Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/jEAwrwzb99mQKAcwpqGbesM6k2s.roa
File: jEAwrwzb99mQKAcwpqGbesM6k2s.roa (raw, json)
Hash identifier: 1yPG0fSTUP2ZPfe4qviWFJBxizEnFsTtIecvd6caYHc=
Subject key identifier: 8C:40:30:AF:0C:DB:F7:D9:90:28:07:30:A6:A1:9B:7A:C3:3A:93:6B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01869C119E36C10197CCCB1D8686CC08EBA0
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/jEAwrwzb99mQKAcwpqGbesM6k2s.roa
Signing time: Wed 01 Mar 2023 07:27:25 +0000
ROA not before: Wed 01 Mar 2023 07:27:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199691
IP address blocks: 2a0e:8f02:f054::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:11:9e:36:c1:01:97:cc:cb:1d:86:86:cc:08:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Mar 1 07:27:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c4030af0cdbf7d990280730a6a19b7ac33a936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:fd:b5:34:3b:e3:27:bb:66:7e:e7:c0:40:
9c:dc:73:fd:45:9e:7a:73:80:b7:4e:bb:d2:8d:be:
1e:fd:5c:24:60:1a:5e:bb:40:96:a3:5d:ca:a7:36:
9c:7f:b2:b7:a8:d4:fe:fe:5b:81:03:ef:df:7d:ec:
e2:4b:6a:41:10:af:67:09:f2:38:8d:64:59:b3:9b:
7f:99:6c:f7:f9:80:ce:c8:b9:f8:c4:c2:d1:b9:da:
51:49:46:e7:10:ef:59:8b:4f:38:fe:d0:c4:c1:0b:
2c:4f:0a:9c:a1:24:32:46:59:9a:e4:a3:ec:1c:ce:
ce:a0:ff:50:65:da:2e:db:a5:04:19:bf:25:07:ae:
37:5c:0a:65:91:45:ab:30:2d:b0:9c:60:da:7c:31:
2d:b1:ff:ff:4e:10:66:c8:4f:a0:c2:4a:65:93:d7:
be:52:e1:4a:2e:2b:30:52:c9:aa:8f:da:01:4b:db:
49:34:d3:d8:bc:3f:ef:4f:57:87:67:8d:0c:11:ae:
ef:31:43:e1:1e:66:2d:b9:d4:46:60:91:c7:54:9f:
b3:58:8f:85:09:43:9a:44:24:c6:f9:e7:f7:df:80:
1a:19:a6:86:68:a7:b3:d7:04:9e:4c:53:c7:d7:c4:
98:30:4f:78:c2:df:c6:ab:f3:75:ed:44:2a:85:12:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:30:AF:0C:DB:F7:D9:90:28:07:30:A6:A1:9B:7A:C3:3A:93:6B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/jEAwrwzb99mQKAcwpqGbesM6k2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f054::/48
Signature Algorithm: sha256WithRSAEncryption
98:2c:36:6a:b3:3b:bd:6d:c6:d8:b3:97:70:be:6d:b7:2a:2c:
72:95:9b:46:5b:66:a2:66:14:30:8f:cb:32:12:d3:9f:e7:a8:
87:58:37:5c:b7:18:a6:3a:82:19:ae:c2:35:69:1a:07:9a:c4:
82:a0:9d:21:16:ea:00:af:78:ba:4d:0e:e7:f4:3c:b1:99:01:
d0:5c:cb:22:1e:9a:ca:99:67:c9:4a:2f:34:64:e3:c0:29:6e:
60:c3:05:e5:8d:06:eb:58:8c:cf:e2:4f:98:47:66:d8:8c:5d:
be:d2:0b:7d:bb:ec:f3:64:b3:ff:50:5a:4c:d1:bf:36:ab:1e:
db:f2:cd:39:e0:02:c8:a8:d5:11:1b:e2:94:a1:53:82:b5:0f:
7c:81:0e:e8:a4:d9:e2:0b:68:f8:11:66:85:a1:a2:b9:5e:80:
97:ca:a8:d0:2c:14:c6:9c:f3:0c:9a:86:bf:4f:35:75:6e:79:
1c:39:d2:10:70:69:a3:fa:f0:e3:84:09:d2:b6:02:a6:9b:78:
f9:42:48:c5:25:bd:6c:75:78:eb:7f:04:57:08:b9:4f:e6:1b:
25:b7:a8:9f:4c:d7:38:0b:51:97:3c:fe:89:73:7a:48:b1:40:
42:f0:71:af:71:18:1a:12:2d:f2:32:c2:14:27:52:8d:a0:49:
4b:92:ec:a9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYacEZ42wQGXzMsdhobMCOugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMzAxMDcyNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQwMzBhZjBjZGJmN2Q5OTAyODA3MzBhNmExOWI3YWMzM2E5MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv279tTQ74ye7Zn7nwECc3HP9RZ56
c4C3TrvSjb4e/VwkYBpeu0CWo13Kpzacf7K3qNT+/luBA+/ffeziS2pBEK9nCfI4
jWRZs5t/mWz3+YDOyLn4xMLRudpRSUbnEO9Zi084/tDEwQssTwqcoSQyRlma5KPs
HM7OoP9QZdou26UEGb8lB643XAplkUWrMC2wnGDafDEtsf//ThBmyE+gwkplk9e+
UuFKLiswUsmqj9oBS9tJNNPYvD/vT1eHZ40MEa7vMUPhHmYtudRGYJHHVJ+zWI+F
CUOaRCTG+ef334AaGaaGaKez1wSeTFPH18SYME94wt/Gq/N17UQqhRIJBwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxAMK8M2/fZkCgHMKahm3rDOpNrMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvakVBd3J3emI5OW1RS0Fjd3BxR2Jlc002azJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBU
MA0GCSqGSIb3DQEBCwUAA4IBAQCYLDZqszu9bcbYs5dwvm23KixylZtGW2aiZhQw
j8syEtOf56iHWDdctximOoIZrsI1aRoHmsSCoJ0hFuoAr3i6TQ7n9DyxmQHQXMsi
HprKmWfJSi80ZOPAKW5gwwXljQbrWIzP4k+YR2bYjF2+0gt9u+zzZLP/UFpM0b82
qx7b8s054ALIqNURG+KUoVOCtQ98gQ7opNniC2j4EWaFoaK5XoCXyqjQLBTGnPMM
moa/TzV1bnkcOdIQcGmj+vDjhAnStgKmm3j5QkjFJb1sdXjrfwRXCLlP5hslt6if
TNc4C1GXPP6Jc3pIsUBC8HGvcRgaEi3yMsIUJ1KNoElLkuyp
-----END CERTIFICATE-----
Generated at Fri Sep 8 09:12:34 2023 by rpki-client on console-ams.rpki-client.org