Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1NinDaYeyb906E2ctF0JyYa3Zgg.roa
File: 1NinDaYeyb906E2ctF0JyYa3Zgg.roa (raw, json)
Hash identifier: pSVr3gK6H1jMYtdl1Z8ZQPaPEWd3MUCakGFiwGqhDYQ=
Subject key identifier: D4:D8:A7:0D:A6:1E:C9:BF:74:E8:4D:9C:B4:5D:09:C9:86:B7:66:08
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018E392E63E4881C4A3D1F6628F5EF327435
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1NinDaYeyb906E2ctF0JyYa3Zgg.roa
Signing time: Wed 13 Mar 2024 18:58:45 +0000
ROA not before: Wed 13 Mar 2024 18:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215326
IP address blocks: 2a0c:b641:c10::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 07:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:2e:63:e4:88:1c:4a:3d:1f:66:28:f5:ef:32:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 13 18:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4d8a70da61ec9bf74e84d9cb45d09c986b76608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:a1:02:e2:91:74:4f:5e:d1:7c:b1:d8:26:
e6:d9:87:28:84:41:8a:a9:ca:24:a2:91:fe:7e:6c:
68:55:a6:d8:b3:58:ee:b6:74:60:00:85:a5:e8:04:
e0:87:da:1f:46:d9:21:a1:ac:01:05:77:eb:3a:c4:
43:4c:23:e2:21:ec:de:c1:a7:af:2b:76:01:0b:44:
55:ba:00:f0:94:39:8a:7f:bd:66:42:ea:ed:3d:c1:
e0:68:20:f6:55:a3:06:15:84:8e:7c:ed:ed:81:96:
ee:60:1a:89:98:c1:9e:36:4e:73:c5:49:27:87:10:
ce:7e:56:f6:d5:66:f3:17:22:d8:2d:85:63:ff:f5:
90:b7:f8:9b:f4:ff:f1:3e:ca:62:cd:17:c4:b9:f5:
75:0e:f1:93:62:0d:f7:9f:77:5a:5e:cd:d2:09:20:
66:42:f8:fe:d6:8f:e9:5b:7f:bf:14:0d:d4:d1:35:
78:0f:c4:17:54:9b:85:74:a9:09:93:ea:cb:46:4d:
69:6f:a6:ca:22:f7:d4:02:f4:ca:bb:52:da:44:0d:
7c:82:8a:6a:06:1e:64:a8:9f:7f:1b:d8:0e:96:9e:
54:9d:92:4b:64:73:ce:c4:50:7f:0d:8e:20:dd:35:
86:c9:26:35:52:5f:4b:e3:62:16:0f:fc:be:7d:eb:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:A7:0D:A6:1E:C9:BF:74:E8:4D:9C:B4:5D:09:C9:86:B7:66:08
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1NinDaYeyb906E2ctF0JyYa3Zgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:c10::/44
Signature Algorithm: sha256WithRSAEncryption
a0:42:15:d8:67:7f:f4:4a:60:34:47:9f:e0:c7:29:2c:49:6b:
6c:c6:8f:e8:46:90:23:99:eb:4c:46:ce:83:de:de:df:d3:b5:
65:40:8f:a7:9e:57:68:fa:71:bd:ab:7d:2e:bc:01:e1:1a:9c:
7d:7a:06:d8:15:91:88:30:9e:1e:39:69:64:bf:25:18:97:98:
ef:ef:47:1f:f8:78:77:42:d7:85:67:9f:ba:26:e0:46:17:09:
91:3a:a2:d2:cf:b4:ac:1a:92:24:82:57:75:35:e8:67:2f:4b:
7f:fd:f1:0b:c2:b1:cb:e4:43:a2:e9:3d:69:fb:8a:4b:16:d7:
ad:7a:c6:81:96:a1:0b:41:e3:d1:2a:6f:7a:97:e4:4e:87:65:
0e:8c:4c:7d:70:34:93:2e:6f:6c:78:e3:37:1f:7f:2f:94:50:
d7:42:b8:e6:ae:24:1f:87:69:ac:5c:76:72:00:18:2e:8d:ab:
94:ac:9d:ba:7e:11:12:be:f5:e4:94:9c:da:02:e6:bd:d4:d3:
b3:e8:d0:3e:13:fc:d4:15:42:84:b8:dd:46:13:e3:b6:b2:40:
03:29:46:89:73:01:c6:33:55:0e:dd:28:03:66:46:1c:2b:63:
a5:76:12:f6:de:62:03:f6:85:03:c3:0c:e9:6b:72:49:9d:db:
90:fe:eb:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY45LmPkiBxKPR9mKPXvMnQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMzEzMTg1ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGQ4YTcwZGE2MWVjOWJmNzRlODRkOWNiNDVkMDljOTg2Yjc2NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmKhAuKRdE9e0Xyx2Cbm2YcohEGK
qcokopH+fmxoVabYs1jutnRgAIWl6ATgh9ofRtkhoawBBXfrOsRDTCPiIezewaev
K3YBC0RVugDwlDmKf71mQurtPcHgaCD2VaMGFYSOfO3tgZbuYBqJmMGeNk5zxUkn
hxDOflb21WbzFyLYLYVj//WQt/ib9P/xPspizRfEufV1DvGTYg33n3daXs3SCSBm
Qvj+1o/pW3+/FA3U0TV4D8QXVJuFdKkJk+rLRk1pb6bKIvfUAvTKu1LaRA18gopq
Bh5kqJ9/G9gOlp5UnZJLZHPOxFB/DY4g3TWGySY1Ul9L42IWD/y+fevMMQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNTYpw2mHsm/dOhNnLRdCcmGt2YIMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvMU5pbkRhWWV5YjkwNkUyY3RGMEp5WWEzWmdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQwQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCgQhXYZ3/0SmA0R5/gxyksSWtsxo/oRpAjmetM
Rs6D3t7f07VlQI+nnldo+nG9q30uvAHhGpx9egbYFZGIMJ4eOWlkvyUYl5jv70cf
+Hh3QteFZ5+6JuBGFwmROqLSz7SsGpIkgld1NehnL0t//fELwrHL5EOi6T1p+4pL
FtetesaBlqELQePRKm96l+ROh2UOjEx9cDSTLm9seOM3H38vlFDXQrjmriQfh2ms
XHZyABgujauUrJ26fhESvvXklJzaAua91NOz6NA+E/zUFUKEuN1GE+O2skADKUaJ
cwHGM1UO3SgDZkYcK2OldhL23mID9oUDwwzpa3JJnduQ/uv0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org