Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/SC5blpcYf5IQd1VnOaExq8_nhJU.roa
File: SC5blpcYf5IQd1VnOaExq8_nhJU.roa (raw, json)
Hash identifier: Eo83WChOMne/pJu6EKIZxbO5qoErajlQ+qOkBCv3HAo=
Subject key identifier: 48:2E:5B:96:97:18:7F:92:10:77:55:67:39:A1:31:AB:CF:E7:84:95
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018B205EF45E217509DD2C56EEDE545C176C
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/SC5blpcYf5IQd1VnOaExq8_nhJU.roa
Signing time: Wed 11 Oct 2023 20:12:55 +0000
ROA not before: Wed 11 Oct 2023 20:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216271
IP address blocks: 2a13:dac0::/29 maxlen: 29
2a0e:7780::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 08:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:5e:f4:5e:21:75:09:dd:2c:56:ee:de:54:5c:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 11 20:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482e5b9697187f921077556739a131abcfe78495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:4e:a9:73:2e:a5:4e:0d:7f:9e:a3:d4:2a:
a5:2c:90:b8:d2:62:cc:96:26:c2:19:34:32:4e:de:
a5:12:1d:ab:c4:a2:84:00:09:38:87:7a:a4:40:0d:
35:b6:8b:4b:57:25:01:04:6e:78:96:cd:ca:32:55:
37:71:70:fc:68:4a:02:99:b9:90:04:66:19:4e:48:
d0:a4:be:00:bf:86:9f:d0:6a:8a:91:08:08:4d:e8:
ed:25:8d:3d:40:41:ab:bb:7a:5f:04:13:d1:76:1e:
2a:5f:bb:37:e5:3b:dd:f5:fc:0c:3f:f9:c8:e1:a0:
76:2f:1b:78:73:f5:9e:b8:34:38:b1:00:e0:6c:be:
b9:4c:4d:99:a3:91:34:86:5e:0c:51:5a:a8:a1:39:
2d:ba:94:3d:01:e0:90:5a:2e:51:d4:0e:21:2f:a1:
0d:ed:9d:c9:df:a6:c9:66:46:99:d7:88:d6:33:b5:
ff:a0:2a:09:8b:61:18:9e:21:37:e1:db:a1:c2:23:
ba:ac:bc:a9:5c:c7:aa:8e:68:db:69:a8:33:b8:fc:
ad:1f:61:cb:66:58:c9:47:83:52:da:89:24:3b:93:
91:2b:46:29:c1:de:cb:4a:a9:91:42:b7:bd:8c:a7:
47:fc:ac:7e:b7:d1:bf:4b:c0:15:c6:76:3e:4a:4e:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:5B:96:97:18:7F:92:10:77:55:67:39:A1:31:AB:CF:E7:84:95
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/SC5blpcYf5IQd1VnOaExq8_nhJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7780::/29
2a13:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
25:7b:d4:f7:38:08:2c:3c:77:aa:1d:e9:87:15:3e:4a:24:b3:
41:77:b3:93:1a:9d:fa:97:84:84:53:27:5d:d1:a8:11:29:b7:
42:2a:73:0f:e1:aa:2d:ed:9a:5a:3c:18:cc:4d:0c:8e:54:48:
a0:17:93:87:df:7e:ba:01:2f:28:d5:39:04:91:2b:2e:58:2c:
9d:18:4d:89:d9:10:d4:03:c3:c7:d0:e0:9b:67:c3:4b:b7:93:
c0:2e:ff:49:7a:a5:e9:9f:da:d3:c9:fe:c1:3d:4f:83:19:5b:
cb:20:45:90:5e:16:26:b5:b8:8f:e2:38:fd:29:8a:2f:fb:8a:
9c:ec:52:97:6b:8a:1b:ec:a4:cd:a3:c8:4c:13:e5:b0:8c:80:
d3:14:fa:98:30:f1:31:b1:43:14:55:01:a9:c5:57:4f:5e:71:
eb:0e:d9:ba:5b:fe:35:41:7e:db:ee:02:7a:2c:16:99:61:10:
d7:ba:7d:9a:8a:76:4e:d1:b2:44:b9:b8:ff:6b:4d:68:8a:78:
73:45:70:28:1c:38:16:3d:ed:1c:e7:06:d0:eb:88:8c:03:4f:
a3:46:58:80:04:8f:3f:dd:f4:61:55:0e:2a:7b:17:4e:09:71:
a4:bb:17:bb:09:9f:a6:c2:96:4c:4c:eb:89:9e:ca:01:41:5c:
8f:b2:7c:17
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYsgXvReIXUJ3SxW7t5UXBdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjMxMDExMjAxMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODJlNWI5Njk3MTg3ZjkyMTA3NzU1NjczOWExMzFhYmNmZTc4NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqhOqXMupU4Nf56j1CqlLJC40mLM
libCGTQyTt6lEh2rxKKEAAk4h3qkQA01totLVyUBBG54ls3KMlU3cXD8aEoCmbmQ
BGYZTkjQpL4Av4af0GqKkQgITejtJY09QEGru3pfBBPRdh4qX7s35Tvd9fwMP/nI
4aB2Lxt4c/WeuDQ4sQDgbL65TE2Zo5E0hl4MUVqooTktupQ9AeCQWi5R1A4hL6EN
7Z3J36bJZkaZ14jWM7X/oCoJi2EYniE34duhwiO6rLypXMeqjmjbaagzuPytH2HL
ZljJR4NS2okkO5ORK0Ypwd7LSqmRQre9jKdH/Kx+t9G/S8AVxnY+Sk5SmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEguW5aXGH+SEHdVZzmhMavP54SVMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvU0M1YmxwY1lmNUlRZDFWbk9hRXhxOF9uaEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg53gAMF
AyoT2sAwDQYJKoZIhvcNAQELBQADggEBACV71Pc4CCw8d6od6YcVPkoks0F3s5Ma
nfqXhIRTJ13RqBEpt0Iqcw/hqi3tmlo8GMxNDI5USKAXk4fffroBLyjVOQSRKy5Y
LJ0YTYnZENQDw8fQ4Jtnw0u3k8Au/0l6pemf2tPJ/sE9T4MZW8sgRZBeFia1uI/i
OP0pii/7ipzsUpdrihvspM2jyEwT5bCMgNMU+pgw8TGxQxRVAanFV09ecesO2bpb
/jVBftvuAnosFplhENe6fZqKdk7RskS5uP9rTWiKeHNFcCgcOBY97RznBtDriIwD
T6NGWIAEjz/d9GFVDip7F04JcaS7F7sJn6bClkxM64meygFBXI+yfBc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org