Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/VjBkEibkCxo0AqHcvqAyEMy3o3M.roa
File: VjBkEibkCxo0AqHcvqAyEMy3o3M.roa (raw, json)
Hash identifier: J5whIYVhDGgZ0ECZDGldw7pEZDp3xipRC0mF0fj53X0=
Subject key identifier: 56:30:64:12:26:E4:0B:1A:34:02:A1:DC:BE:A0:32:10:CC:B7:A3:73
Certificate issuer: /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial: 018CC349418BF0FA38F25D070B7C8C0BDA36
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/VjBkEibkCxo0AqHcvqAyEMy3o3M.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216185
IP address blocks: 2a14:4280:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 10:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:41:8b:f0:fa:38:f2:5d:07:0b:7c:8c:0b:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5630641226e40b1a3402a1dcbea03210ccb7a373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:06:55:a9:40:a7:fb:44:40:10:ff:17:c6:
9a:2b:8d:26:fc:08:aa:dc:85:b0:77:d9:3a:d4:47:
fd:be:4a:d9:ab:10:ea:d4:05:9d:6f:c7:b0:52:de:
f6:1b:b1:00:c7:39:32:30:e7:28:0a:26:77:ca:46:
f8:f0:7f:86:12:49:22:5c:7f:11:ca:c3:15:d2:36:
3b:fd:7e:29:ed:52:13:cf:16:3e:cd:88:c9:91:61:
03:56:70:88:7c:b6:20:9e:ee:81:06:fb:6d:4e:bb:
7b:e8:d2:31:5c:56:36:17:d7:c7:56:9b:29:ea:81:
8e:6b:5e:a1:68:c8:ec:06:95:91:a2:a3:36:a9:8a:
4e:e0:06:cf:67:7c:70:bc:d1:bd:f3:35:f0:76:40:
8e:2b:da:bf:7b:7c:ef:60:04:c1:96:71:e2:13:96:
d6:18:8a:f3:b2:1d:32:c6:be:e8:68:f5:2b:91:87:
ab:1f:a8:5d:9c:18:6d:c9:32:2e:96:ed:23:05:16:
d4:3f:11:a6:31:42:71:12:ae:76:cf:37:82:9c:bf:
42:a0:18:10:f9:2c:63:51:a6:3a:cd:17:bb:c0:4e:
50:e5:4f:e9:c8:6b:40:e7:41:ff:09:81:43:93:a7:
b7:16:91:18:d5:48:72:21:e2:7b:da:08:97:21:e0:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:64:12:26:E4:0B:1A:34:02:A1:DC:BE:A0:32:10:CC:B7:A3:73
X509v3 Authority Key Identifier:
keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/VjBkEibkCxo0AqHcvqAyEMy3o3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4280:1::/48
Signature Algorithm: sha256WithRSAEncryption
89:73:eb:a4:18:6b:64:b5:d0:3b:ff:ff:28:1c:3a:a1:8a:b3:
47:c0:19:15:72:9b:95:b7:67:8d:ed:f3:24:bd:f1:3f:20:e4:
6c:3a:0b:30:af:58:38:a6:e4:e5:0d:74:96:be:2c:b9:60:b5:
1f:45:84:bb:c5:34:34:01:fd:91:9d:c2:eb:d9:21:ad:85:f2:
82:a4:72:5b:76:79:20:fc:66:2f:27:82:52:f8:95:26:ad:73:
42:55:e0:22:37:f5:8c:b5:22:d8:cf:ff:bf:6f:22:34:5f:34:
f6:ea:8a:0e:07:58:04:4c:7e:7c:27:95:fd:77:79:fb:99:75:
0a:a7:d1:01:0c:2c:c6:ff:7a:12:c6:ba:3a:e9:4f:18:88:97:
ac:91:05:96:35:4e:00:b1:30:27:23:1c:f6:6a:5f:74:c4:38:
d2:98:1b:0e:88:ba:8a:df:27:06:0c:06:79:66:dd:e1:0d:02:
9a:c2:40:a8:e2:27:6b:89:b5:7f:3a:d2:3c:07:53:e8:d6:41:
54:92:0c:cf:51:f6:c0:da:1e:4e:f7:d6:c6:18:52:12:89:04:
f9:97:0b:7a:ea:1c:cb:be:37:98:50:d3:0a:8d:b5:55:b0:b9:
1c:c9:cf:16:0d:5b:e4:1c:fc:6a:37:7f:0e:6d:a2:49:31:14:
0f:28:26:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzDSUGL8Po48l0HC3yMC9o2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWJlZjczMDUyN2FhZTFlY2Y4ZmIzMDg1NjU5ZDZmZGZl
ZWQ3OTcwHhcNMjQwMTAxMDQzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjMwNjQxMjI2ZTQwYjFhMzQwMmExZGNiZWEwMzIxMGNjYjdhMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs0GValAp/tEQBD/F8aaK40m/Aiq
3IWwd9k61Ef9vkrZqxDq1AWdb8ewUt72G7EAxzkyMOcoCiZ3ykb48H+GEkkiXH8R
ysMV0jY7/X4p7VITzxY+zYjJkWEDVnCIfLYgnu6BBvttTrt76NIxXFY2F9fHVpsp
6oGOa16haMjsBpWRoqM2qYpO4AbPZ3xwvNG98zXwdkCOK9q/e3zvYATBlnHiE5bW
GIrzsh0yxr7oaPUrkYerH6hdnBhtyTIulu0jBRbUPxGmMUJxEq52zzeCnL9CoBgQ
+SxjUaY6zRe7wE5Q5U/pyGtA50H/CYFDk6e3FpEY1UhyIeJ72giXIeA+xwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFYwZBIm5AsaNAKh3L6gMhDMt6NzMB8GA1UdIwQY
MBaAFI0b73MFJ6rh7Pj7MIVlnW/f7teXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQt
NGFhYjJkNjhmYTVhLzEvVmpCa0VpYmtDeG8wQXFIY3ZxQXlFTXkzbzNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNzE2YWQtZWQwNC00ZGU0LWI5OTQtNGFhYjJkNjhmYTVh
LzEvalJ2dmN3VW5xdUhzLVBzd2hXV2RiOV91MTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRCgAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCJc+ukGGtktdA7//8oHDqhirNHwBkVcpuVt2eN
7fMkvfE/IORsOgswr1g4puTlDXSWviy5YLUfRYS7xTQ0Af2RncLr2SGthfKCpHJb
dnkg/GYvJ4JS+JUmrXNCVeAiN/WMtSLYz/+/byI0XzT26ooOB1gETH58J5X9d3n7
mXUKp9EBDCzG/3oSxro66U8YiJeskQWWNU4AsTAnIxz2al90xDjSmBsOiLqK3ycG
DAZ5Zt3hDQKawkCo4idribV/OtI8B1Po1kFUkgzPUfbA2h5O99bGGFISiQT5lwt6
6hzLvjeYUNMKjbVVsLkcyc8WDVvkHPxqN38ObaJJMRQPKCbg
-----END CERTIFICATE-----
Generated at Sun Jan 14 12:37:11 2024 by rpki-client on console-fra.rpki-client.org