Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa
File: OPAbhTJkztSbQ4TBKQO5stRXVto.roa (raw, json)
Hash identifier: GM+Q18PbLdzaojVlco9BsaSuHsdc5SV8BORJLLUFvR8=
Subject key identifier: 38:F0:1B:85:32:64:CE:D4:9B:43:84:C1:29:03:B9:B2:D4:57:56:DA
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 01867D7DBB0A73A04020EDC67FD853FB28D3
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa
Signing time: Thu 23 Feb 2023 08:57:17 +0000
ROA not before: Thu 23 Feb 2023 08:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:934::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Mar 2023 10:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:7d:bb:0a:73:a0:40:20:ed:c6:7f:d8:53:fb:28:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Feb 23 08:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f01b853264ced49b4384c12903b9b2d45756da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:7c:74:e8:3c:0a:29:80:31:a1:15:04:c4:
24:e0:1a:70:aa:df:d5:cf:c1:3e:ca:4f:6a:9d:1a:
3e:e9:c3:01:31:20:13:76:5a:3a:89:1f:b6:40:1a:
b4:d3:b7:ec:cc:d2:b1:93:da:ab:6e:83:05:2f:22:
28:9c:49:94:79:02:e7:4f:ca:3a:f8:83:9d:32:c2:
a9:dd:56:ec:c4:49:1d:dc:0a:a3:3f:bd:59:c0:8c:
2e:18:61:36:32:64:ac:76:36:eb:50:7d:c1:4b:dd:
2c:3a:ba:26:b7:9f:7f:bc:b5:9f:75:95:f9:4b:e2:
49:e4:f1:d5:fc:c2:8f:68:eb:d8:42:1d:f3:48:46:
5a:93:c3:73:4a:a1:87:80:eb:9c:b0:20:dc:47:5b:
de:10:65:cd:94:ed:ba:2f:e0:3f:c5:9e:24:32:9b:
81:fd:ed:c4:da:ff:b7:41:c6:46:4b:2e:13:7b:5e:
81:78:3d:55:39:8c:98:9c:82:f2:59:a4:6f:9b:5b:
e5:09:3a:15:67:e9:83:0a:e3:1d:d2:4f:ac:b1:35:
2b:4f:fe:1e:e1:90:04:22:59:e7:ba:21:75:34:19:
d8:68:9f:91:07:a4:15:fb:5f:fa:b9:fd:5e:05:4c:
a6:7f:54:98:01:17:6a:ee:b3:95:00:80:15:28:8d:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:1B:85:32:64:CE:D4:9B:43:84:C1:29:03:B9:B2:D4:57:56:DA
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OPAbhTJkztSbQ4TBKQO5stRXVto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:934::/48
Signature Algorithm: sha256WithRSAEncryption
ba:49:5a:83:71:fd:1d:17:d3:1c:cc:55:5c:0f:f5:dc:e2:ea:
e1:bd:11:c3:18:96:1d:12:95:e6:ca:f5:e5:77:e1:66:47:a7:
28:44:96:26:2b:c2:e4:c8:5e:cd:2c:d6:4d:09:2f:b0:4e:81:
99:b3:20:45:0d:39:bd:52:0c:f2:59:f5:96:fb:a3:13:dd:96:
dd:a8:b1:06:aa:e8:f0:39:a8:0a:8f:e4:4b:bc:d7:e5:cf:8a:
98:9f:5f:3c:f5:c9:a0:3d:60:d1:56:0b:10:e0:6a:db:a5:fa:
48:22:f8:80:52:0d:cd:93:f3:a7:c7:5b:7e:fd:8e:fd:1e:68:
c0:b7:18:bd:cf:25:42:37:ca:61:ed:31:43:e2:49:04:06:97:
a3:c3:d8:cc:e1:fb:38:d6:a2:14:53:64:c3:fa:5c:fe:a2:07:
a2:56:15:09:23:4f:fe:fc:1a:bb:82:d2:c8:c6:09:b5:34:25:
e9:c6:ed:e3:86:42:76:ce:36:53:c3:62:1a:31:8d:1c:14:08:
83:59:a0:ec:e0:9c:f3:c0:a4:c9:3e:60:76:da:86:f4:ab:5e:
0c:0a:13:07:73:e7:f8:46:76:da:ff:21:83:0c:91:7f:fd:28:
e4:92:47:cd:29:8a:70:e8:f6:2e:cb:1a:ab:3b:75:d9:e4:83:
19:39:dd:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZ9fbsKc6BAIO3Gf9hT+yjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2Y3NGYyYjZlNGUyOGU5ZmY2Y2EzY2NhM2E1ZDc4Y2Ey
Y2FkNmEwHhcNMjMwMjIzMDg1NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGYwMWI4NTMyNjRjZWQ0OWI0Mzg0YzEyOTAzYjliMmQ0NTc1NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA58dOg8CimAMaEVBMQk4Bpwqt/V
z8E+yk9qnRo+6cMBMSATdlo6iR+2QBq007fszNKxk9qrboMFLyIonEmUeQLnT8o6
+IOdMsKp3VbsxEkd3AqjP71ZwIwuGGE2MmSsdjbrUH3BS90sOromt59/vLWfdZX5
S+JJ5PHV/MKPaOvYQh3zSEZak8NzSqGHgOucsCDcR1veEGXNlO26L+A/xZ4kMpuB
/e3E2v+3QcZGSy4Te16BeD1VOYyYnILyWaRvm1vlCToVZ+mDCuMd0k+ssTUrT/4e
4ZAEIlnnuiF1NBnYaJ+RB6QV+1/6uf1eBUymf1SYARdq7rOVAIAVKI3YZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDjwG4UyZM7Um0OEwSkDubLUV1baMB8GA1UdIwQY
MBaAFL4/dPK25OKOn/bKPMo6XXjKLK1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzIt
ZDA5OTYxN2JlYjU2LzEvT1BBYmhUSmt6dFNiUTRUQktRTzVzdFJYVnRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzItZDA5OTYxN2JlYjU2
LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAk0
MA0GCSqGSIb3DQEBCwUAA4IBAQC6SVqDcf0dF9MczFVcD/Xc4urhvRHDGJYdEpXm
yvXld+FmR6coRJYmK8LkyF7NLNZNCS+wToGZsyBFDTm9UgzyWfWW+6MT3ZbdqLEG
qujwOagKj+RLvNflz4qYn1889cmgPWDRVgsQ4GrbpfpIIviAUg3Nk/Onx1t+/Y79
HmjAtxi9zyVCN8ph7TFD4kkEBpejw9jM4fs41qIUU2TD+lz+ogeiVhUJI0/+/Bq7
gtLIxgm1NCXpxu3jhkJ2zjZTw2IaMY0cFAiDWaDs4JzzwKTJPmB22ob0q14MChMH
c+f4Rnba/yGDDJF//SjkkkfNKYpw6PYuyxqrO3XZ5IMZOd13
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:01 2024 by rpki-client on console-ams.rpki-client.org