Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/ovxnf2Bu8jVIBYbXzJBjDfxmeQE.roa
File: ovxnf2Bu8jVIBYbXzJBjDfxmeQE.roa (raw, json)
Hash identifier: TN+yhT+XnZuUJsTGEnm9maoIkcA79tx/nJWjCKOkPi8=
Subject key identifier: A2:FC:67:7F:60:6E:F2:35:48:05:86:D7:CC:90:63:0D:FC:66:79:01
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 0185729EB7A0B7A2423B5D97E741E18B2218
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/ovxnf2Bu8jVIBYbXzJBjDfxmeQE.roa
Signing time: Mon 02 Jan 2023 13:14:42 +0000
ROA not before: Mon 02 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40970
IP address blocks: 2a0c:7100::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b7:a0:b7:a2:42:3b:5d:97:e7:41:e1:8b:22:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2fc677f606ef235480586d7cc90630dfc667901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:22:85:eb:fc:d4:e4:fa:b5:01:d7:ca:dc:
ef:ac:fe:1e:de:43:80:49:9e:5f:30:e9:78:4a:25:
51:a7:98:71:65:f0:4b:20:2b:55:58:f7:79:e4:37:
b5:65:b1:ea:ed:f1:df:4e:c7:1c:ed:05:77:bd:9f:
7c:d9:56:52:34:20:2a:43:16:3e:61:9e:78:75:25:
54:bc:b7:62:f0:9e:bc:8a:3f:66:70:7a:34:6c:76:
ee:81:89:ca:a6:cc:fb:9a:57:42:82:54:aa:1c:f2:
f0:19:e9:89:f0:cf:fa:f7:05:7a:09:fd:bc:3a:bc:
63:b7:ca:56:d1:2c:03:80:7b:72:5c:17:c1:36:28:
d6:15:3c:0a:ba:3f:da:63:0f:f2:07:6a:56:1e:d7:
fa:c9:aa:d2:8f:fa:16:36:e7:66:a1:3b:a2:c2:60:
01:54:cd:54:9d:8f:44:79:05:43:3b:f7:be:1e:fa:
3c:4b:8d:5f:4e:63:71:d3:9f:53:06:9d:fa:21:44:
e9:16:f2:05:ef:c3:e6:58:79:ea:32:c2:d4:e5:1d:
c5:de:5e:1c:07:c2:d8:53:44:65:f6:90:61:c1:c0:
8d:85:20:fb:a4:9e:5d:1f:bc:14:50:07:f4:53:72:
9b:f7:29:a9:9f:f0:fb:4e:f7:75:b9:5a:01:ed:5e:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:67:7F:60:6E:F2:35:48:05:86:D7:CC:90:63:0D:FC:66:79:01
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/ovxnf2Bu8jVIBYbXzJBjDfxmeQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7100::/29
Signature Algorithm: sha256WithRSAEncryption
d8:be:cd:d4:e3:58:d1:69:b2:13:2e:f6:73:59:6d:51:d7:68:
a2:2f:a9:d8:bb:93:1c:0e:42:c3:9a:8d:e0:10:2d:9f:6c:6c:
9a:6e:34:4d:85:b0:2b:83:e5:db:77:5b:78:27:90:c5:5c:aa:
e8:c6:da:f3:49:e7:cd:19:5b:1d:8c:27:b1:4e:71:81:ab:1d:
8d:3b:15:8a:02:5e:64:85:09:a9:d2:d9:0e:8c:05:47:80:6d:
c2:20:23:3c:93:8b:c9:21:4d:3e:aa:3f:39:78:17:5f:a1:6f:
09:6d:fe:9b:03:ee:52:f9:32:06:d0:12:88:c4:c3:a3:67:95:
94:9c:39:31:a6:1b:e7:c5:b2:61:5e:45:62:96:c0:a5:5c:4a:
7d:69:09:30:66:65:9f:60:dd:4d:8e:5c:7d:c2:2d:3e:72:31:
98:aa:50:65:e2:f1:4d:b5:9a:fe:94:a3:d5:d0:c5:34:e6:dc:
17:76:eb:46:21:9f:c6:17:ce:a9:5e:00:ad:3a:45:25:66:72:
6c:46:71:8a:69:0a:39:d7:68:4a:19:e9:ba:a4:52:b2:77:68:
a6:d3:ce:25:66:64:d7:4d:68:f9:8a:92:ce:0b:c2:12:b8:53:
b1:67:8f:da:13:8c:34:7b:dc:23:fe:65:97:41:f9:8d:fd:a0:
ad:df:11:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVynregt6JCO12X50HhiyIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjMwMTAyMTMxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmZjNjc3ZjYwNmVmMjM1NDgwNTg2ZDdjYzkwNjMwZGZjNjY3OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXgihev81OT6tQHXytzvrP4e3kOA
SZ5fMOl4SiVRp5hxZfBLICtVWPd55De1ZbHq7fHfTscc7QV3vZ982VZSNCAqQxY+
YZ54dSVUvLdi8J68ij9mcHo0bHbugYnKpsz7mldCglSqHPLwGemJ8M/69wV6Cf28
Orxjt8pW0SwDgHtyXBfBNijWFTwKuj/aYw/yB2pWHtf6yarSj/oWNudmoTuiwmAB
VM1UnY9EeQVDO/e+Hvo8S41fTmNx059TBp36IUTpFvIF78PmWHnqMsLU5R3F3l4c
B8LYU0Rl9pBhwcCNhSD7pJ5dH7wUUAf0U3Kb9ympn/D7Tvd1uVoB7V6ktQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKL8Z39gbvI1SAWG18yQYw38ZnkBMB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvb3Z4bmYyQnU4alZJQlliWHpKQmpEZnhtZVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgxxADAN
BgkqhkiG9w0BAQsFAAOCAQEA2L7N1ONY0WmyEy72c1ltUddooi+p2LuTHA5Cw5qN
4BAtn2xsmm40TYWwK4Pl23dbeCeQxVyq6Mba80nnzRlbHYwnsU5xgasdjTsVigJe
ZIUJqdLZDowFR4BtwiAjPJOLySFNPqo/OXgXX6FvCW3+mwPuUvkyBtASiMTDo2eV
lJw5MaYb58WyYV5FYpbApVxKfWkJMGZln2DdTY5cfcItPnIxmKpQZeLxTbWa/pSj
1dDFNObcF3brRiGfxhfOqV4ArTpFJWZybEZximkKOddoShnpuqRSsndoptPOJWZk
101o+YqSzgvCErhTsWeP2hOMNHvcI/5ll0H5jf2grd8Rkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:14 2024 by rpki-client on console-ams.rpki-client.org