Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/aEgFki_LEquhQgjHYVUIlcEMIIU.roa
File: aEgFki_LEquhQgjHYVUIlcEMIIU.roa (raw, json)
Hash identifier: JKTR9hyO7QJKRtZCNt/iwNnMf2S0nrcfu0p7Z4uMmYM=
Subject key identifier: 68:48:05:92:2F:CB:12:AB:A1:42:08:C7:61:55:08:95:C1:0C:20:85
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01873370AB484945E776593BE61E8F4ADC67
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/aEgFki_LEquhQgjHYVUIlcEMIIU.roa
Signing time: Thu 30 Mar 2023 16:53:54 +0000
ROA not before: Thu 30 Mar 2023 16:53:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213327
IP address blocks: 2a0a:280:2600::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:70:ab:48:49:45:e7:76:59:3b:e6:1e:8f:4a:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 30 16:53:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=684805922fcb12aba14208c761550895c10c2085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:ba:38:d2:ec:98:0c:45:1d:8c:6d:00:02:
54:0c:33:bd:99:9c:a6:aa:5e:ce:fa:39:3d:a8:41:
99:c3:75:ca:bb:7e:eb:48:ad:80:58:c2:e9:b8:1b:
d2:22:f9:e2:ac:9e:b7:9b:6c:b0:32:2a:61:07:84:
79:12:26:4b:0e:b4:8f:ed:1d:ac:85:16:ec:22:e1:
5e:9a:af:e3:86:ac:8b:1e:8a:4d:93:17:ff:4d:40:
c0:8f:b9:1c:e2:67:82:00:5e:14:cf:f5:76:8d:1a:
66:60:30:d4:a9:ee:0a:19:65:99:f7:8b:18:55:cb:
86:88:4b:63:b1:eb:81:2f:e1:0b:24:fa:06:a7:72:
7a:12:85:c9:b8:e5:74:ff:a6:79:84:92:33:c6:11:
20:ee:ab:ce:53:3b:fe:49:1e:28:2d:ca:1a:15:7f:
19:c6:95:19:6c:23:41:17:f8:7e:93:88:29:7f:01:
76:51:36:40:0a:29:84:a6:28:46:51:23:80:1a:6b:
74:ee:b4:c4:8c:2f:d6:b7:2c:3d:14:b1:d6:7f:7f:
cd:80:d2:28:4e:a4:0e:13:45:f8:02:94:1d:91:b5:
49:1f:73:fb:91:ff:16:57:83:63:e8:27:85:11:97:
7c:b7:84:50:7a:28:13:5c:e9:41:ac:b6:ba:c4:79:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:05:92:2F:CB:12:AB:A1:42:08:C7:61:55:08:95:C1:0C:20:85
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/aEgFki_LEquhQgjHYVUIlcEMIIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2600::/40
Signature Algorithm: sha256WithRSAEncryption
1b:9d:d2:50:a9:5b:a6:6e:6a:01:27:37:28:b5:49:90:10:5d:
33:ef:c1:f3:d7:86:8a:d0:12:2e:1d:d0:51:e9:03:a5:85:fa:
71:cd:cd:ea:bf:a9:7b:42:6d:f1:48:4e:bc:d3:39:64:f0:41:
29:e1:50:2f:2f:94:f2:9a:3f:ff:b9:09:f8:1c:58:57:e5:0b:
f8:7a:4a:54:ef:5b:44:ae:f5:a5:cf:5e:e1:d4:75:db:5b:19:
75:a6:c4:ff:7a:71:fd:1b:57:08:27:cf:68:b7:8b:ee:00:eb:
00:31:bc:d6:8f:4d:46:6a:f9:56:0f:e4:ad:4c:68:c2:c1:a6:
1e:d0:8a:79:a3:5d:c3:1e:cd:50:41:bf:32:ae:e8:61:0c:87:
1a:4c:36:d3:67:4a:75:4a:cc:e7:99:f5:6b:90:29:10:d4:77:
cf:5e:aa:88:17:f9:ca:b1:af:f6:d6:d1:d6:96:81:de:8c:59:
f2:83:07:4c:48:4d:f5:a8:49:39:e9:1b:40:6a:48:07:bc:2a:
69:34:64:2b:f8:6f:e5:48:9d:21:5f:58:76:67:ed:9f:89:d7:
42:cb:d7:c7:2f:1c:25:c9:ae:6f:b4:56:2e:85:78:73:90:b1:
ba:0d:36:a6:1d:5b:45:31:c3:c9:9d:aa:e4:b5:36:69:ee:a2:
17:37:c4:01
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYczcKtISUXndlk75h6PStxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjMwMzMwMTY1MzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODQ4MDU5MjJmY2IxMmFiYTE0MjA4Yzc2MTU1MDg5NWMxMGMyMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4i6ONLsmAxFHYxtAAJUDDO9mZym
ql7O+jk9qEGZw3XKu37rSK2AWMLpuBvSIvnirJ63m2ywMiphB4R5EiZLDrSP7R2s
hRbsIuFemq/jhqyLHopNkxf/TUDAj7kc4meCAF4Uz/V2jRpmYDDUqe4KGWWZ94sY
VcuGiEtjseuBL+ELJPoGp3J6EoXJuOV0/6Z5hJIzxhEg7qvOUzv+SR4oLcoaFX8Z
xpUZbCNBF/h+k4gpfwF2UTZACimEpihGUSOAGmt07rTEjC/Wtyw9FLHWf3/NgNIo
TqQOE0X4ApQdkbVJH3P7kf8WV4Nj6CeFEZd8t4RQeigTXOlBrLa6xHmEpQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGhIBZIvyxKroUIIx2FVCJXBDCCFMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvYUVnRmtpX0xFcXVoUWdqSFlWVUlsY0VNSUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCYw
DQYJKoZIhvcNAQELBQADggEBABud0lCpW6ZuagEnNyi1SZAQXTPvwfPXhorQEi4d
0FHpA6WF+nHNzeq/qXtCbfFITrzTOWTwQSnhUC8vlPKaP/+5CfgcWFflC/h6SlTv
W0Su9aXPXuHUddtbGXWmxP96cf0bVwgnz2i3i+4A6wAxvNaPTUZq+VYP5K1MaMLB
ph7QinmjXcMezVBBvzKu6GEMhxpMNtNnSnVKzOeZ9WuQKRDUd89eqogX+cqxr/bW
0daWgd6MWfKDB0xITfWoSTnpG0BqSAe8Kmk0ZCv4b+VInSFfWHZn7Z+J10LL18cv
HCXJrm+0Vi6FeHOQsboNNqYdW0Uxw8mdquS1Nmnuohc3xAE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:06 2024 by rpki-client on console-ams.rpki-client.org