Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/0Vo4z7Nrd05xzTRKszFGALnO4UI.roa
File: 0Vo4z7Nrd05xzTRKszFGALnO4UI.roa (raw, json)
Hash identifier: +GgE2imBNVv9SeUjjSHWbc2wKUHy/z7kcYahIljGPhk=
Subject key identifier: D1:5A:38:CF:B3:6B:77:4E:71:CD:34:4A:B3:31:46:00:B9:CE:E1:42
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018C1F895024B456390D9A15442BC7C246B3
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/0Vo4z7Nrd05xzTRKszFGALnO4UI.roa
Signing time: Thu 30 Nov 2023 09:22:21 +0000
ROA not before: Thu 30 Nov 2023 09:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206074
IP address blocks: 2a0e:d784::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:89:50:24:b4:56:39:0d:9a:15:44:2b:c7:c2:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 30 09:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d15a38cfb36b774e71cd344ab3314600b9cee142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:76:84:b5:66:4f:ea:05:7b:c8:26:31:db:
4d:92:b4:cb:87:14:c5:b4:2a:8c:0c:af:ee:26:96:
c8:5d:76:67:90:cc:e2:a0:11:06:93:45:67:de:5c:
73:98:3c:91:17:27:e4:01:cc:c3:7f:0a:ca:df:d0:
d2:1a:82:3d:00:53:96:fc:df:b3:b6:94:29:35:9c:
b2:b1:40:4b:3b:cd:a2:f3:da:5b:a7:b2:6c:9e:07:
32:50:d2:ec:68:8e:8c:f0:53:c8:24:1e:3b:c9:62:
dc:c3:47:d1:d7:25:b4:cf:04:c6:10:94:ac:53:19:
e3:75:a1:f8:06:7b:31:d0:1c:1e:49:f7:9a:ca:b5:
98:fc:35:c6:23:da:cd:c7:00:e5:82:44:75:c6:e1:
72:b6:c2:ef:26:bb:4f:62:41:67:9a:4f:71:4e:00:
83:af:b8:33:3c:79:fc:0e:84:82:dd:cf:08:42:e0:
a6:af:c1:cc:ad:88:c0:d9:42:03:49:58:26:44:37:
a9:23:1e:52:8d:4e:b9:eb:d8:01:9d:c7:5e:56:9a:
fe:fe:d0:da:98:28:36:e4:7f:82:35:e2:e3:79:61:
0c:85:66:22:98:29:da:83:eb:85:f9:37:3c:66:a3:
ef:25:e3:3b:90:af:ec:da:a7:67:93:3a:88:ea:9d:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:38:CF:B3:6B:77:4E:71:CD:34:4A:B3:31:46:00:B9:CE:E1:42
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/0Vo4z7Nrd05xzTRKszFGALnO4UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d784::/32
Signature Algorithm: sha256WithRSAEncryption
a3:ab:82:c3:13:c2:40:51:36:9c:d1:fd:df:a9:11:fe:8f:1c:
68:5e:23:25:b3:7e:84:2e:e0:ac:0c:01:14:a5:da:ac:f2:8e:
06:e8:34:d8:c3:94:4e:00:60:93:c0:bc:96:2a:c6:1c:95:b3:
94:40:c3:7f:f8:ee:ff:eb:67:b2:fb:b4:2b:e1:ce:5b:76:35:
a2:8c:91:a8:71:e9:75:69:d8:5d:69:30:44:c4:77:50:0f:29:
a2:51:80:d7:28:af:77:fd:9c:58:df:91:f2:d2:fc:d6:62:8d:
be:34:29:5c:63:de:24:0c:1d:c3:3d:c8:b5:b0:f1:8a:87:63:
a0:05:7c:5e:ad:38:22:de:1d:ed:f6:e6:66:ba:ad:72:74:5f:
cb:04:d2:06:2a:e5:0f:ff:14:5e:a3:5f:87:c8:76:ac:03:04:
09:d5:27:6d:d1:ad:3e:26:dc:3d:91:37:0a:1d:e4:b1:8d:33:
2c:de:3a:b8:57:a4:14:0b:8b:61:34:b5:c2:71:81:7f:9c:9d:
54:ab:79:a6:78:8a:d5:03:3a:10:34:53:ce:d1:8e:c8:11:7f:
e5:ff:e5:dc:dd:e5:80:1e:4a:64:2a:85:a5:a5:48:08:01:92:
f3:4d:72:f8:31:d9:93:28:04:2f:69:a9:dc:0c:d6:f8:3f:f9:
0c:69:6c:2b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYwfiVAktFY5DZoVRCvHwkazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMxMTMwMDkyMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTVhMzhjZmIzNmI3NzRlNzFjZDM0NGFiMzMxNDYwMGI5Y2VlMTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xV2hLVmT+oFe8gmMdtNkrTLhxTF
tCqMDK/uJpbIXXZnkMzioBEGk0Vn3lxzmDyRFyfkAczDfwrK39DSGoI9AFOW/N+z
tpQpNZyysUBLO82i89pbp7JsngcyUNLsaI6M8FPIJB47yWLcw0fR1yW0zwTGEJSs
UxnjdaH4Bnsx0BweSfeayrWY/DXGI9rNxwDlgkR1xuFytsLvJrtPYkFnmk9xTgCD
r7gzPHn8DoSC3c8IQuCmr8HMrYjA2UIDSVgmRDepIx5SjU6569gBncdeVpr+/tDa
mCg25H+CNeLjeWEMhWYimCnag+uF+Tc8ZqPvJeM7kK/s2qdnkzqI6p1+LwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNFaOM+za3dOcc00SrMxRgC5zuFCMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvMFZvNHo3TnJkMDV4elRSS3N6RkdBTG5PNFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7XhDAN
BgkqhkiG9w0BAQsFAAOCAQEAo6uCwxPCQFE2nNH936kR/o8caF4jJbN+hC7grAwB
FKXarPKOBug02MOUTgBgk8C8lirGHJWzlEDDf/ju/+tnsvu0K+HOW3Y1ooyRqHHp
dWnYXWkwRMR3UA8polGA1yivd/2cWN+R8tL81mKNvjQpXGPeJAwdwz3ItbDxiodj
oAV8Xq04It4d7fbmZrqtcnRfywTSBirlD/8UXqNfh8h2rAMECdUnbdGtPibcPZE3
Ch3ksY0zLN46uFekFAuLYTS1wnGBf5ydVKt5pniK1QM6EDRTztGOyBF/5f/l3N3l
gB5KZCqFpaVICAGS801y+DHZkygEL2mp3AzW+D/5DGlsKw==
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:00 2024 by rpki-client on console-fra.rpki-client.org