Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/bo1U4sY7pjNS8GvdfJFFuKBCwnc.roa
File: bo1U4sY7pjNS8GvdfJFFuKBCwnc.roa (raw, json)
Hash identifier: weVFVBN9Db9pvjxXhAbTpjshLARlUfa1qHSlh+TRoPQ=
Subject key identifier: 6E:8D:54:E2:C6:3B:A6:33:52:F0:6B:DD:7C:91:45:B8:A0:42:C2:77
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 018BF258B49CB55D21D07862E52AAD9403AC
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/bo1U4sY7pjNS8GvdfJFFuKBCwnc.roa
Signing time: Tue 21 Nov 2023 14:46:21 +0000
ROA not before: Tue 21 Nov 2023 14:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 2a12:cc01::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 01 Dec 2023 17:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:58:b4:9c:b5:5d:21:d0:78:62:e5:2a:ad:94:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Nov 21 14:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e8d54e2c63ba63352f06bdd7c9145b8a042c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:a1:b7:ef:b7:2c:d1:59:da:fd:06:81:48:
32:40:f3:b9:81:78:3b:2c:47:2f:92:23:7e:0d:17:
96:8c:5a:45:cc:8d:4f:2b:17:d0:0d:3f:77:79:4b:
dc:6e:0d:ab:d8:7d:5e:fa:f8:9e:a6:38:60:02:ee:
16:7a:a0:c0:b7:1f:53:eb:5f:89:91:c2:b7:99:f4:
93:d3:31:fe:22:95:e8:ac:4c:fa:0e:13:ed:8d:e7:
62:ef:fd:71:27:52:ee:d4:b0:10:f4:0f:68:fe:c0:
b1:b6:44:aa:a9:68:73:13:0b:cd:f1:cb:56:76:7a:
6c:46:c0:5c:3d:46:43:ca:f5:07:08:f2:1e:a2:51:
e8:98:9c:0e:c1:43:4c:e8:b1:85:7b:bf:60:cd:22:
69:1c:e5:e3:00:c8:56:ca:34:85:b0:40:cc:bf:ae:
9c:9e:d9:d7:cb:c7:d5:f4:eb:07:58:86:cb:01:b7:
bd:fb:4b:06:c4:f6:ca:34:7e:83:4b:f5:c8:b0:21:
b6:8c:6d:63:b0:17:70:35:0b:04:92:91:b7:c9:46:
08:a1:12:ea:ea:53:91:2b:56:89:98:b8:19:35:51:
ab:68:53:c6:dd:dc:a1:29:d9:9f:03:f1:21:3a:f1:
b9:8e:96:1f:e1:23:7a:45:cb:05:1c:43:3b:3c:67:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:54:E2:C6:3B:A6:33:52:F0:6B:DD:7C:91:45:B8:A0:42:C2:77
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/bo1U4sY7pjNS8GvdfJFFuKBCwnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cc01::/32
Signature Algorithm: sha256WithRSAEncryption
22:8c:d8:94:95:74:1f:53:aa:74:eb:21:f4:f1:19:e1:53:cd:
9e:8c:f7:4f:86:63:04:30:36:20:14:8a:6a:52:97:f8:4d:c7:
67:3d:63:0c:73:34:2f:3c:23:42:f2:74:4b:c7:a8:ca:a7:6e:
67:c9:05:a9:2a:71:ee:6f:14:59:81:97:d0:70:de:1d:d4:9d:
1a:70:1a:f7:ac:f9:6a:fb:8f:3e:5f:b3:2f:9e:12:d7:a4:71:
be:99:b4:a4:1a:51:c4:7d:64:73:f6:fa:ff:28:c5:60:fc:82:
2a:00:b5:97:a5:04:1f:3e:d0:82:d8:6d:cc:9d:1c:0b:1a:02:
51:df:4f:a5:b6:33:90:c0:4c:ae:24:76:0b:75:74:4b:75:5c:
bf:b8:15:03:74:b0:82:c0:de:46:ee:dd:08:5b:a2:5b:f9:24:
2d:48:2c:0d:f8:c7:fa:ea:07:0d:a2:50:ca:03:13:db:b3:ce:
91:f6:1c:71:76:68:1a:56:05:cf:bc:de:21:ac:72:48:0c:fc:
a1:87:44:60:04:37:33:5b:24:6c:e7:e8:e9:b3:de:bd:30:6b:
46:28:7f:74:69:56:fc:32:41:7c:c5:54:a6:8d:e5:63:d2:bc:
55:f1:4c:90:64:74:89:a9:ed:6e:45:94:e7:bd:37:c7:cb:6b:
64:05:fa:c8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYvyWLSctV0h0Hhi5SqtlAOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGJlZmJhOGZlM2MxZjY2OGM4NDQ0Mzg0ZmU0YTNhOWY0
ZDg3ZjEwHhcNMjMxMTIxMTQ0NjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZThkNTRlMmM2M2JhNjMzNTJmMDZiZGQ3YzkxNDViOGEwNDJjMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/+ht++3LNFZ2v0GgUgyQPO5gXg7
LEcvkiN+DReWjFpFzI1PKxfQDT93eUvcbg2r2H1e+viepjhgAu4WeqDAtx9T61+J
kcK3mfST0zH+IpXorEz6DhPtjedi7/1xJ1Lu1LAQ9A9o/sCxtkSqqWhzEwvN8ctW
dnpsRsBcPUZDyvUHCPIeolHomJwOwUNM6LGFe79gzSJpHOXjAMhWyjSFsEDMv66c
ntnXy8fV9OsHWIbLAbe9+0sGxPbKNH6DS/XIsCG2jG1jsBdwNQsEkpG3yUYIoRLq
6lORK1aJmLgZNVGraFPG3dyhKdmfA/EhOvG5jpYf4SN6RcsFHEM7PGcsQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFG6NVOLGO6YzUvBr3XyRRbigQsJ3MB8GA1UdIwQY
MBaAFM3b77qP48H2aMhEQ4T+SjqfTYfxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR2dnVvX2p3ZlpveUVSRGhQNUtPcDlOaF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZTUyZjEtMTNiMi00NWRmLThhNDMt
MWEzOWU2YTZkZTkzLzEvYm8xVTRzWTdwak5TOEd2ZGZKRkZ1S0JDd25jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80ZTUyZjEtMTNiMi00NWRmLThhNDMtMWEzOWU2YTZkZTkz
LzEvemR2dnVvX2p3ZlpveUVSRGhQNUtPcDlOaF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhLMATAN
BgkqhkiG9w0BAQsFAAOCAQEAIozYlJV0H1OqdOsh9PEZ4VPNnoz3T4ZjBDA2IBSK
alKX+E3HZz1jDHM0LzwjQvJ0S8eoyqduZ8kFqSpx7m8UWYGX0HDeHdSdGnAa96z5
avuPPl+zL54S16Rxvpm0pBpRxH1kc/b6/yjFYPyCKgC1l6UEHz7QgthtzJ0cCxoC
Ud9PpbYzkMBMriR2C3V0S3Vcv7gVA3SwgsDeRu7dCFuiW/kkLUgsDfjH+uoHDaJQ
ygMT27POkfYccXZoGlYFz7zeIaxySAz8oYdEYAQ3M1skbOfo6bPevTBrRih/dGlW
/DJBfMVUpo3lY9K8VfFMkGR0iantbkWU5703x8trZAX6yA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:17 2024 by rpki-client on console-ams.rpki-client.org