Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OadGla-nLsdjhBuBuj8hEHHW7UU.roa
File: OadGla-nLsdjhBuBuj8hEHHW7UU.roa (raw, json)
Hash identifier: b3uZfzIv3V6iGNffUskMpFbBYz/d/41GOWTgWx9qi5s=
Subject key identifier: 39:A7:46:95:AF:A7:2E:C7:63:84:1B:81:BA:3F:21:10:71:D6:ED:45
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0193223CCC34A0EAE25D028820190C948081
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OadGla-nLsdjhBuBuj8hEHHW7UU.roa
Signing time: Tue 12 Nov 2024 21:17:09 +0000
ROA not before: Tue 12 Nov 2024 21:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213885
IP address blocks: 2a14:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 22 Nov 2024 19:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:22:3c:cc:34:a0:ea:e2:5d:02:88:20:19:0c:94:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 12 21:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39a74695afa72ec763841b81ba3f211071d6ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:cb:eb:46:46:0a:4d:1d:7e:ff:f9:a5:56:
a8:be:1e:08:35:ac:70:88:b6:c0:b1:60:22:9e:15:
c3:36:88:64:55:66:e5:b6:ef:1f:84:43:73:56:f1:
c5:2f:db:60:4f:37:d8:4a:68:e9:29:37:e6:6a:44:
f5:63:b8:5e:01:88:ba:d7:bb:8e:75:8e:94:79:0b:
be:69:89:82:cf:57:d9:2a:f5:69:0d:62:c6:7a:74:
4a:3a:a6:8d:aa:7b:73:ee:81:89:1e:14:f0:c4:61:
3d:59:b2:eb:28:a5:ac:5b:5f:6d:8a:da:0e:c5:11:
92:64:ad:d1:8a:50:55:41:32:65:32:a8:aa:ed:03:
a8:03:a4:b6:35:9c:49:92:a5:69:f2:ec:26:80:59:
33:1d:99:c4:b8:2a:81:36:95:c3:fb:52:d8:3b:1b:
fd:24:7a:59:8e:22:47:10:7f:bd:49:07:f4:a7:0f:
30:b6:a5:0e:63:02:b4:cf:be:a1:c2:98:48:b4:60:
05:cb:92:b5:5c:0a:fd:60:45:3a:d3:00:14:b8:d0:
57:e0:19:57:41:3a:f6:85:9d:b0:01:ad:76:b3:e6:
ee:f5:c9:f8:0b:eb:5f:85:48:4b:73:1c:e5:79:04:
1b:3a:c0:03:a3:22:31:8b:8b:06:a9:d0:a2:4b:bb:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:46:95:AF:A7:2E:C7:63:84:1B:81:BA:3F:21:10:71:D6:ED:45
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OadGla-nLsdjhBuBuj8hEHHW7UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:b5:a8:67:31:47:52:60:ec:eb:5f:e5:f9:e5:bb:0e:a1:e3:
43:43:3b:4b:32:5f:db:57:00:b4:50:03:f6:92:07:45:b8:57:
e6:ce:8d:4c:ef:ea:11:68:46:dd:65:05:d3:d8:6f:51:d3:3e:
54:58:ee:87:5a:5b:60:bd:1c:bc:14:9d:11:15:34:46:c8:21:
c9:f0:35:13:b5:7f:34:ac:7a:2f:4a:dc:df:40:9a:fd:2b:a3:
24:83:22:47:0d:0f:05:b7:83:7d:0d:fb:a5:4f:89:82:f9:7a:
26:10:e3:f4:da:f7:f6:a4:12:7c:9c:b6:66:ee:e0:bc:8b:ff:
18:b7:e6:bb:46:3b:00:a3:99:2f:1e:1f:74:2f:85:23:79:7a:
97:55:eb:b0:48:7c:dc:a6:d5:d2:01:ec:0b:64:c1:7a:da:f1:
2f:09:31:3c:15:a3:4a:65:27:27:22:87:60:45:32:76:25:5f:
f2:ad:98:f0:9e:9e:a4:c0:9e:bf:9f:90:6b:7b:f4:c7:03:52:
22:49:8d:2c:17:60:e9:f9:24:4e:f1:2f:9c:5a:56:f9:31:76:
ac:7a:db:3c:0c:4b:a6:aa:91:13:7c:55:5f:e2:5b:4b:82:67:
a2:c9:1f:e4:8b:e6:50:40:99:60:3d:19:85:98:de:f7:04:dd:
a1:d4:ed:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZMiPMw0oOriXQKIIBkMlICBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQxMTEyMjExNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWE3NDY5NWFmYTcyZWM3NjM4NDFiODFiYTNmMjExMDcxZDZlZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnL60ZGCk0dfv/5pVaovh4INaxw
iLbAsWAinhXDNohkVWbltu8fhENzVvHFL9tgTzfYSmjpKTfmakT1Y7heAYi617uO
dY6UeQu+aYmCz1fZKvVpDWLGenRKOqaNqntz7oGJHhTwxGE9WbLrKKWsW19titoO
xRGSZK3RilBVQTJlMqiq7QOoA6S2NZxJkqVp8uwmgFkzHZnEuCqBNpXD+1LYOxv9
JHpZjiJHEH+9SQf0pw8wtqUOYwK0z76hwphItGAFy5K1XAr9YEU60wAUuNBX4BlX
QTr2hZ2wAa12s+bu9cn4C+tfhUhLcxzleQQbOsADoyIxi4sGqdCiS7uMuQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDmnRpWvpy7HY4Qbgbo/IRBx1u1FMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvT2FkR2xhLW5Mc2RqaEJ1QnVqOGhFSEhXN1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAJLWoZzFHUmDs61/l+eW7DqHjQ0M7SzJf21cAtFAD
9pIHRbhX5s6NTO/qEWhG3WUF09hvUdM+VFjuh1pbYL0cvBSdERU0RsghyfA1E7V/
NKx6L0rc30Ca/SujJIMiRw0PBbeDfQ37pU+Jgvl6JhDj9Nr39qQSfJy2Zu7gvIv/
GLfmu0Y7AKOZLx4fdC+FI3l6l1XrsEh83KbV0gHsC2TBetrxLwkxPBWjSmUnJyKH
YEUydiVf8q2Y8J6epMCev5+Qa3v0xwNSIkmNLBdg6fkkTvEvnFpW+TF2rHrbPAxL
pqqRE3xVX+JbS4Jnoskf5IvmUECZYD0ZhZje9wTdodTtig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:17:12 2024 by rpki-client on console-fra.rpki-client.org