Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/OepP8fzq1jBVBhxiiCptK3ZXPro.roa
File: OepP8fzq1jBVBhxiiCptK3ZXPro.roa (raw, json)
Hash identifier: qhXG/jobhgWC+NWystOVMOfGmoNfXiPJ1gH1qDBxbYk=
Subject key identifier: 39:EA:4F:F1:FC:EA:D6:30:55:06:1C:62:88:2A:6D:2B:76:57:3E:BA
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019103F923208F42E2ECC8185695734137F6
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/OepP8fzq1jBVBhxiiCptK3ZXPro.roa
Signing time: Tue 30 Jul 2024 14:09:04 +0000
ROA not before: Tue 30 Jul 2024 14:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a06:b3c0::/29 maxlen: 29
2a11:f240::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Aug 2024 06:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:f9:23:20:8f:42:e2:ec:c8:18:56:95:73:41:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jul 30 14:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39ea4ff1fcead63055061c62882a6d2b76573eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:f6:1b:1f:c6:6d:97:87:d9:7c:e3:d8:50:
aa:57:10:82:33:ff:37:04:26:37:7a:75:05:10:aa:
b1:4b:b7:b9:02:7f:fc:f8:7b:d6:e1:e4:8d:16:17:
31:17:0f:f1:97:7e:99:d2:5a:f6:98:84:3e:db:92:
90:8f:34:68:c3:f0:e5:70:3a:05:3e:39:6c:55:51:
03:3a:d2:4d:a5:b5:1a:77:58:5b:a2:8b:2c:4c:c9:
44:58:5f:0e:2a:34:9f:4a:9c:78:46:33:df:a0:02:
09:95:cb:21:3c:3e:e1:8b:9c:27:10:ba:dd:3f:87:
e3:af:98:68:48:03:f4:8d:9d:30:3c:7e:19:0f:f7:
22:e7:50:22:54:e1:e2:9b:2d:ed:65:75:8b:dd:59:
13:d2:ec:68:ed:cf:93:18:a8:7c:69:a0:09:21:e7:
44:60:80:9a:6a:65:b3:29:a1:c5:5d:62:f2:b5:10:
d5:a4:7c:c4:07:66:12:23:f6:10:db:8a:32:e4:f1:
0c:a4:25:47:fa:da:03:e4:c0:3f:07:87:7d:4a:d1:
8e:ac:96:fd:90:48:03:84:0e:5a:c6:3b:b8:1b:ee:
2a:5e:a8:31:4d:89:4f:00:92:90:9b:7f:04:ea:91:
fa:09:8f:1e:cd:79:04:0c:24:21:07:08:aa:0a:3e:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:4F:F1:FC:EA:D6:30:55:06:1C:62:88:2A:6D:2B:76:57:3E:BA
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/OepP8fzq1jBVBhxiiCptK3ZXPro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a11:f240::/29
Signature Algorithm: sha256WithRSAEncryption
01:ff:45:97:0a:e1:55:bc:73:59:af:51:cd:ba:1d:58:20:21:
b6:16:97:2b:3b:59:c8:35:b5:4f:9e:fd:47:3b:5d:70:1f:9a:
21:66:e0:1d:6f:b4:60:e7:09:b5:fc:08:9c:19:00:28:cb:01:
2b:fe:87:5c:58:cc:01:da:60:6f:24:3e:27:ea:37:fa:d2:18:
08:a3:af:76:ab:a9:48:1b:1a:9c:0d:4f:6e:c3:40:3c:30:cc:
ae:86:54:1f:c3:7b:6e:ba:ef:10:97:a0:31:cb:a0:20:54:a9:
c7:1d:9e:2c:ae:d6:1b:94:9a:ed:f2:4e:ee:aa:88:79:47:0e:
e9:33:78:12:07:56:90:74:e1:31:dc:c3:3c:fa:1f:f5:3a:f8:
43:52:d4:8e:d2:21:83:cb:22:54:28:95:7d:5f:37:ed:9d:b2:
fa:1f:13:be:38:27:8c:45:56:08:ce:46:91:08:86:65:e2:f2:
4c:62:11:ef:1a:c6:96:29:ee:ac:b7:f7:59:22:a2:95:4f:1f:
45:1d:70:db:99:8e:d3:d5:73:90:78:3b:82:bb:7d:34:dd:d5:
a8:4b:8b:aa:5c:46:bb:0c:5c:bc:be:8e:5d:47:b9:19:b3:29:
57:3b:20:39:45:35:8e:7a:17:45:33:4d:05:a7:41:15:7c:d0:
81:b9:c3:c8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZED+SMgj0Li7MgYVpVzQTf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwNzMwMTQwOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWVhNGZmMWZjZWFkNjMwNTUwNjFjNjI4ODJhNmQyYjc2NTczZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/f2Gx/GbZeH2Xzj2FCqVxCCM/83
BCY3enUFEKqxS7e5An/8+HvW4eSNFhcxFw/xl36Z0lr2mIQ+25KQjzRow/DlcDoF
PjlsVVEDOtJNpbUad1hboossTMlEWF8OKjSfSpx4RjPfoAIJlcshPD7hi5wnELrd
P4fjr5hoSAP0jZ0wPH4ZD/ci51AiVOHimy3tZXWL3VkT0uxo7c+TGKh8aaAJIedE
YICaamWzKaHFXWLytRDVpHzEB2YSI/YQ24oy5PEMpCVH+toD5MA/B4d9StGOrJb9
kEgDhA5axju4G+4qXqgxTYlPAJKQm38E6pH6CY8ezXkEDCQhBwiqCj4CfwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDnqT/H86tYwVQYcYogqbSt2Vz66MB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvT2VwUDhmenExakJWQmh4aWlDcHRLM1pYUHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgazwAMF
AyoR8kAwDQYJKoZIhvcNAQELBQADggEBAAH/RZcK4VW8c1mvUc26HVggIbYWlys7
Wcg1tU+e/Uc7XXAfmiFm4B1vtGDnCbX8CJwZACjLASv+h1xYzAHaYG8kPifqN/rS
GAijr3arqUgbGpwNT27DQDwwzK6GVB/De2667xCXoDHLoCBUqccdniyu1huUmu3y
Tu6qiHlHDukzeBIHVpB04THcwzz6H/U6+ENS1I7SIYPLIlQolX1fN+2dsvofE744
J4xFVgjORpEIhmXi8kxiEe8axpYp7qy391kiopVPH0UdcNuZjtPVc5B4O4K7fTTd
1ahLi6pcRrsMXLy+jl1HuRmzKVc7IDlFNY56F0UzTQWnQRV80IG5w8g=
-----END CERTIFICATE-----
Generated at Thu Aug 22 08:35:26 2024 by rpki-client on console-fra.rpki-client.org