Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ON4WYLafFW3ZPfe2QB138d0mR1c.roa
File: ON4WYLafFW3ZPfe2QB138d0mR1c.roa (raw, json)
Hash identifier: OIf6dYXU1YshF7bpA8RhPxgBZ6WhgAftJqQWvnVFvy8=
Subject key identifier: 38:DE:16:60:B6:9F:15:6D:D9:3D:F7:B6:40:1D:77:F1:DD:26:47:57
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ECB83BBFDCB03FC5F3568772DA52D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ON4WYLafFW3ZPfe2QB138d0mR1c.roa
Signing time: Sun 01 Jan 2023 07:14:44 +0000
ROA not before: Sun 01 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39526
IP address blocks: 2a0d:2146:8580::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Nov 2023 16:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:cb:83:bb:fd:cb:03:fc:5f:35:68:77:2d:a5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38de1660b69f156dd93df7b6401d77f1dd264757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:11:c3:42:7e:22:a2:84:86:3a:be:ee:38:
ab:0f:64:db:26:a9:78:02:99:2b:19:1f:0f:bd:8a:
6f:10:53:10:5f:47:5a:3c:56:cc:f8:8a:32:2a:d4:
4f:09:ff:dd:17:4b:4e:0f:6f:43:18:5d:64:17:fe:
eb:7f:f3:61:c1:08:c7:b8:85:04:7b:de:1a:a0:48:
f4:c5:f3:d1:16:04:38:6c:05:95:6d:43:15:85:59:
3c:77:45:9b:1e:d6:e7:4b:d9:c1:62:d4:71:36:bb:
8e:00:ed:10:2b:fe:88:84:2e:35:63:87:95:dc:82:
f3:b4:a0:31:76:d8:11:33:17:b7:47:8d:11:9f:61:
d7:0d:ec:ff:e1:0a:d6:2c:53:e1:cb:c6:3a:0e:a4:
99:a5:8a:47:87:0f:33:96:9f:74:07:94:73:58:45:
cc:b7:1e:3b:1e:41:54:b4:92:d1:f3:f0:f8:cf:f6:
48:22:e0:7d:49:3a:dc:fe:eb:c9:e4:c7:64:70:d5:
bc:a3:70:1d:be:cc:87:48:4e:81:08:a6:4c:0d:8e:
89:07:8e:fc:fd:6a:a8:17:32:a9:a5:fa:34:58:fe:
d2:88:73:c0:e1:20:cf:34:38:ad:9e:d3:94:bf:64:
d0:b9:9f:cd:25:51:e7:47:a0:39:35:7b:33:7c:16:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:16:60:B6:9F:15:6D:D9:3D:F7:B6:40:1D:77:F1:DD:26:47:57
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ON4WYLafFW3ZPfe2QB138d0mR1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8580::/44
Signature Algorithm: sha256WithRSAEncryption
0b:72:0d:8c:8f:8a:82:00:73:83:1b:64:a2:3c:a0:a2:16:e9:
d8:f9:cb:61:5a:fa:7f:b1:f0:cd:9a:4d:8e:94:4d:5c:50:69:
91:0b:3a:07:1b:f0:90:f8:87:88:51:e9:7f:07:55:7c:1c:71:
37:47:6a:69:0c:a5:55:a6:0f:39:ff:c0:f0:e6:87:c6:ca:2f:
81:75:e3:01:fd:78:39:07:85:ad:59:2b:f5:61:8f:9b:f2:13:
30:c6:16:3c:72:89:68:bd:d8:a7:6b:c1:55:94:35:4a:39:5d:
f3:6f:95:76:cf:c3:86:95:74:46:16:f1:a1:15:fa:0b:ca:8b:
e2:4b:bc:dd:25:3f:03:44:90:75:ee:1b:05:3b:51:e3:3b:e2:
05:0e:8d:fa:74:eb:6a:50:0d:72:19:40:69:42:8d:3e:04:04:
d6:30:06:b9:ad:fe:8e:2d:d2:b2:66:29:1e:01:91:ac:93:fb:
90:2b:d2:cc:4d:b1:fb:f4:75:1a:60:e9:fd:85:d8:62:c3:47:
a4:ea:04:ca:d6:99:69:a8:f5:5d:eb:18:2f:11:c7:83:d0:36:
f7:0c:96:ac:a0:2d:d5:45:f0:3d:57:86:72:ad:74:4b:b0:9b:
39:9a:af:ab:50:a1:ab:f2:b3:c1:87:13:38:c0:c8:91:fb:bc:
31:ef:da:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsLsuDu/3LA/xfNWh3LaUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMTAxMDcxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGRlMTY2MGI2OWYxNTZkZDkzZGY3YjY0MDFkNzdmMWRkMjY0NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8QRw0J+IqKEhjq+7jirD2TbJql4
ApkrGR8PvYpvEFMQX0daPFbM+IoyKtRPCf/dF0tOD29DGF1kF/7rf/NhwQjHuIUE
e94aoEj0xfPRFgQ4bAWVbUMVhVk8d0WbHtbnS9nBYtRxNruOAO0QK/6IhC41Y4eV
3ILztKAxdtgRMxe3R40Rn2HXDez/4QrWLFPhy8Y6DqSZpYpHhw8zlp90B5RzWEXM
tx47HkFUtJLR8/D4z/ZIIuB9STrc/uvJ5MdkcNW8o3AdvsyHSE6BCKZMDY6JB478
/WqoFzKppfo0WP7SiHPA4SDPNDitntOUv2TQuZ/NJVHnR6A5NXszfBaLQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDjeFmC2nxVt2T33tkAdd/HdJkdXMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvT040V1lMYWZGVzNaUGZlMlFCMTM4ZDBtUjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0hRoWA
MA0GCSqGSIb3DQEBCwUAA4IBAQALcg2Mj4qCAHODG2SiPKCiFunY+cthWvp/sfDN
mk2OlE1cUGmRCzoHG/CQ+IeIUel/B1V8HHE3R2ppDKVVpg85/8Dw5ofGyi+BdeMB
/Xg5B4WtWSv1YY+b8hMwxhY8colovdina8FVlDVKOV3zb5V2z8OGlXRGFvGhFfoL
yoviS7zdJT8DRJB17hsFO1HjO+IFDo36dOtqUA1yGUBpQo0+BATWMAa5rf6OLdKy
ZikeAZGsk/uQK9LMTbH79HUaYOn9hdhiw0ek6gTK1plpqPVd6xgvEceD0Db3DJas
oC3VRfA9V4ZyrXRLsJs5mq+rUKGr8rPBhxM4wMiR+7wx79px
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org