Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OpdAwncn04sFa3j7-6hhP2xJK-M.roa
File: OpdAwncn04sFa3j7-6hhP2xJK-M.roa (raw, json)
Hash identifier: 3tpG++MpTbsD+L9s5P5Qv/MzNwhXj3eQFJEu5QFjwhQ=
Subject key identifier: 3A:97:40:C2:77:27:D3:8B:05:6B:78:FB:FB:A8:61:3F:6C:49:2B:E3
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018EBEAA41645D77136357C0ECF55A20A610
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OpdAwncn04sFa3j7-6hhP2xJK-M.roa
Signing time: Mon 08 Apr 2024 17:03:32 +0000
ROA not before: Mon 08 Apr 2024 17:03:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a05:1e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:aa:41:64:5d:77:13:63:57:c0:ec:f5:5a:20:a6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Apr 8 17:03:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a9740c27727d38b056b78fbfba8613f6c492be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:36:a6:85:db:ea:4b:b3:9e:ab:23:0f:0b:
07:78:d7:24:be:13:9f:85:e1:65:91:52:8f:29:73:
6b:07:7a:74:a5:e6:87:30:fb:68:a0:4c:d2:b8:d6:
ca:fc:9d:b8:2d:f1:fd:9c:9e:e1:fb:a9:5f:40:77:
58:12:2b:e1:e4:6d:62:c1:94:79:99:b7:94:14:89:
bc:d5:6b:81:bd:34:bc:73:7d:ff:9e:cd:28:01:61:
3e:e4:77:34:02:79:67:f9:13:8a:f3:22:3d:74:d4:
f8:95:7a:16:26:f3:4e:f5:cc:10:63:73:8b:fe:68:
71:3a:02:ab:af:8c:a2:09:58:ff:b4:c1:d0:94:c8:
73:4a:7f:0b:68:7e:98:a8:64:5c:d8:81:c2:65:92:
bc:3c:68:cf:4b:e8:9f:b4:75:69:b7:36:bf:46:71:
db:03:54:19:30:cd:c9:dc:ab:6d:01:13:4b:b2:50:
0d:b5:e1:30:e8:d5:48:34:a9:96:9f:b0:ac:1d:84:
30:ef:57:c7:1b:6a:31:db:87:15:36:a3:1b:14:4d:
f1:8e:29:db:25:a6:70:9a:42:b9:09:e3:e0:0d:bb:
5b:5a:50:1c:37:bf:2e:b2:70:dc:2f:da:56:2a:74:
a2:69:6b:2a:e4:0e:78:58:7e:51:6b:6d:ad:fb:70:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:40:C2:77:27:D3:8B:05:6B:78:FB:FB:A8:61:3F:6C:49:2B:E3
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/OpdAwncn04sFa3j7-6hhP2xJK-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
b2:0e:4d:f8:55:5b:8b:e5:07:f8:1b:c0:aa:20:81:7f:a5:35:
85:36:48:3d:58:9f:06:41:75:ff:62:4f:1e:2f:bf:f7:59:02:
d4:b0:d2:80:2a:58:a4:8d:83:25:77:19:07:ed:32:bf:17:e0:
6a:cd:a0:34:c4:97:b8:eb:9a:36:e5:3d:08:24:d0:87:d2:03:
bd:88:ba:c5:8c:8f:10:3d:99:ee:28:89:53:e0:60:69:c6:c9:
e7:9b:88:c2:81:f7:c8:ec:fe:38:4c:86:cb:a2:c1:a5:3c:f8:
ef:be:83:ea:5d:5c:f7:9f:b3:82:c0:a3:08:f4:41:27:62:7a:
e1:4d:a0:74:22:8b:47:bb:ab:6f:06:ae:c0:6c:74:e5:7d:70:
ab:c9:08:89:f3:35:29:2a:88:e7:22:54:ed:3f:80:8c:ca:0d:
c0:43:d6:47:a8:6b:ce:c5:2e:af:06:0e:42:34:98:74:8f:00:
58:d8:ad:e3:ff:ec:7b:8b:4c:f8:0c:1b:e1:71:7c:d4:6f:8f:
e7:da:4e:68:97:53:fb:51:aa:79:fe:c4:07:4f:2d:71:18:f7:
ac:31:8d:b7:70:a1:1d:69:df:54:f6:6f:05:46:21:f3:c3:10:
de:0d:a1:dc:00:12:74:35:e9:e9:21:5e:20:8b:0a:5c:d3:4d:
76:c9:87:3c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY6+qkFkXXcTY1fA7PVaIKYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjQwNDA4MTcwMzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTk3NDBjMjc3MjdkMzhiMDU2Yjc4ZmJmYmE4NjEzZjZjNDkyYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnk2poXb6kuznqsjDwsHeNckvhOf
heFlkVKPKXNrB3p0peaHMPtooEzSuNbK/J24LfH9nJ7h+6lfQHdYEivh5G1iwZR5
mbeUFIm81WuBvTS8c33/ns0oAWE+5Hc0Anln+ROK8yI9dNT4lXoWJvNO9cwQY3OL
/mhxOgKrr4yiCVj/tMHQlMhzSn8LaH6YqGRc2IHCZZK8PGjPS+iftHVptza/RnHb
A1QZMM3J3KttARNLslANteEw6NVINKmWn7CsHYQw71fHG2ox24cVNqMbFE3xjinb
JaZwmkK5CePgDbtbWlAcN78usnDcL9pWKnSiaWsq5A54WH5Ra22t+3A9CwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDqXQMJ3J9OLBWt4+/uoYT9sSSvjMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvT3BkQXduY24wNHNGYTNqNy02aGhQMnhKSy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgUeQDAN
BgkqhkiG9w0BAQsFAAOCAQEAsg5N+FVbi+UH+BvAqiCBf6U1hTZIPVifBkF1/2JP
Hi+/91kC1LDSgCpYpI2DJXcZB+0yvxfgas2gNMSXuOuaNuU9CCTQh9IDvYi6xYyP
ED2Z7iiJU+BgacbJ55uIwoH3yOz+OEyGy6LBpTz4776D6l1c95+zgsCjCPRBJ2J6
4U2gdCKLR7urbwauwGx05X1wq8kIifM1KSqI5yJU7T+AjMoNwEPWR6hrzsUurwYO
QjSYdI8AWNit4//se4tM+Awb4XF81G+P59pOaJdT+1Gqef7EB08tcRj3rDGNt3Ch
HWnfVPZvBUYh88MQ3g2h3AASdDXp6SFeIIsKXNNNdsmHPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org