Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/nx8YkSvqx6O73RWByeYfkwIY4Fg.roa
File: nx8YkSvqx6O73RWByeYfkwIY4Fg.roa (raw, json)
Hash identifier: bCvWo2TVJlM6SuoBpXd3HG0MOVEFtgDA4JVFX2txSaI=
Subject key identifier: 9F:1F:18:91:2B:EA:C7:A3:BB:DD:15:81:C9:E6:1F:93:02:18:E0:58
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DBC62B5836DF798F4B973C856CFE345A7
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/nx8YkSvqx6O73RWByeYfkwIY4Fg.roa
Signing time: Sun 18 Feb 2024 13:23:22 +0000
ROA not before: Sun 18 Feb 2024 13:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0f:e000::/29 maxlen: 32
2a11:dcc0::/29 maxlen: 29
2a12:440::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a12:6740::/29 maxlen: 29
2a12:6b80::/29 maxlen: 32
2a12:6f40::/29 maxlen: 29
2a12:7740::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 18 Feb 2024 17:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:62:b5:83:6d:f7:98:f4:b9:73:c8:56:cf:e3:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 18 13:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1f18912beac7a3bbdd1581c9e61f930218e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:48:a9:ae:d7:ad:4a:a5:36:62:e3:b1:9f:1e:
0c:c8:99:b0:72:3b:3e:a8:e4:5f:56:30:46:cc:94:
4e:ac:e0:93:ad:ec:e9:d2:55:d3:9a:a2:d1:55:93:
a7:24:fd:9b:35:2f:87:23:83:56:d7:e1:11:aa:4d:
3f:7e:5e:3b:c2:4b:26:7b:d2:c5:5c:11:a7:29:3d:
9c:63:8a:20:f2:72:76:9c:c3:4c:a0:77:16:9b:fb:
2a:2c:b0:7b:45:48:12:20:4c:4c:53:1d:48:f5:2a:
18:e0:e9:cc:d6:67:c2:c1:86:a9:e2:65:cf:2d:d5:
e0:99:cb:27:60:50:38:c8:e5:9e:47:0f:58:b4:65:
03:a0:a5:f6:82:49:ba:91:a4:8e:2e:38:d8:15:e3:
4b:31:98:d3:40:ac:87:9d:3b:d2:06:91:b9:de:a6:
d8:11:4a:85:92:6a:e3:da:70:28:c9:ef:dc:85:9c:
ae:97:a0:dd:37:2e:91:3a:50:b7:15:5f:c5:fd:ef:
fa:55:5a:a5:17:3b:47:18:6e:b3:43:58:c6:59:50:
3c:6b:8a:3d:ba:6a:88:7c:85:7d:a7:1f:e3:30:b2:
8e:a5:68:a8:1d:e4:50:9c:e3:bd:4e:ac:6a:0c:00:
3f:e5:d1:4c:7e:f7:6d:c8:15:79:2a:eb:a0:46:ad:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:18:91:2B:EA:C7:A3:BB:DD:15:81:C9:E6:1F:93:02:18:E0:58
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/nx8YkSvqx6O73RWByeYfkwIY4Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e000::/29
2a11:dcc0::/29
2a12:440::/29
2a12:6640::/29
2a12:6740::/29
2a12:6b80::/29
2a12:6f40::/29
2a12:7740::/29
Signature Algorithm: sha256WithRSAEncryption
01:34:a3:22:91:af:ef:43:e7:08:77:b9:61:13:fa:57:c7:ca:
fe:88:6f:b9:4f:fa:54:44:f5:85:7f:38:b5:09:25:e7:67:ee:
ce:34:24:f6:60:e8:d8:d9:c6:11:a5:0a:f5:c9:8a:53:d1:a1:
6b:3a:78:12:4a:5b:cf:4a:70:6f:ab:f3:d5:f1:48:ac:bf:ef:
da:d3:69:d7:2d:db:88:5d:e4:b0:f5:54:f9:07:f3:40:63:f0:
7b:25:cd:5a:ba:6c:93:96:7a:48:00:a3:5b:d8:3c:da:aa:fa:
95:5f:13:6d:a0:23:ab:00:56:7f:23:1a:05:1e:16:b0:ce:ed:
da:48:af:1e:21:9c:c8:a5:61:bf:21:6a:49:9f:16:9a:e9:e8:
38:e2:3b:95:4d:6b:3f:07:b4:8b:92:70:39:c6:95:9c:38:17:
e2:4a:34:5e:a5:5f:ce:57:27:72:59:b1:19:dd:4f:9b:74:80:
d3:28:7e:1c:83:3f:ff:5e:7f:1c:73:b4:78:e1:1b:8c:12:77:
59:e6:ae:21:94:57:7e:5d:ba:56:15:cf:57:09:20:42:1f:6c:
6f:59:08:a7:bb:38:b5:68:26:d7:11:90:1a:de:ec:c4:e8:01:
1c:46:8e:8e:fb:4e:5a:7e:4b:d1:c2:87:42:4d:0c:5f:d5:01:
9c:6f:bf:e3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAY28YrWDbfeY9LlzyFbP40WnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz
Mjc2ZTMwHhcNMjQwMjE4MTMyMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjFmMTg5MTJiZWFjN2EzYmJkZDE1ODFjOWU2MWY5MzAyMThlMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkiprtetSqU2YuOxnx4MyJmwcjs+
qORfVjBGzJROrOCTrezp0lXTmqLRVZOnJP2bNS+HI4NW1+ERqk0/fl47wksme9LF
XBGnKT2cY4og8nJ2nMNMoHcWm/sqLLB7RUgSIExMUx1I9SoY4OnM1mfCwYap4mXP
LdXgmcsnYFA4yOWeRw9YtGUDoKX2gkm6kaSOLjjYFeNLMZjTQKyHnTvSBpG53qbY
EUqFkmrj2nAoye/chZyul6DdNy6ROlC3FV/F/e/6VVqlFztHGG6zQ1jGWVA8a4o9
umqIfIV9px/jMLKOpWioHeRQnOO9TqxqDAA/5dFMfvdtyBV5KuugRq1lSwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJ8fGJEr6seju90VgcnmH5MCGOBYMB8GA1UdIwQY
MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt
YTJhNGM2YTYyMWNkLzEvbng4WWtTdnF4Nk83M1JXQnllWWZrd0lZNEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk
LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwUDKg/gAAMF
AyoR3MADBQMqEgRAAwUDKhJmQAMFAyoSZ0ADBQMqEmuAAwUDKhJvQAMFAyoSd0Aw
DQYJKoZIhvcNAQELBQADggEBAAE0oyKRr+9D5wh3uWET+lfHyv6Ib7lP+lRE9YV/
OLUJJedn7s40JPZg6NjZxhGlCvXJilPRoWs6eBJKW89KcG+r89XxSKy/79rTadct
24hd5LD1VPkH80Bj8HslzVq6bJOWekgAo1vYPNqq+pVfE22gI6sAVn8jGgUeFrDO
7dpIrx4hnMilYb8hakmfFprp6DjiO5VNaz8HtIuScDnGlZw4F+JKNF6lX85XJ3JZ
sRndT5t0gNMofhyDP/9efxxztHjhG4wSd1nmriGUV35dulYVz1cJIEIfbG9ZCKe7
OLVoJtcRkBre7MToARxGjo77Tlp+S9HCh0JNDF/VAZxvv+M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org