Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWoItGau58Gl5yMCDtLtKuNSpso.roa
File: dWoItGau58Gl5yMCDtLtKuNSpso.roa (raw, json)
Hash identifier: XjGhGoVGQtkdIQuKJ8s8u1r2wLUcQMbOSLgGk1O+Kms=
Subject key identifier: 75:6A:08:B4:66:AE:E7:C1:A5:E7:23:02:0E:D2:ED:2A:E3:52:A6:CA
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 0186C23DC43257E3D349465C7BE1B25CB894
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWoItGau58Gl5yMCDtLtKuNSpso.roa
Signing time: Wed 08 Mar 2023 17:21:13 +0000
ROA not before: Wed 08 Mar 2023 17:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212065
IP address blocks: 2a10:4646:c::/48 maxlen: 48
2a10:4646:14::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:3d:c4:32:57:e3:d3:49:46:5c:7b:e1:b2:5c:b8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Mar 8 17:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=756a08b466aee7c1a5e723020ed2ed2ae352a6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:12:5f:f1:c6:13:b0:3d:2b:55:5a:27:e2:
f6:9f:bb:85:12:8c:2c:2f:30:70:ed:12:8d:58:b1:
bc:4f:4b:66:0e:db:fb:72:ec:6d:28:af:ab:bb:3c:
5e:58:11:7b:40:9a:10:76:07:31:d5:fe:23:9b:86:
b1:2a:0e:d9:c6:e7:7e:1f:75:63:dd:e8:33:37:ce:
30:ef:13:34:aa:38:81:eb:07:9e:3f:43:54:91:4e:
f8:2c:71:7e:33:8f:bc:03:f8:0c:e8:16:e8:80:b3:
be:aa:5a:41:c8:48:4c:b3:de:cc:6f:a7:06:68:95:
49:eb:76:c4:96:74:7c:f2:17:0e:d9:9a:1c:62:91:
26:2b:f0:eb:03:d6:7b:95:83:44:ea:77:6f:b5:62:
bd:0e:13:99:1c:3a:62:40:01:d7:4c:43:b6:98:9c:
02:82:a0:8d:38:6c:62:a3:de:06:1c:cf:45:3e:ae:
c9:f4:0e:12:d3:df:1c:04:d3:26:2e:c5:be:90:5b:
47:8d:2a:0f:b4:89:b0:51:06:d4:19:94:90:e0:3a:
cd:8d:fd:1d:47:70:cc:2d:b5:ab:64:2c:b6:31:cd:
bd:9c:62:dd:a0:79:5a:2d:08:09:8a:1b:28:8b:65:
e8:31:ed:01:a1:6b:46:32:73:dc:2d:86:cc:c8:8e:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:08:B4:66:AE:E7:C1:A5:E7:23:02:0E:D2:ED:2A:E3:52:A6:CA
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/dWoItGau58Gl5yMCDtLtKuNSpso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:c::/48
2a10:4646:14::/48
Signature Algorithm: sha256WithRSAEncryption
29:46:9e:fd:69:56:7c:74:1e:6b:53:6e:92:15:1e:90:3b:44:
2a:f0:3c:8c:3d:ce:65:23:f9:89:68:34:d7:8f:e9:f5:ee:b1:
18:6c:f8:c8:82:6b:5d:95:43:18:1f:ef:f0:02:3e:1e:63:12:
5f:4f:ee:24:98:68:b5:2a:66:b9:96:b5:ab:31:fc:50:0d:15:
a1:35:56:80:e7:ca:11:a0:24:cd:52:3e:53:a9:5a:06:88:0e:
e9:12:59:83:4f:eb:20:bd:fd:8d:78:fb:c6:ac:6f:a5:6b:32:
11:36:6f:bd:9c:2d:a5:d3:1e:1e:1e:7f:9d:fc:75:9f:f5:3d:
d3:4b:1f:7c:87:da:cc:3b:62:97:4e:8a:29:e4:70:b9:4e:a5:
30:ea:b2:5f:a8:d7:53:03:77:c5:e8:13:0b:b8:73:50:2b:d4:
3d:f7:96:cd:02:4b:2f:50:0e:f2:5c:e0:01:20:59:87:7a:e6:
77:a2:ea:ca:83:c5:95:cf:01:ff:a1:e0:89:29:a6:aa:05:89:
50:99:74:af:07:20:af:3f:56:d1:bf:03:80:e3:4c:a6:e5:13:
57:51:53:7e:af:d1:fb:15:fb:08:fc:cd:ed:90:d6:c2:25:df:
53:a1:75:7f:84:60:11:85:82:a7:4a:24:65:85:8b:c4:47:ca:
9e:98:01:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYbCPcQyV+PTSUZce+GyXLiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjMwMzA4MTcyMTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTZhMDhiNDY2YWVlN2MxYTVlNzIzMDIwZWQyZWQyYWUzNTJhNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYUSX/HGE7A9K1VaJ+L2n7uFEows
LzBw7RKNWLG8T0tmDtv7cuxtKK+ruzxeWBF7QJoQdgcx1f4jm4axKg7Zxud+H3Vj
3egzN84w7xM0qjiB6weeP0NUkU74LHF+M4+8A/gM6BbogLO+qlpByEhMs97Mb6cG
aJVJ63bElnR88hcO2ZocYpEmK/DrA9Z7lYNE6ndvtWK9DhOZHDpiQAHXTEO2mJwC
gqCNOGxio94GHM9FPq7J9A4S098cBNMmLsW+kFtHjSoPtImwUQbUGZSQ4DrNjf0d
R3DMLbWrZCy2Mc29nGLdoHlaLQgJihsoi2XoMe0BoWtGMnPcLYbMyI4zWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHVqCLRmrufBpecjAg7S7SrjUqbKMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvZFdvSXRHYXU1OEdsNXlNQ0R0THRLdU5TcHNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhBGRgAM
AwcAKhBGRgAUMA0GCSqGSIb3DQEBCwUAA4IBAQApRp79aVZ8dB5rU26SFR6QO0Qq
8DyMPc5lI/mJaDTXj+n17rEYbPjIgmtdlUMYH+/wAj4eYxJfT+4kmGi1Kma5lrWr
MfxQDRWhNVaA58oRoCTNUj5TqVoGiA7pElmDT+sgvf2NePvGrG+lazIRNm+9nC2l
0x4eHn+d/HWf9T3TSx98h9rMO2KXToop5HC5TqUw6rJfqNdTA3fF6BMLuHNQK9Q9
95bNAksvUA7yXOABIFmHeuZ3ourKg8WVzwH/oeCJKaaqBYlQmXSvByCvP1bRvwOA
40ym5RNXUVN+r9H7FfsI/M3tkNbCJd9ToXV/hGARhYKnSiRlhYvER8qemAFa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org