Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/omCj48Ef2JDLJSYOHBM2cK6WCx0.roa
File: omCj48Ef2JDLJSYOHBM2cK6WCx0.roa (raw, json)
Hash identifier: rXi8rX6I5M8jdFah9W2mnJwmqoFlzyADxrkVqhj8wkc=
Subject key identifier: A2:60:A3:E3:C1:1F:D8:90:CB:25:26:0E:1C:13:36:70:AE:96:0B:1D
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 018BA69C7FD45F8E0EF8A9030532BDCCFE59
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/omCj48Ef2JDLJSYOHBM2cK6WCx0.roa
Signing time: Mon 06 Nov 2023 21:49:16 +0000
ROA not before: Mon 06 Nov 2023 21:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134981
IP address blocks: 2a0c:4a01:c20::/44 maxlen: 44
2a0c:4a01:c10::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:9c:7f:d4:5f:8e:0e:f8:a9:03:05:32:bd:cc:fe:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Nov 6 21:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a260a3e3c11fd890cb25260e1c133670ae960b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:26:8b:39:6b:fe:42:45:5c:7d:c9:f1:49:
c8:31:f5:57:79:dc:9d:11:ad:18:a1:ba:09:54:3b:
19:60:47:c0:ce:9d:1c:4d:e9:d5:c7:45:db:98:1c:
b6:bf:4c:c9:2b:27:1a:af:fb:7d:fd:39:2d:5d:f5:
85:cc:d2:11:3c:0a:52:4d:eb:2d:4e:af:c2:5d:23:
58:2c:92:3a:77:82:49:16:d1:ca:5f:2c:08:cf:8f:
a6:4e:4b:e9:43:9b:96:1e:bf:a5:f2:da:e8:e7:85:
62:ef:9f:ec:73:1a:c8:c6:70:5e:33:e8:20:c1:27:
90:41:7a:2b:45:82:6f:f9:70:46:eb:96:81:47:46:
83:71:9f:4a:67:da:6d:31:a8:16:b5:9d:fc:02:5f:
28:ae:6b:f2:2c:f2:ab:1c:7c:05:1c:0d:d8:cb:ad:
4b:b0:7c:09:12:94:56:69:56:cf:84:37:35:14:5e:
fa:6c:80:29:16:a0:90:bd:3e:73:b2:9c:f9:33:d6:
59:27:cf:95:b2:a7:bc:d7:3c:4d:ad:ed:79:74:88:
86:d9:bd:6d:1c:50:39:f3:e9:01:d2:2f:fe:ea:9c:
72:84:bc:eb:6c:c4:6b:d3:28:05:53:65:83:b4:bf:
7d:58:60:3d:e1:db:9f:e3:cc:19:c5:00:92:b1:32:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:A3:E3:C1:1F:D8:90:CB:25:26:0E:1C:13:36:70:AE:96:0B:1D
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/omCj48Ef2JDLJSYOHBM2cK6WCx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4a01:c10::-2a0c:4a01:c2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:9a:e4:39:e6:c3:74:5d:6e:05:df:f0:9e:00:24:a9:e2:2e:
a5:74:d2:c2:18:68:8e:d3:3b:dd:b5:bd:08:5d:6a:4a:c2:92:
6d:64:e8:6e:d8:6d:7e:fd:f4:dd:ba:1e:06:70:2a:c6:3a:90:
fa:81:a0:e7:c5:db:bd:b2:ac:31:92:aa:8a:bb:34:4c:33:4f:
6a:f9:db:8f:ca:d0:6a:1f:77:aa:45:e3:e1:8a:5e:d5:99:b9:
b8:d8:f4:b6:e4:7d:c5:db:37:9e:7a:ec:4c:6b:af:3b:e4:a5:
51:31:aa:d4:3c:51:a9:63:5b:ec:2f:ca:3e:fa:ae:69:9a:15:
9c:fa:b7:75:a5:42:d1:db:e3:4c:8d:6b:d6:81:73:14:cd:64:
b1:a7:73:f5:86:7b:c2:ca:ec:d5:89:04:f9:5e:85:3b:86:82:
4f:82:a8:19:97:87:ce:a0:42:f1:78:ac:17:8b:88:99:b7:96:
12:3c:34:cb:1e:3c:2f:ed:88:e6:9e:2b:5d:23:ad:ac:c0:bc:
3e:67:cf:6c:f5:0b:f7:c9:85:ba:65:45:fa:06:f3:e5:1f:5b:
37:3d:43:f7:79:5d:1d:4e:57:58:ac:08:24:d2:4a:93:36:fa:
e8:d6:bb:54:bc:20:9c:7a:8c:e9:ae:60:4d:e8:e8:2d:1c:27:
23:05:dd:d5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYumnH/UX44O+KkDBTK9zP5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjMxMTA2MjE0OTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjYwYTNlM2MxMWZkODkwY2IyNTI2MGUxYzEzMzY3MGFlOTYwYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/wmizlr/kJFXH3J8UnIMfVXedyd
Ea0YoboJVDsZYEfAzp0cTenVx0XbmBy2v0zJKycar/t9/TktXfWFzNIRPApSTest
Tq/CXSNYLJI6d4JJFtHKXywIz4+mTkvpQ5uWHr+l8tro54Vi75/scxrIxnBeM+gg
wSeQQXorRYJv+XBG65aBR0aDcZ9KZ9ptMagWtZ38Al8ormvyLPKrHHwFHA3Yy61L
sHwJEpRWaVbPhDc1FF76bIApFqCQvT5zspz5M9ZZJ8+Vsqe81zxNre15dIiG2b1t
HFA58+kB0i/+6pxyhLzrbMRr0ygFU2WDtL99WGA94duf48wZxQCSsTIsLwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKJgo+PBH9iQyyUmDhwTNnCulgsdMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvb21DajQ4RWYySkRMSlNZT0hCTTJjSzZXQ3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDEoB
DBADBwQqDEoBDCAwDQYJKoZIhvcNAQELBQADggEBAGOa5Dnmw3RdbgXf8J4AJKni
LqV00sIYaI7TO921vQhdakrCkm1k6G7YbX799N26HgZwKsY6kPqBoOfF272yrDGS
qoq7NEwzT2r524/K0Gofd6pF4+GKXtWZubjY9LbkfcXbN5567ExrrzvkpVExqtQ8
UaljW+wvyj76rmmaFZz6t3WlQtHb40yNa9aBcxTNZLGnc/WGe8LK7NWJBPlehTuG
gk+CqBmXh86gQvF4rBeLiJm3lhI8NMsePC/tiOaeK10jrazAvD5nz2z1C/fJhbpl
RfoG8+UfWzc9Q/d5XR1OV1isCCTSSpM2+ujWu1S8IJx6jOmuYE3o6C0cJyMF3dU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:22 2024 by rpki-client on console-fra.rpki-client.org