Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/c2VH-myRyfVECPNDAN6EGOjY9bc.roa
File: c2VH-myRyfVECPNDAN6EGOjY9bc.roa (raw, json)
Hash identifier: auLLAWMaOdZ5rACZmfaBRKmSKeymmqDCt7MgGCVuS9s=
Subject key identifier: 73:65:47:FA:6C:91:C9:F5:44:08:F3:43:00:DE:84:18:E8:D8:F5:B7
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01902C66865D368E41825A9225AD40519BD0
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/c2VH-myRyfVECPNDAN6EGOjY9bc.roa
Signing time: Tue 18 Jun 2024 17:30:34 +0000
ROA not before: Tue 18 Jun 2024 17:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215531
IP address blocks: 2a12:ec0::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 17 Aug 2024 11:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:66:86:5d:36:8e:41:82:5a:92:25:ad:40:51:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 18 17:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736547fa6c91c9f54408f34300de8418e8d8f5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:9f:6a:d6:14:81:ee:4f:c3:69:7a:11:77:
28:f6:8b:72:f7:1e:99:72:ce:2a:31:11:11:96:07:
d6:0d:eb:19:5a:fe:33:81:54:b4:81:92:23:76:a8:
48:d9:90:bc:e5:e9:55:ae:0e:d3:42:08:ad:5d:27:
33:49:82:a9:45:68:a5:a5:e4:50:f9:ea:e3:7d:91:
19:1a:5d:ba:44:7b:4e:07:ff:20:2e:e7:48:08:01:
53:a7:da:a5:86:fa:0e:f4:91:9d:f5:85:6b:7f:52:
c7:d4:fb:4c:bf:e2:99:92:f8:8a:90:c5:d5:7b:d1:
1a:b2:5e:d6:e2:2f:0b:30:e9:81:bb:82:ec:32:56:
11:9d:85:24:48:4c:bf:18:de:a5:30:fb:02:b8:c8:
89:6a:b8:49:a2:95:33:46:ac:0f:51:bb:32:d5:e3:
91:a5:87:c6:58:4b:f6:7e:bd:b4:71:c2:86:87:58:
28:67:a1:51:4f:1e:12:5a:50:2f:9b:b3:3e:b5:fa:
57:23:9c:b0:d7:8e:50:2d:80:6c:84:90:83:e5:c4:
00:f9:b6:68:df:1e:06:b9:66:8b:98:e0:20:ad:dd:
01:14:75:d1:03:e1:2e:3d:3c:60:55:39:71:e8:c9:
3a:29:53:0a:1a:5c:85:23:4d:9c:09:52:02:41:af:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:47:FA:6C:91:C9:F5:44:08:F3:43:00:DE:84:18:E8:D8:F5:B7
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/c2VH-myRyfVECPNDAN6EGOjY9bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
05:e0:9e:4e:97:ab:7d:23:d7:4f:47:e4:36:92:2f:31:51:98:
16:f1:55:b9:4f:c5:b7:a7:fb:82:44:16:f2:3b:70:74:cf:93:
49:b9:14:68:6d:b8:a3:a0:01:ed:a1:02:8a:67:76:26:6b:ff:
3e:ec:8e:9b:5a:45:42:6e:4b:1a:eb:46:f5:25:27:6b:25:1d:
df:ce:34:26:07:bc:5e:ac:88:2e:f2:df:c0:83:4c:13:b3:d1:
2d:fa:bb:dd:62:14:5b:6c:aa:05:c1:b5:0c:08:3d:5e:be:7e:
f6:76:7a:e8:84:8f:a6:1b:d3:f2:af:4b:88:a6:cd:4b:68:fd:
93:00:a2:00:98:0d:08:09:b5:08:b2:4a:a3:b2:c5:65:8c:0a:
d1:41:fb:14:9e:5f:31:1a:49:ea:a7:8c:65:7a:88:ec:cc:f3:
37:33:9e:80:5e:de:cf:4a:c9:fc:ba:ae:e0:25:3e:6b:eb:13:
66:31:ac:c7:dd:ca:e4:14:5b:41:5f:59:1b:af:28:13:ad:e7:
84:68:69:4b:55:4d:7a:2f:54:d3:de:6a:bf:40:95:d4:54:49:
d3:85:ae:49:67:97:c8:a6:ba:16:9d:d6:98:d0:16:1b:ff:7d:
eb:a2:de:16:61:8f:a4:88:a9:1c:ef:09:88:eb:b3:f3:b5:e3:
bf:eb:dc:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZAsZoZdNo5BglqSJa1AUZvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwNjE4MTczMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzY1NDdmYTZjOTFjOWY1NDQwOGYzNDMwMGRlODQxOGU4ZDhmNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbmfatYUge5Pw2l6EXco9oty9x6Z
cs4qMRERlgfWDesZWv4zgVS0gZIjdqhI2ZC85elVrg7TQgitXSczSYKpRWilpeRQ
+erjfZEZGl26RHtOB/8gLudICAFTp9qlhvoO9JGd9YVrf1LH1PtMv+KZkviKkMXV
e9Easl7W4i8LMOmBu4LsMlYRnYUkSEy/GN6lMPsCuMiJarhJopUzRqwPUbsy1eOR
pYfGWEv2fr20ccKGh1goZ6FRTx4SWlAvm7M+tfpXI5yw145QLYBshJCD5cQA+bZo
3x4GuWaLmOAgrd0BFHXRA+EuPTxgVTlx6Mk6KVMKGlyFI02cCVICQa/TNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHNlR/pskcn1RAjzQwDehBjo2PW3MB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvYzJWSC1teVJ5ZlZFQ1BOREFONkVHT2pZOWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIOwDAN
BgkqhkiG9w0BAQsFAAOCAQEABeCeTperfSPXT0fkNpIvMVGYFvFVuU/Ft6f7gkQW
8jtwdM+TSbkUaG24o6AB7aECimd2Jmv/PuyOm1pFQm5LGutG9SUnayUd3840Jge8
XqyILvLfwINME7PRLfq73WIUW2yqBcG1DAg9Xr5+9nZ66ISPphvT8q9LiKbNS2j9
kwCiAJgNCAm1CLJKo7LFZYwK0UH7FJ5fMRpJ6qeMZXqI7MzzNzOegF7ez0rJ/Lqu
4CU+a+sTZjGsx93K5BRbQV9ZG68oE63nhGhpS1VNei9U095qv0CV1FRJ04WuSWeX
yKa6Fp3WmNAWG/9966LeFmGPpIipHO8JiOuz87Xjv+vcDg==
-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:58 2024 by rpki-client on console-ams.rpki-client.org