Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/iqfI4V-LIHGO6X9G9D67ksyAVvE.roa
File: iqfI4V-LIHGO6X9G9D67ksyAVvE.roa (raw, json)
Hash identifier: ZOrJkcQzMXAl29PnihOdSJzpZuFG4pNts6GniOAEwcw=
Subject key identifier: 8A:A7:C8:E1:5F:8B:20:71:8E:E9:7F:46:F4:3E:BB:92:CC:80:56:F1
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01929C026A87A24E37E0DB4409FDD4238647
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/iqfI4V-LIHGO6X9G9D67ksyAVvE.roa
Signing time: Thu 17 Oct 2024 19:44:16 +0000
ROA not before: Thu 17 Oct 2024 19:44:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0e:dfc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Nov 2024 10:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:02:6a:87:a2:4e:37:e0:db:44:09:fd:d4:23:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Oct 17 19:44:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa7c8e15f8b20718ee97f46f43ebb92cc8056f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:b6:b7:09:51:de:0b:80:3b:59:a1:83:c9:
dc:35:e7:42:65:52:06:ba:91:fa:c6:65:83:e6:f5:
a0:d7:10:b6:0c:4f:1b:8b:0f:47:be:f2:b0:20:cb:
9d:b3:fa:43:fe:64:fd:c0:92:3e:fa:c6:c1:91:6d:
48:07:c2:d0:8a:f4:6c:a3:ab:6a:ec:14:88:95:a1:
cc:10:95:6f:bc:9c:95:e0:0f:6c:85:7d:36:2e:1d:
8a:d0:36:18:49:10:32:77:13:03:f4:34:05:59:c0:
83:d2:07:7e:7f:a0:f6:34:67:a8:93:1e:ab:40:ee:
82:8c:d3:fd:36:53:f5:d6:eb:54:3c:e0:de:db:41:
25:e7:c2:ba:b9:10:9f:6d:c6:28:7b:2f:97:2f:9b:
3b:8f:17:20:d9:c0:06:44:ae:e2:75:b9:31:ec:12:
3b:ee:e9:a1:75:ba:ed:fb:be:fd:97:db:55:bd:e9:
2d:2f:7b:06:42:1e:c4:04:54:31:bb:7c:3f:66:0c:
7f:81:6d:76:46:d8:43:bb:de:3a:a0:5a:f5:31:22:
23:0e:03:81:da:16:5f:78:31:6d:04:00:ba:9a:15:
c2:cc:69:a2:6d:be:17:5d:0b:ec:fa:26:b1:b7:df:
d7:55:d9:85:01:18:aa:6d:df:a1:4f:52:19:e5:7c:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:C8:E1:5F:8B:20:71:8E:E9:7F:46:F4:3E:BB:92:CC:80:56:F1
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/iqfI4V-LIHGO6X9G9D67ksyAVvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:fc:d4:d9:62:b4:d7:f4:75:fd:52:af:81:8c:2b:b9:30:26:
f5:9d:80:54:29:da:28:97:08:b7:9b:31:a9:b0:64:e1:70:34:
92:63:10:45:40:91:5a:59:7c:59:d6:22:75:bd:97:c4:a0:74:
a1:eb:01:8f:b2:64:7e:ed:38:eb:ee:43:61:cb:80:5c:2b:2a:
08:3b:ad:71:b8:45:41:fe:f8:97:42:95:85:50:49:60:3c:4a:
28:1a:1e:07:40:0e:9c:68:48:65:36:eb:d3:e8:ef:1f:4b:60:
cb:4a:47:b5:a5:ba:37:67:dd:ad:9e:18:c5:9e:a4:3d:68:23:
cd:de:e5:3a:7c:ee:ab:aa:39:4b:9a:3f:a4:32:9e:7c:14:33:
de:28:40:b4:a3:76:53:60:83:b6:34:80:f2:81:d3:15:7c:a8:
12:a6:3e:a8:4d:2e:59:d6:88:90:a2:59:4f:19:e4:13:02:f6:
64:80:cc:5b:e8:e6:2c:e3:f7:27:a5:1e:a1:43:1c:45:d2:df:
a4:58:e4:6a:61:5e:da:e3:1b:ce:73:5c:6f:3c:69:b6:79:8f:
46:63:66:1b:d2:d7:06:5d:f9:a6:1d:1a:ee:82:e5:1a:31:ca:
71:2e:00:14:39:7c:77:1f:9b:c5:03:0d:36:95:2c:09:26:b0:
db:13:b1:3c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZKcAmqHok434NtECf3UI4ZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjQxMDE3MTk0NDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWE3YzhlMTVmOGIyMDcxOGVlOTdmNDZmNDNlYmI5MmNjODA1NmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vW2twlR3guAO1mhg8ncNedCZVIG
upH6xmWD5vWg1xC2DE8biw9HvvKwIMuds/pD/mT9wJI++sbBkW1IB8LQivRso6tq
7BSIlaHMEJVvvJyV4A9shX02Lh2K0DYYSRAydxMD9DQFWcCD0gd+f6D2NGeokx6r
QO6CjNP9NlP11utUPODe20El58K6uRCfbcYoey+XL5s7jxcg2cAGRK7idbkx7BI7
7umhdbrt+779l9tVvektL3sGQh7EBFQxu3w/Zgx/gW12RthDu946oFr1MSIjDgOB
2hZfeDFtBAC6mhXCzGmibb4XXQvs+iaxt9/XVdmFARiqbd+hT1IZ5XxKgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIqnyOFfiyBxjul/RvQ+u5LMgFbxMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvaXFmSTRWLUxJSEdPNlg5RzlENjdrc3lBVnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7fwDAN
BgkqhkiG9w0BAQsFAAOCAQEAuPzU2WK01/R1/VKvgYwruTAm9Z2AVCnaKJcIt5sx
qbBk4XA0kmMQRUCRWll8WdYidb2XxKB0oesBj7Jkfu046+5DYcuAXCsqCDutcbhF
Qf74l0KVhVBJYDxKKBoeB0AOnGhIZTbr0+jvH0tgy0pHtaW6N2fdrZ4YxZ6kPWgj
zd7lOnzuq6o5S5o/pDKefBQz3ihAtKN2U2CDtjSA8oHTFXyoEqY+qE0uWdaIkKJZ
TxnkEwL2ZIDMW+jmLOP3J6UeoUMcRdLfpFjkamFe2uMbznNcbzxptnmPRmNmG9LX
Bl35ph0a7oLlGjHKcS4AFDl8dx+bxQMNNpUsCSaw2xOxPA==
-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:07 2024 by rpki-client on console-fra.rpki-client.org