Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CEn0Ks_YP_uvRYWYkY_PzulNeBo.roa
File: CEn0Ks_YP_uvRYWYkY_PzulNeBo.roa (raw, json)
Hash identifier: hjJV+C9Npd7NNhFwpW1m8+ux17If3vi9FUvcaJs7Sh8=
Subject key identifier: 08:49:F4:2A:CF:D8:3F:FB:AF:45:85:98:91:8F:CF:CE:E9:4D:78:1A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01860E27C401F3F1B9A0E7487F6F5FDEA4C3
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CEn0Ks_YP_uvRYWYkY_PzulNeBo.roa
Signing time: Wed 01 Feb 2023 18:05:32 +0000
ROA not before: Wed 01 Feb 2023 18:05:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62445
IP address blocks: 2a05:b680:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:27:c4:01:f3:f1:b9:a0:e7:48:7f:6f:5f:de:a4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Feb 1 18:05:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0849f42acfd83ffbaf458598918fcfcee94d781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:b8:ca:83:8a:12:ca:2a:3c:7f:81:14:76:
d8:7f:31:25:95:4c:a2:7a:33:e2:04:d8:fc:1b:7c:
da:d2:d6:b9:61:04:9e:b5:2e:70:e5:25:c7:3b:e0:
dd:81:39:48:1f:6d:ae:67:58:47:5e:2c:e3:ac:98:
07:cd:01:52:12:62:3b:ac:69:aa:44:4b:b1:88:f7:
b6:0d:b4:8f:21:c2:0e:c1:38:34:20:a5:35:70:d9:
9a:17:e0:d2:2e:ba:4f:7f:30:88:d4:4c:3c:26:9a:
b4:23:d6:90:83:ce:fe:26:8f:9b:cc:34:11:9f:bb:
2d:db:93:25:d4:4b:ef:e8:58:cb:24:40:5c:25:3c:
68:35:5b:bc:9b:ff:1b:24:a2:c1:70:d7:37:8c:d5:
6b:03:4b:9d:dc:2c:12:e7:fa:9e:75:50:a4:30:bb:
48:32:d4:42:3f:e3:49:94:39:1b:11:85:6d:c3:7a:
e5:70:05:83:c7:f4:61:34:9e:7d:31:28:19:19:15:
4e:72:60:dd:87:03:16:e2:c6:a1:81:d9:cf:c8:a7:
34:98:87:4a:49:f2:f4:27:49:91:5d:a2:a6:5f:a0:
84:2d:be:66:7d:b7:12:25:be:8d:fe:14:a1:fb:ab:
55:68:1f:36:c7:6d:45:0a:13:3b:a3:39:dc:0e:d5:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:F4:2A:CF:D8:3F:FB:AF:45:85:98:91:8F:CF:CE:E9:4D:78:1A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CEn0Ks_YP_uvRYWYkY_PzulNeBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b680:8::/48
Signature Algorithm: sha256WithRSAEncryption
7c:77:30:97:1b:4c:44:aa:ef:60:20:76:cf:5e:e0:b1:fe:66:
37:f4:39:36:7f:71:24:65:66:8e:26:1c:96:69:1e:ee:49:16:
2f:cb:50:89:5a:64:9b:c3:f7:f3:49:7d:fe:13:af:bc:ca:40:
9e:e4:a1:86:51:07:69:18:db:93:c5:59:0a:78:3b:23:f9:51:
f1:53:31:a9:38:06:c9:fe:07:c4:b9:03:32:ff:b6:89:57:d0:
af:3a:b0:2e:b9:c3:32:45:38:83:31:76:02:3f:92:97:07:76:
e9:d3:ac:bb:30:07:62:b6:99:f5:5c:bc:a9:96:91:75:52:28:
f1:94:c6:de:cc:7e:7b:a1:7e:b4:12:42:93:ed:da:59:28:87:
70:05:48:7c:09:c1:2f:46:54:5e:3e:f1:fa:3c:c7:7f:45:62:
5f:54:42:bc:1b:69:e8:77:bb:19:d6:8a:42:40:59:6d:1c:af:
5f:ef:9f:e2:ec:d6:06:13:3c:a8:78:73:57:49:c7:31:0a:b0:
17:83:04:e0:04:c7:ad:5c:75:be:18:08:46:b0:8f:5e:35:7d:
ab:f5:67:f9:a5:bd:f4:49:73:a0:ee:b3:ad:78:93:f9:00:a7:
59:b4:41:b0:76:f9:82:c2:e4:0c:40:27:63:57:a5:47:9b:c0:
7c:2a:25:cb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYOJ8QB8/G5oOdIf29f3qTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjMwMjAxMTgwNTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODQ5ZjQyYWNmZDgzZmZiYWY0NTg1OTg5MThmY2ZjZWU5NGQ3ODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2+4yoOKEsoqPH+BFHbYfzEllUyi
ejPiBNj8G3za0ta5YQSetS5w5SXHO+DdgTlIH22uZ1hHXizjrJgHzQFSEmI7rGmq
REuxiPe2DbSPIcIOwTg0IKU1cNmaF+DSLrpPfzCI1Ew8Jpq0I9aQg87+Jo+bzDQR
n7st25Ml1Evv6FjLJEBcJTxoNVu8m/8bJKLBcNc3jNVrA0ud3CwS5/qedVCkMLtI
MtRCP+NJlDkbEYVtw3rlcAWDx/RhNJ59MSgZGRVOcmDdhwMW4sahgdnPyKc0mIdK
SfL0J0mRXaKmX6CELb5mfbcSJb6N/hSh+6tVaB82x21FChM7ozncDtX+fwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAhJ9CrP2D/7r0WFmJGPz87pTXgaMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvQ0VuMEtzX1lQX3V2UllXWWtZX1B6dWxOZUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgW2gAAI
MA0GCSqGSIb3DQEBCwUAA4IBAQB8dzCXG0xEqu9gIHbPXuCx/mY39Dk2f3EkZWaO
JhyWaR7uSRYvy1CJWmSbw/fzSX3+E6+8ykCe5KGGUQdpGNuTxVkKeDsj+VHxUzGp
OAbJ/gfEuQMy/7aJV9CvOrAuucMyRTiDMXYCP5KXB3bp06y7MAditpn1XLyplpF1
UijxlMbezH57oX60EkKT7dpZKIdwBUh8CcEvRlRePvH6PMd/RWJfVEK8G2nod7sZ
1opCQFltHK9f75/i7NYGEzyoeHNXSccxCrAXgwTgBMetXHW+GAhGsI9eNX2r9Wf5
pb30SXOg7rOteJP5AKdZtEGwdvmCwuQMQCdjV6VHm8B8KiXL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org