Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8jOmlBXO3-fUR0Rcmgn2RrH2joY.roa
File: 8jOmlBXO3-fUR0Rcmgn2RrH2joY.roa (raw, json)
Hash identifier: oZUO2eAgXxfOfk7D9Y3owEJwHD6My0QDgJmOzIype40=
Subject key identifier: F2:33:A6:94:15:CE:DF:E7:D4:47:44:5C:9A:09:F6:46:B1:F6:8E:86
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018E0FF8181F09A29D2A893E8556D6786796
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8jOmlBXO3-fUR0Rcmgn2RrH2joY.roa
Signing time: Tue 05 Mar 2024 18:55:01 +0000
ROA not before: Tue 05 Mar 2024 18:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:e2c0::/29 maxlen: 32
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a13:ba00::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Mar 2024 08:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:f8:18:1f:09:a2:9d:2a:89:3e:85:56:d6:78:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 5 18:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f233a69415cedfe7d447445c9a09f646b1f68e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:99:44:45:eb:f5:1c:73:55:07:0d:bc:4c:
23:f2:f4:e0:38:40:c9:d3:4d:48:56:7f:ba:67:d2:
3a:42:f3:e6:8b:43:02:cb:c4:65:45:fc:86:bd:0d:
5b:30:88:ba:5f:7a:37:c1:c9:7d:40:a7:62:41:76:
9f:f4:24:1e:8b:17:d2:f3:cc:80:a8:8e:e7:47:51:
1b:f7:fe:40:82:a1:d4:d7:23:bc:63:96:09:c4:55:
d9:43:23:d9:f1:9b:a5:b5:27:60:46:ef:2d:c4:54:
73:6f:09:30:83:3d:eb:73:b6:8b:ef:93:20:7f:27:
f3:59:5e:5b:46:3b:91:be:5c:d6:84:2b:e8:4b:f3:
13:53:9a:8a:5b:ab:f2:5a:94:e5:0a:a9:43:ca:18:
2d:ec:0d:37:43:65:b1:9f:cc:a9:5f:f6:9d:cb:d7:
4f:ca:85:60:bc:cf:20:d6:98:c1:46:5c:98:58:6f:
57:93:d0:c6:2b:c8:e4:8e:b1:d3:92:d6:2b:d4:56:
c3:b1:4b:f8:01:d9:ef:ac:a1:f4:9c:11:ab:0a:98:
c5:fb:b5:c9:98:64:47:4d:33:c7:16:d5:a1:bb:34:
dd:da:8c:68:3c:c2:a9:49:7a:9d:a7:a4:71:44:b4:
e2:1a:a7:07:f3:9f:2d:ca:9a:b9:a5:3c:77:b4:c9:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:A6:94:15:CE:DF:E7:D4:47:44:5C:9A:09:F6:46:B1:F6:8E:86
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/8jOmlBXO3-fUR0Rcmgn2RrH2joY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:9600::/29
2a11:dcc0::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
c4:bf:c3:c4:6e:91:9b:40:32:26:5b:4b:ab:08:38:6b:16:bd:
0c:2d:9b:2a:f7:c2:3c:bd:af:e7:5d:da:2b:80:25:16:a0:a6:
d7:f5:b6:63:eb:24:73:91:c8:9c:ad:be:bd:d9:d0:2b:50:bd:
e0:70:ed:fd:3b:87:40:bf:d1:dd:a0:ac:af:3e:ac:b8:48:ed:
9c:6d:ef:6f:22:46:63:8c:22:d4:e7:7f:c0:8b:d1:53:9a:0a:
6c:a4:51:d2:1e:55:ac:b3:35:36:70:5f:67:4d:f1:4a:31:0c:
ee:09:66:7c:33:97:97:2e:a9:f6:95:97:ee:41:4a:8e:56:86:
b7:90:91:a5:03:72:26:04:73:c4:9a:a4:6b:08:3d:b3:e4:57:
d4:76:28:77:9b:c5:df:ba:21:ab:e1:d4:e8:15:b7:35:7e:b0:
15:4a:6a:91:38:01:b3:b3:2d:98:bd:bc:fe:52:57:9f:b3:7b:
d4:86:40:21:22:d6:38:5b:8b:0d:99:88:db:42:3c:7c:0a:bd:
07:cf:1e:8b:94:4d:ca:c4:3c:4e:4f:10:15:aa:90:b7:59:01:
e7:11:3f:87:0e:a5:36:07:bb:a6:5f:84:ee:5d:b8:22:7d:96:
a1:4d:7f:8a:70:e4:0b:f4:c4:9d:42:b7:c6:05:39:4a:de:33:
06:50:72:f8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAY4P+BgfCaKdKok+hVbWeGeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwMzA1MTg1NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjMzYTY5NDE1Y2VkZmU3ZDQ0NzQ0NWM5YTA5ZjY0NmIxZjY4ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSaZREXr9RxzVQcNvEwj8vTgOEDJ
001IVn+6Z9I6QvPmi0MCy8RlRfyGvQ1bMIi6X3o3wcl9QKdiQXaf9CQeixfS88yA
qI7nR1Eb9/5AgqHU1yO8Y5YJxFXZQyPZ8ZultSdgRu8txFRzbwkwgz3rc7aL75Mg
fyfzWV5bRjuRvlzWhCvoS/MTU5qKW6vyWpTlCqlDyhgt7A03Q2Wxn8ypX/ady9dP
yoVgvM8g1pjBRlyYWG9Xk9DGK8jkjrHTktYr1FbDsUv4AdnvrKH0nBGrCpjF+7XJ
mGRHTTPHFtWhuzTd2oxoPMKpSXqdp6RxRLTiGqcH858typq5pTx3tMmEXQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFPIzppQVzt/n1EdEXJoJ9kax9o6GMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvOGpPbWxCWE8zLWZVUjBSY21nbjJSckgyam9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUDKgriwAMF
AyoOd4ADBQMqD+AAAwUDKhEvQAMFAyoRO0ADBQMqEZYAAwUDKhHcwAMFAyoTugAD
BQMqE9rAAwUDKhR+ADANBgkqhkiG9w0BAQsFAAOCAQEAxL/DxG6Rm0AyJltLqwg4
axa9DC2bKvfCPL2v513aK4AlFqCm1/W2Y+skc5HInK2+vdnQK1C94HDt/TuHQL/R
3aCsrz6suEjtnG3vbyJGY4wi1Od/wIvRU5oKbKRR0h5VrLM1NnBfZ03xSjEM7glm
fDOXly6p9pWX7kFKjlaGt5CRpQNyJgRzxJqkawg9s+RX1HYod5vF37ohq+HU6BW3
NX6wFUpqkTgBs7MtmL28/lJXn7N71IZAISLWOFuLDZmI20I8fAq9B88ei5RNysQ8
Tk8QFaqQt1kB5xE/hw6lNge7pl+E7l24In2WoU1/inDkC/TEnUK3xgU5St4zBlBy
+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:37 2024 by rpki-client on console-fra.rpki-client.org