Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/taqVn0bAIYjG0nRV13UyNVWU5Ws.roa
File: taqVn0bAIYjG0nRV13UyNVWU5Ws.roa (raw, json)
Hash identifier: ccwKmWU3vPpz+1uVsFPsYetiptRmmX2xWmZl8vBN1RE=
Subject key identifier: B5:AA:95:9F:46:C0:21:88:C6:D2:74:55:D7:75:32:35:55:94:E5:6B
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 018CC500372D31CB0E217F935972F4490794
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/taqVn0bAIYjG0nRV13UyNVWU5Ws.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3258
IP address blocks: 2a14:1f80::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 03 Jan 2024 10:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:37:2d:31:cb:0e:21:7f:93:59:72:f4:49:07:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5aa959f46c02188c6d27455d77532355594e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:6f:a0:17:0f:8a:64:c7:40:7b:c1:e5:53:
de:61:f5:91:aa:31:37:b1:b8:b3:93:dc:56:a0:59:
08:0e:29:a0:90:49:90:b6:eb:c4:0e:ea:1a:48:08:
28:2e:bc:d3:27:a0:de:e6:91:cd:be:fb:92:9c:69:
81:cf:f8:bb:34:8f:26:04:0a:3b:e1:8d:2f:d5:0c:
ab:f2:ad:c7:09:2e:35:8a:8a:1b:c0:62:1b:10:57:
1c:d7:ca:31:7e:3e:ee:c4:c0:b9:ff:f1:ff:bb:84:
0c:59:54:34:21:f7:55:db:e3:78:84:7f:63:4e:a2:
71:a9:b1:8e:12:47:d7:c6:6f:6d:72:85:78:a0:b0:
4d:6b:71:85:7b:71:ce:e6:37:12:9b:c4:53:ac:cc:
0d:5b:0f:60:cd:b2:5e:7a:e8:4c:61:7e:4e:2c:51:
54:6f:97:71:50:09:e6:7d:37:f0:d4:ff:10:3a:11:
1a:4d:db:6a:03:e3:e5:0b:0c:f7:c3:f0:15:57:49:
a8:fb:78:67:5a:c8:bd:1f:89:34:87:de:0b:e7:53:
23:1c:24:8b:a4:b6:cf:50:fc:67:c5:79:e7:36:b3:
d2:6d:97:f5:b4:d5:a7:69:f3:98:e0:c3:3c:f9:fb:
53:ed:9b:f5:ef:a4:4b:dc:73:08:04:a4:a9:af:61:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:95:9F:46:C0:21:88:C6:D2:74:55:D7:75:32:35:55:94:E5:6B
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/taqVn0bAIYjG0nRV13UyNVWU5Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
36:ab:b6:24:fb:18:8f:24:0c:b1:38:3c:f3:8c:39:15:e0:9b:
1e:7e:e5:7c:b9:14:99:fe:6d:cc:dd:76:25:14:0e:52:a1:8f:
3e:fe:c9:83:d0:9c:3c:8e:06:d9:b1:42:c4:4d:6d:36:46:a5:
01:1f:2e:ec:fb:ad:87:a6:d7:95:3d:3d:59:bb:ff:03:9e:99:
ca:21:bc:21:7a:a8:bf:ba:91:d9:65:05:a8:6c:b8:0f:42:d4:
4a:39:61:27:d8:c3:ff:eb:00:e4:ec:05:19:6d:22:42:c4:0e:
0a:3b:37:b5:66:e9:c4:42:e1:da:15:8c:cf:7f:4c:fd:1d:16:
e3:c2:c4:5e:45:0a:13:41:df:21:73:7e:bb:05:78:de:6d:5e:
70:7b:b9:2a:e9:b5:4d:4d:55:f8:e6:5c:8f:87:f1:70:3a:38:
1a:90:79:68:1f:4d:28:46:3b:de:f8:dc:09:c1:09:50:67:9c:
82:b3:2f:44:58:bf:a6:d0:0e:e7:ec:c1:a1:79:a7:91:f6:eb:
b6:9b:96:0a:8c:ea:e5:33:82:f7:4e:bc:f3:ab:0c:d6:08:b7:
e3:72:f7:06:92:5c:f7:c9:dd:c7:9b:c7:59:38:37:35:6c:28:
9b:9c:3c:b9:86:1b:1e:f6:88:83:35:e8:e4:1e:b1:ff:70:81:
b4:85:7a:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFADctMcsOIX+TWXL0SQeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjQwMTAxMTIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWFhOTU5ZjQ2YzAyMTg4YzZkMjc0NTVkNzc1MzIzNTU1OTRlNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1pvoBcPimTHQHvB5VPeYfWRqjE3
sbizk9xWoFkIDimgkEmQtuvEDuoaSAgoLrzTJ6De5pHNvvuSnGmBz/i7NI8mBAo7
4Y0v1Qyr8q3HCS41ioobwGIbEFcc18oxfj7uxMC5//H/u4QMWVQ0IfdV2+N4hH9j
TqJxqbGOEkfXxm9tcoV4oLBNa3GFe3HO5jcSm8RTrMwNWw9gzbJeeuhMYX5OLFFU
b5dxUAnmfTfw1P8QOhEaTdtqA+PlCwz3w/AVV0mo+3hnWsi9H4k0h94L51MjHCSL
pLbPUPxnxXnnNrPSbZf1tNWnafOY4MM8+ftT7Zv176RL3HMIBKSpr2Gh8QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLWqlZ9GwCGIxtJ0Vdd1MjVVlOVrMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvdGFxVm4wYkFJWWpHMG5SVjEzVXlOVldVNVdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQfgDAN
BgkqhkiG9w0BAQsFAAOCAQEANqu2JPsYjyQMsTg884w5FeCbHn7lfLkUmf5tzN12
JRQOUqGPPv7Jg9CcPI4G2bFCxE1tNkalAR8u7Puth6bXlT09Wbv/A56ZyiG8IXqo
v7qR2WUFqGy4D0LUSjlhJ9jD/+sA5OwFGW0iQsQOCjs3tWbpxELh2hWMz39M/R0W
48LEXkUKE0HfIXN+uwV43m1ecHu5Kum1TU1V+OZcj4fxcDo4GpB5aB9NKEY73vjc
CcEJUGecgrMvRFi/ptAO5+zBoXmnkfbrtpuWCozq5TOC906886sM1gi343L3BpJc
98ndx5vHWTg3NWwom5w8uYYbHvaIgzXo5B6x/3CBtIV6pA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:19 2025 by rpki-client