
df0HF7DOjp6CbhJOH3s2kQouhUeAJFrcjUBzvVtwP31w9GJrM0sKV53OBhN7+q4K
mFNZGQVsSYQr64bB5bLNiJfEkRXKFHjONm5mtPS7ZTMtvhsaPUqrWxr7tUwTeM0I
OzAH+QgSV2CZ18wZRH4OuqNMnkGdgsKvGvpc1Oo55Y8e7oPDqf/yxpC7C0S5gU7M
KqBM1ZuCgV+WwGaFDmYsIcXt3rmSfea0q+nPEM0BYXc3BXtfZe6DjFXicGqrrnOD
T+ycdFa3FssYjq3JRtiI3ZEI8puLVXp/u4/fz22NMwRX8L6Z9zIPD6OZtwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCZ6rXeJPL09rKhwEtwTkQS4knjQMB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvSm5xdGQ0azh2VDJzcUhBUzNCT1JCTGlTZU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgdOwDAN
BgkqhkiG9w0BAQsFAAOCAQEAAi2fHWfxya5Yp2Ut6mC/Xfs4cFPp4WTvO8UX85Yd
ZOWLk1Jsx+jttg/+khVbFW/HqM4v/lj9CEywwTWFR5D8JG5PVyp72whNMI0v2TdH
RsSTGUW/W2z/RWpyhXsbZcl19cynj+JZbSYSmGepv4bHj+WVE2Hy8XWdYKRhjBKk
XQnWntzInJ6MAr8r0wvkHLEbS3s67Gib7NghXzfWeM9gPk7IOaMS+PPeqJlA+0Nk
ZsoVFUuisfy0WWCu7r9QTZ+vnK6jvZbLR0quRwOgK2pj/NQtQWIbLr+yVYcdEtMP
v0px12fAfQ0Im2i6KXAscOixihWXyoVRTVqMjG6Jc5PEHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:33 2024 by rpki-client on console-fra.rpki-client.org