Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aOm45sRHUGS0Etc_VxojJJ9stUw.roa
File: aOm45sRHUGS0Etc_VxojJJ9stUw.roa (raw, json)
Hash identifier: +wGns5DcjAKlSYI519iM2KZ6ytl1+39ktHH5luY+5As=
Subject key identifier: 68:E9:B8:E6:C4:47:50:64:B4:12:D7:3F:57:1A:23:24:9F:6C:B5:4C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FEC6F35B997D3F63B4C51F48A4E29
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aOm45sRHUGS0Etc_VxojJJ9stUw.roa
Signing time: Mon 02 Jan 2023 17:38:10 +0000
ROA not before: Mon 02 Jan 2023 17:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50867
IP address blocks: 2a0b:7086:fff0::/44 maxlen: 44
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b86:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:ec:6f:35:b9:97:d3:f6:3b:4c:51:f4:8a:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68e9b8e6c4475064b412d73f571a23249f6cb54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:2b:e6:ed:ce:8c:42:3f:35:a0:2c:68:22:
c0:ba:d4:2d:4f:53:69:ed:f0:eb:f5:5d:be:ea:08:
65:31:f9:e3:f5:28:83:a2:15:2e:e8:01:e5:fa:ba:
27:56:c0:2d:62:46:7e:d0:6f:1f:0d:5a:3f:37:93:
a8:46:8c:ff:f0:d0:90:b6:80:67:65:1d:f2:c3:f6:
b1:ec:7a:fd:d1:93:4a:a3:e1:77:52:3f:a3:7b:af:
2f:71:0f:d4:5c:6f:76:bd:5d:5a:b0:42:f4:4f:c3:
d5:00:0b:db:91:08:1e:6e:8e:e9:9c:6e:12:88:e2:
60:0d:76:cb:f8:b3:da:99:6f:51:dc:d8:d6:6c:a5:
f9:9e:a9:09:c6:84:c5:c2:1f:3b:08:f8:c9:82:74:
4c:aa:b4:60:25:71:ae:46:72:d1:14:55:44:dc:4b:
f0:dc:b4:64:eb:1f:92:47:27:d0:01:51:2f:25:52:
d2:7e:d0:92:29:b6:4f:02:69:b8:5b:25:2a:fd:72:
58:27:79:d4:25:85:02:a9:b8:c6:7d:89:cb:5a:8d:
60:78:bd:72:c8:83:22:d9:7e:bd:84:ea:07:4e:82:
01:65:a0:dd:17:b5:1a:71:68:72:8d:66:c3:fc:33:
06:0f:cb:28:76:c0:8c:3d:a3:33:18:50:93:bb:54:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:B8:E6:C4:47:50:64:B4:12:D7:3F:57:1A:23:24:9F:6C:B5:4C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aOm45sRHUGS0Etc_VxojJJ9stUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:fff0::/44
2a0b:b87:ffc0::/44
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
1a:64:6b:84:8d:f2:ab:c3:83:4c:dc:a6:a4:6d:bb:70:ff:f9:
73:36:35:28:1e:e9:bb:89:c7:65:66:66:94:29:25:e3:9b:dc:
59:bd:e9:8d:71:7a:15:e8:01:e7:b3:22:ef:fa:7f:11:fc:37:
98:ba:ba:fc:b2:5c:0b:8a:7b:06:c4:d0:7a:96:ab:82:1d:58:
79:9d:b0:bf:e1:39:cc:40:a7:f2:05:c1:f3:16:eb:27:8c:af:
c6:b1:75:9d:ac:8e:b5:9a:9d:89:19:68:98:9a:02:c7:ae:fd:
30:68:53:4c:cb:0c:a5:84:6e:34:bf:7e:97:de:a9:bd:a3:8d:
ab:55:12:24:91:b3:94:b2:d9:e6:71:0c:e3:69:86:35:f7:8d:
df:73:78:33:09:7a:f1:61:48:6d:30:8b:de:06:cb:f7:91:68:
c8:91:f8:cf:24:ca:59:38:07:d7:f8:58:8e:3e:4f:e3:0c:cb:
a3:29:c9:3d:43:83:f4:5c:4f:76:84:e1:ad:27:36:7a:e1:98:
6c:c8:2e:ed:7d:21:c8:27:6c:03:19:a4:d3:6a:b4:f5:a8:ab:
be:85:ed:0a:d0:c2:b1:32:5f:c4:b4:c0:46:db:0a:bb:fa:50:
e5:8e:96:d9:11:fc:df:31:56:44:e6:9e:75:be:a5:ad:19:1e:
24:37:9b:f9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVzj+xvNbmX0/Y7TFH0ik4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGU5YjhlNmM0NDc1MDY0YjQxMmQ3M2Y1NzFhMjMyNDlmNmNiNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfor5u3OjEI/NaAsaCLAutQtT1Np
7fDr9V2+6ghlMfnj9SiDohUu6AHl+ronVsAtYkZ+0G8fDVo/N5OoRoz/8NCQtoBn
ZR3yw/ax7Hr90ZNKo+F3Uj+je68vcQ/UXG92vV1asEL0T8PVAAvbkQgebo7pnG4S
iOJgDXbL+LPamW9R3NjWbKX5nqkJxoTFwh87CPjJgnRMqrRgJXGuRnLRFFVE3Evw
3LRk6x+SRyfQAVEvJVLSftCSKbZPAmm4WyUq/XJYJ3nUJYUCqbjGfYnLWo1geL1y
yIMi2X69hOoHToIBZaDdF7UacWhyjWbD/DMGD8sodsCMPaMzGFCTu1SnzwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGjpuObER1BktBLXP1caIySfbLVMMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvYU9tNDVzUkhVR1MwRXRjX1Z4b2pKSjlzdFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgsLhv/w
AwcEKgsLh//AAwcEKgtwhv/wAwcEKgtwh//wMA0GCSqGSIb3DQEBCwUAA4IBAQAa
ZGuEjfKrw4NM3Kakbbtw//lzNjUoHum7icdlZmaUKSXjm9xZvemNcXoV6AHnsyLv
+n8R/DeYurr8slwLinsGxNB6lquCHVh5nbC/4TnMQKfyBcHzFusnjK/GsXWdrI61
mp2JGWiYmgLHrv0waFNMywylhG40v36X3qm9o42rVRIkkbOUstnmcQzjaYY1943f
c3gzCXrxYUhtMIveBsv3kWjIkfjPJMpZOAfX+FiOPk/jDMujKck9Q4P0XE92hOGt
JzZ64ZhsyC7tfSHIJ2wDGaTTarT1qKu+he0K0MKxMl/EtMBG2wq7+lDljpbZEfzf
MVZE5p51vqWtGR4kN5v5
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org