Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/O8V2Egxi7lsmzULAOkWAiL29lJE.roa
File: O8V2Egxi7lsmzULAOkWAiL29lJE.roa (raw, json)
Hash identifier: E5ToQxFhuhvvXaWlhwVbXFv3oikXSUATeaQvRiyEs/o=
Subject key identifier: 3B:C5:76:12:0C:62:EE:5B:26:CD:42:C0:3A:45:80:88:BD:BD:94:91
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B06856296672702010EAE7F8455AE3
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/O8V2Egxi7lsmzULAOkWAiL29lJE.roa
Signing time: Mon 02 Jan 2023 04:14:47 +0000
ROA not before: Mon 02 Jan 2023 04:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211139
IP address blocks: 2a05:b0c6:6006::/48 maxlen: 48
2a05:b0c6:6000::/48 maxlen: 48
2a05:b0c6:6007::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:68:56:29:66:72:70:20:10:ea:e7:f8:45:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bc576120c62ee5b26cd42c03a458088bdbd9491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:2c:81:a4:f4:0a:f7:c7:b7:2c:29:4d:81:
cb:d7:54:84:59:da:8d:0e:7b:0b:70:c5:49:d1:a5:
64:9f:5c:6a:44:bf:67:bb:02:62:da:ac:e9:75:8a:
2f:38:32:c7:5b:d7:5a:9c:0f:67:01:ad:86:59:71:
17:fe:27:14:f7:04:9e:55:82:5f:fb:30:d1:83:cb:
ef:e1:c9:3f:de:6a:99:65:89:36:ee:0d:f5:48:6a:
ea:b4:07:4b:8b:08:aa:fa:17:41:77:d4:15:41:27:
a6:e0:fd:d0:38:06:e2:03:bf:a8:59:71:a9:24:2f:
47:e2:fa:93:36:88:b0:c0:24:34:6b:77:f5:a3:12:
54:0e:91:46:9d:78:82:27:51:41:4f:be:18:80:36:
fc:d9:31:de:19:75:93:52:70:8e:ab:ea:df:75:d8:
18:0e:55:7f:61:78:2d:6d:5d:b4:47:4f:a9:be:36:
14:e8:83:5e:04:4b:7b:db:38:82:ca:21:0b:a8:ab:
66:86:1e:ee:eb:9e:65:25:3b:93:26:1f:fa:db:31:
e8:9e:cb:3f:e5:f3:ea:db:b9:5c:3b:54:95:12:f5:
a0:97:06:b8:c1:e5:dd:e1:8c:6b:af:95:ab:36:6d:
d8:64:61:08:be:b4:b2:69:8e:51:bb:58:49:fb:37:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:76:12:0C:62:EE:5B:26:CD:42:C0:3A:45:80:88:BD:BD:94:91
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/O8V2Egxi7lsmzULAOkWAiL29lJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:6000::/48
2a05:b0c6:6006::/47
Signature Algorithm: sha256WithRSAEncryption
60:92:aa:d7:27:38:00:d3:b6:cf:96:64:f0:79:3d:c3:2d:e5:
09:48:b6:d3:0b:71:2e:63:de:54:18:02:07:11:b0:0f:66:50:
f7:cb:b4:d6:43:5d:f5:a7:8d:78:13:3b:fc:26:92:ee:3b:aa:
a3:dc:13:b6:69:9f:dc:29:a8:2f:ca:cd:aa:d8:95:6a:fe:47:
21:91:1a:8b:03:e5:a3:25:57:e5:85:fc:58:ba:e9:04:5c:6b:
18:ab:88:aa:5a:2e:c5:6c:3d:fa:14:1b:df:12:99:3c:1b:34:
30:b8:44:89:8e:9d:49:e5:92:86:0a:35:64:dc:db:a0:ca:b6:
a7:6a:e2:27:86:dd:fb:5d:84:d1:03:e3:49:d0:46:ae:9d:8b:
a2:82:5e:a6:75:94:a7:7b:4c:88:5c:b1:3f:33:6b:54:15:09:
63:77:23:67:4d:7d:ee:12:e3:d5:29:00:7f:73:e9:97:18:c7:
43:46:b9:03:6a:28:e4:5e:e1:ac:36:08:a2:ee:a6:49:d8:7b:
28:07:7e:85:52:46:44:f6:82:87:ee:9a:bd:61:49:46:7a:b8:
89:7d:2e:4c:08:a2:bc:0f:7a:26:87:c1:72:b9:c8:f8:a3:60:
43:ae:32:40:4b:b9:c0:47:d5:a4:5c:df:84:b9:0b:93:b4:bd:
e3:8c:5c:ae
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwsGhWKWZycCAQ6uf4RVrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjMwMTAyMDQxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmM1NzYxMjBjNjJlZTViMjZjZDQyYzAzYTQ1ODA4OGJkYmQ5NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgEsgaT0CvfHtywpTYHL11SEWdqN
DnsLcMVJ0aVkn1xqRL9nuwJi2qzpdYovODLHW9danA9nAa2GWXEX/icU9wSeVYJf
+zDRg8vv4ck/3mqZZYk27g31SGrqtAdLiwiq+hdBd9QVQSem4P3QOAbiA7+oWXGp
JC9H4vqTNoiwwCQ0a3f1oxJUDpFGnXiCJ1FBT74YgDb82THeGXWTUnCOq+rfddgY
DlV/YXgtbV20R0+pvjYU6INeBEt72ziCyiELqKtmhh7u655lJTuTJh/62zHonss/
5fPq27lcO1SVEvWglwa4weXd4Yxrr5WrNm3YZGEIvrSyaY5Ru1hJ+zeEnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDvFdhIMYu5bJs1CwDpFgIi9vZSRMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvTzhWMkVneGk3bHNtelVMQU9rV0FpTDI5bEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWwxmAA
AwcBKgWwxmAGMA0GCSqGSIb3DQEBCwUAA4IBAQBgkqrXJzgA07bPlmTweT3DLeUJ
SLbTC3EuY95UGAIHEbAPZlD3y7TWQ131p414Ezv8JpLuO6qj3BO2aZ/cKagvys2q
2JVq/kchkRqLA+WjJVflhfxYuukEXGsYq4iqWi7FbD36FBvfEpk8GzQwuESJjp1J
5ZKGCjVk3NugyranauInht37XYTRA+NJ0EaunYuigl6mdZSne0yIXLE/M2tUFQlj
dyNnTX3uEuPVKQB/c+mXGMdDRrkDaijkXuGsNgii7qZJ2HsoB36FUkZE9oKH7pq9
YUlGeriJfS5MCKK8D3omh8Fyucj4o2BDrjJAS7nAR9WkXN+EuQuTtL3jjFyu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org