Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/VPtEcgYhSrYcWtsANSBzaJvc2dY.roa
File: VPtEcgYhSrYcWtsANSBzaJvc2dY.roa (raw, json)
Hash identifier: nMzW9eg0ZCp8PfDjRUgbezRDDj8b2mrN8oVvbvqIPC0=
Subject key identifier: 54:FB:44:72:06:21:4A:B6:1C:5A:DB:00:35:20:73:68:9B:DC:D9:D6
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018FDFF5EEDE3FEB9580A2A977CB9D66AE39
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/VPtEcgYhSrYcWtsANSBzaJvc2dY.roa
Signing time: Mon 03 Jun 2024 21:16:27 +0000
ROA not before: Mon 03 Jun 2024 21:16:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a11:2f40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 32
2a14:c0::/29 maxlen: 29
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 06 Jun 2024 14:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:f5:ee:de:3f:eb:95:80:a2:a9:77:cb:9d:66:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 3 21:16:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fb447206214ab61c5adb00352073689bdcd9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:24:cb:fc:85:79:0a:5e:b1:c9:5c:7b:89:
87:9b:e9:4b:74:af:7c:61:c8:57:45:28:14:36:31:
7f:15:0d:b4:d8:61:69:39:1b:d0:c7:40:aa:37:30:
45:7f:a5:5c:61:40:68:f2:7f:01:e0:a7:42:62:6d:
17:fe:d1:dd:f0:d1:44:15:27:0e:0c:f9:cb:38:07:
5b:43:5a:7c:bf:9b:ac:a5:8e:45:89:a0:01:e9:c0:
bc:fa:fd:1b:1f:e3:3c:6c:e9:53:2c:1c:0c:dd:6b:
b5:b9:6c:a5:85:7d:dd:48:56:93:93:2b:31:43:86:
ba:a8:03:98:b3:ff:fd:9d:aa:84:6c:de:9c:ee:4f:
b5:2d:76:a2:1b:04:aa:88:9c:d3:98:35:e3:ff:2d:
ea:3a:ad:dc:bc:74:df:ac:a5:c3:88:02:a5:58:0d:
f5:21:31:e7:f2:51:ef:c0:82:d3:c7:ed:23:75:b4:
62:27:fe:e4:75:9e:cf:6b:ac:30:33:0d:4f:8f:52:
91:a6:ad:e7:9c:4f:3c:2e:bc:00:ab:53:43:c4:70:
32:61:e1:f0:62:94:81:67:de:75:f5:6d:a4:b6:2a:
56:1b:67:c0:73:c6:b4:d1:eb:1c:61:3d:33:9d:d5:
12:fa:a2:40:d2:cc:3b:27:f4:11:ca:fb:a8:36:80:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:44:72:06:21:4A:B6:1C:5A:DB:00:35:20:73:68:9B:DC:D9:D6
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/VPtEcgYhSrYcWtsANSBzaJvc2dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2f40::/29
2a11:7240::/29
2a11:dcc0::/29
2a14:c0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
Signature Algorithm: sha256WithRSAEncryption
93:f7:dd:e4:86:a0:db:5f:df:65:21:e9:a0:12:89:84:f5:84:
92:10:04:99:03:c5:35:20:c9:e8:93:06:6d:8b:ae:33:bd:78:
6b:56:32:dc:e3:f3:b4:07:a5:1a:d0:41:d9:fd:10:87:96:2c:
ec:19:c0:b5:b5:04:06:92:b9:9b:a2:8b:3b:77:df:98:68:1b:
68:f2:4c:ab:09:f4:dc:6b:66:04:b6:a0:b2:84:79:94:4a:36:
9f:03:49:ad:1e:e3:16:42:98:19:a6:e5:39:d4:62:fb:0a:5e:
12:dc:ba:d9:dc:83:0d:df:43:d0:df:8c:94:08:cb:53:fb:f8:
58:27:c8:bd:9c:b5:34:47:c0:c2:21:e5:85:eb:fd:f6:63:ef:
12:24:cd:56:3b:3a:ed:d6:5e:2c:9f:64:85:06:11:a9:88:b3:
71:5d:ea:b3:d5:b3:9d:f5:9b:39:39:be:5f:f3:32:8d:5e:71:
28:f5:03:2a:7e:c8:9d:65:2c:51:7e:a7:eb:7f:32:ff:29:96:
b2:c2:35:3a:e0:89:5b:0f:67:21:fd:15:de:72:82:9b:77:bb:
a4:6f:f3:fa:87:a2:08:4a:9a:20:e2:97:94:0e:41:a4:57:d9:
a1:a5:19:23:7e:ca:7d:b3:4f:58:f9:aa:1c:90:c0:23:76:f8:
ab:96:e7:e2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY/f9e7eP+uVgKKpd8udZq45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwNjAzMjExNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZiNDQ3MjA2MjE0YWI2MWM1YWRiMDAzNTIwNzM2ODliZGNkOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rwky/yFeQpesclce4mHm+lLdK98
YchXRSgUNjF/FQ202GFpORvQx0CqNzBFf6VcYUBo8n8B4KdCYm0X/tHd8NFEFScO
DPnLOAdbQ1p8v5uspY5FiaAB6cC8+v0bH+M8bOlTLBwM3Wu1uWylhX3dSFaTkysx
Q4a6qAOYs//9naqEbN6c7k+1LXaiGwSqiJzTmDXj/y3qOq3cvHTfrKXDiAKlWA31
ITHn8lHvwILTx+0jdbRiJ/7kdZ7Pa6wwMw1Pj1KRpq3nnE88LrwAq1NDxHAyYeHw
YpSBZ9519W2ktipWG2fAc8a00escYT0zndUS+qJA0sw7J/QRyvuoNoBNVwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFFT7RHIGIUq2HFrbADUgc2ib3NnWMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvVlB0RWNnWWhTclljV3RzQU5TQnphSnZjMmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwUDKhEvQAMF
AyoRckADBQMqEdzAAwUDKhQAwAMFAyoUAUADBQMqFAHAAwUDKhQIAAMFAyoUD0Aw
DQYJKoZIhvcNAQELBQADggEBAJP33eSGoNtf32Uh6aASiYT1hJIQBJkDxTUgyeiT
Bm2LrjO9eGtWMtzj87QHpRrQQdn9EIeWLOwZwLW1BAaSuZuiizt335hoG2jyTKsJ
9NxrZgS2oLKEeZRKNp8DSa0e4xZCmBmm5TnUYvsKXhLcutncgw3fQ9DfjJQIy1P7
+FgnyL2ctTRHwMIh5YXr/fZj7xIkzVY7Ou3WXiyfZIUGEamIs3Fd6rPVs531mzk5
vl/zMo1ecSj1Ayp+yJ1lLFF+p+t/Mv8plrLCNTrgiVsPZyH9Fd5ygpt3u6Rv8/qH
oghKmiDil5QOQaRX2aGlGSN+yn2zT1j5qhyQwCN2+KuW5+I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:45 2024 by rpki-client on console-ams.rpki-client.org