Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Eh4hw3uT2dQI6enTqQn5faecNVk.roa
File: Eh4hw3uT2dQI6enTqQn5faecNVk.roa (raw, json)
Hash identifier: pDtYkn08sqEagJuGHOZqhAs3/8n5lCH0YuUAm8APBF4=
Subject key identifier: 12:1E:21:C3:7B:93:D9:D4:08:E9:E9:D3:A9:09:F9:7D:A7:9C:35:59
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 018571B0E11974284A780DF66F467EFDE705
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Eh4hw3uT2dQI6enTqQn5faecNVk.roa
Signing time: Mon 02 Jan 2023 08:54:55 +0000
ROA not before: Mon 02 Jan 2023 08:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212580
IP address blocks: 2a11:e487:1::/48 maxlen: 48
2a11:e487:fc01::/48 maxlen: 48
2a11:e487:2::/48 maxlen: 48
2a11:e487:beef::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e1:19:74:28:4a:78:0d:f6:6f:46:7e:fd:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 2 08:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121e21c37b93d9d408e9e9d3a909f97da79c3559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:f4:49:aa:be:78:4d:ad:ae:30:88:6b:9f:
0e:f0:d8:96:a7:0b:e9:c6:90:c0:a6:a5:f7:eb:36:
cd:5a:fe:41:a2:90:5e:95:f2:d7:d7:f2:70:cc:48:
4e:d9:78:35:24:9d:d3:44:f5:a5:56:35:05:78:b2:
7b:71:db:e9:8e:7d:03:59:dc:bf:3b:68:fe:bb:89:
f0:10:8b:ed:af:e7:28:4a:80:7e:3f:34:d3:f2:7e:
87:75:72:df:11:af:a1:89:8d:15:6d:3a:dd:aa:bf:
4c:63:68:02:e7:f7:15:17:6f:16:d6:5d:e6:17:66:
fc:7e:0e:ae:47:05:b7:6f:04:a2:c9:c1:c1:f3:58:
33:0d:42:06:a9:2e:a3:8f:76:fa:36:fe:d8:e4:c2:
2a:9d:f0:2f:06:aa:39:47:57:57:aa:a3:5d:30:33:
11:e2:8a:7e:cc:e9:fd:0f:b5:0f:c5:0f:9b:66:b3:
1b:6a:b0:01:f3:c0:27:5e:18:8f:70:00:37:28:e0:
09:a6:5f:3f:4b:8a:86:5f:66:c3:6f:04:d8:47:1a:
ae:0e:cb:a7:0f:57:b4:3d:10:9e:f9:ce:93:9a:c0:
c1:cf:e1:71:36:a3:68:9d:bd:89:14:7f:46:1c:1c:
d0:b0:2f:63:95:66:75:60:a2:96:67:80:b3:13:76:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:21:C3:7B:93:D9:D4:08:E9:E9:D3:A9:09:F9:7D:A7:9C:35:59
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Eh4hw3uT2dQI6enTqQn5faecNVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:1::-2a11:e487:2:ffff:ffff:ffff:ffff:ffff
2a11:e487:beef::/48
2a11:e487:fc01::/48
Signature Algorithm: sha256WithRSAEncryption
8c:bf:54:55:bd:e7:3b:9a:73:c0:2e:1e:bb:c3:39:e4:90:21:
90:94:2c:70:21:dd:31:3b:00:57:90:d6:48:d4:d4:fd:25:86:
14:25:52:b8:46:c7:1d:c6:e5:a8:2f:c1:da:8c:a2:12:b8:63:
2e:b9:79:8f:03:be:bd:d6:95:5d:6b:70:d9:93:50:99:6e:29:
de:35:22:48:b6:00:f8:3f:45:9b:20:3f:5a:04:75:3d:77:20:
f7:95:57:f6:28:e2:c2:4c:3c:ea:1a:8c:ab:22:26:5b:4c:6c:
f9:21:47:40:00:56:94:a7:55:61:95:b7:df:06:53:54:bb:69:
8c:02:47:fb:bd:9a:dd:8d:34:89:a3:73:45:00:71:aa:1c:37:
dc:20:03:60:19:67:28:20:a3:3c:5c:41:f9:6d:5b:9b:67:9f:
11:88:78:dd:86:be:2d:fc:ab:e1:4b:82:29:f1:3d:c7:2c:4f:
10:15:ae:7b:b4:f4:80:cb:ee:4f:6f:74:ba:34:51:71:74:e5:
a3:5d:f9:07:f7:e0:89:e3:34:ef:d8:56:89:90:b6:a6:76:de:
41:a9:29:4f:b7:24:fd:a0:8b:08:c9:a7:12:8d:92:80:14:6f:
f2:65:2b:af:87:6f:f1:9f:52:51:7d:25:76:5b:da:49:2a:ad:
38:9a:00:cc
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVxsOEZdChKeA32b0Z+/ecFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjMwMTAyMDg1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjFlMjFjMzdiOTNkOWQ0MDhlOWU5ZDNhOTA5Zjk3ZGE3OWMzNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4z0Saq+eE2trjCIa58O8NiWpwvp
xpDApqX36zbNWv5BopBelfLX1/JwzEhO2Xg1JJ3TRPWlVjUFeLJ7cdvpjn0DWdy/
O2j+u4nwEIvtr+coSoB+PzTT8n6HdXLfEa+hiY0VbTrdqr9MY2gC5/cVF28W1l3m
F2b8fg6uRwW3bwSiycHB81gzDUIGqS6jj3b6Nv7Y5MIqnfAvBqo5R1dXqqNdMDMR
4op+zOn9D7UPxQ+bZrMbarAB88AnXhiPcAA3KOAJpl8/S4qGX2bDbwTYRxquDsun
D1e0PRCe+c6TmsDBz+FxNqNonb2JFH9GHBzQsC9jlWZ1YKKWZ4CzE3YR5QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBIeIcN7k9nUCOnp06kJ+X2nnDVZMB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvRWg0aHczdVQyZFFJNmVuVHFRbjVmYWVjTlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqEeSH
AAEDBwAqEeSHAAIDBwAqEeSHvu8DBwAqEeSH/AEwDQYJKoZIhvcNAQELBQADggEB
AIy/VFW95zuac8AuHrvDOeSQIZCULHAh3TE7AFeQ1kjU1P0lhhQlUrhGxx3G5agv
wdqMohK4Yy65eY8Dvr3WlV1rcNmTUJluKd41Iki2APg/RZsgP1oEdT13IPeVV/Yo
4sJMPOoajKsiJltMbPkhR0AAVpSnVWGVt98GU1S7aYwCR/u9mt2NNImjc0UAcaoc
N9wgA2AZZyggozxcQfltW5tnnxGIeN2Gvi38q+FLginxPccsTxAVrnu09IDL7k9v
dLo0UXF05aNd+Qf34InjNO/YVomQtqZ23kGpKU+3JP2giwjJpxKNkoAUb/JlK6+H
b/GfUlF9JXZb2kkqrTiaAMw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org