Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/K1qM21JFRswBl5DEna--LzIoAYg.roa
File: K1qM21JFRswBl5DEna--LzIoAYg.roa (raw, json)
Hash identifier: wDhxQWeAr2mdcQn5wenHR/ucV7i0wBpmzwbI6fxOvik=
Subject key identifier: 2B:5A:8C:DB:52:45:46:CC:01:97:90:C4:9D:AF:BE:2F:32:28:01:88
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 0185722B5A720A63C32F4A38F06D5138465C
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/K1qM21JFRswBl5DEna--LzIoAYg.roa
Signing time: Mon 02 Jan 2023 11:08:41 +0000
ROA not before: Mon 02 Jan 2023 11:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 2a0d:7f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:2b:5a:72:0a:63:c3:2f:4a:38:f0:6d:51:38:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jan 2 11:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b5a8cdb524546cc019790c49dafbe2f32280188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:5a:8d:4b:79:39:7f:50:49:96:1a:1e:fa:
9a:69:e8:b4:94:be:85:ce:4a:f7:e6:85:33:45:44:
25:b6:7d:0d:b2:ce:3f:6a:20:a2:c8:98:fa:47:ad:
af:08:e5:be:82:17:e4:58:9a:2a:1e:f0:c9:1b:fb:
17:44:cb:72:36:94:f4:3b:3b:7b:13:93:0f:ac:25:
e6:91:75:c8:a4:b9:87:30:24:f0:2f:71:f3:dc:82:
8e:e5:88:f7:ba:e0:05:c9:f9:2c:89:0b:1e:f7:78:
46:59:d4:95:3f:d0:bb:fe:1f:75:00:07:d7:d8:bf:
2c:8e:c1:cf:ff:97:1b:f7:19:d4:d4:62:87:1c:ff:
f6:91:49:ee:a3:06:9c:41:b5:82:d7:8f:77:eb:34:
1b:7a:09:a7:cf:a5:53:1c:dd:0e:62:33:6f:fe:1b:
04:02:26:0f:46:54:07:eb:67:11:a3:ea:0f:cf:a3:
e5:7b:92:45:40:1e:a8:a1:49:3a:99:79:a4:6d:3f:
1a:b4:59:4d:a2:c9:98:c9:8c:70:a8:00:2c:7c:55:
da:8d:0a:91:ac:fd:46:87:c0:05:77:ad:b9:38:df:
47:3b:ca:62:26:0d:b4:12:d8:b6:3d:d0:3e:23:a4:
1b:2c:8f:87:71:d1:85:43:39:56:44:cb:52:d5:17:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:8C:DB:52:45:46:CC:01:97:90:C4:9D:AF:BE:2F:32:28:01:88
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/K1qM21JFRswBl5DEna--LzIoAYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:9e:b0:5d:6c:1b:75:a6:8c:3a:43:73:25:cb:1b:8b:93:ee:
dc:cc:af:7a:c8:96:9f:90:37:25:32:8f:8c:8e:f8:fc:dc:0b:
75:df:5d:b8:ff:39:75:c4:45:93:bc:25:1e:2b:85:23:40:d9:
d1:66:a3:85:ba:1e:d9:eb:7d:90:12:3b:d6:ac:0f:29:cf:0a:
67:ed:70:40:4c:31:be:2f:6d:40:19:a7:97:20:88:19:a6:b1:
5b:94:e7:fe:c4:27:8b:a6:7f:5f:6f:79:d9:88:1c:f9:78:93:
23:c5:08:26:d3:75:6d:05:ae:4b:28:a7:8f:2c:82:99:ff:0b:
9a:2e:c1:3f:e5:b3:fa:d4:4a:4a:79:b5:ff:48:63:55:b4:5b:
24:a2:be:89:ee:96:03:ce:1b:a4:99:be:6b:a1:8a:90:5e:3d:
19:c8:ec:d8:73:a0:fe:9c:41:e7:39:23:e5:57:59:12:c1:ef:
9a:ff:33:71:4c:05:0f:24:42:24:f3:f9:97:8e:29:8b:44:0f:
c1:b6:5f:a6:31:07:d8:22:7c:df:b6:16:61:92:b9:64:82:b3:
27:01:ac:8c:1c:92:fc:83:6d:fd:53:4b:02:f2:cf:d0:ea:4f:
7d:e7:bc:4a:8b:29:c4:07:1f:67:61:c6:f6:ef:6a:c6:c2:e3:
dd:9f:63:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVyK1pyCmPDL0o48G1ROEZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmExZDI0ZTcyYzQzOWVjN2E1Y2JkYzM5MTM1N2RkODlj
Yjg2YWIwHhcNMjMwMTAyMTEwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjVhOGNkYjUyNDU0NmNjMDE5NzkwYzQ5ZGFmYmUyZjMyMjgwMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkstajUt5OX9QSZYaHvqaaei0lL6F
zkr35oUzRUQltn0Nss4/aiCiyJj6R62vCOW+ghfkWJoqHvDJG/sXRMtyNpT0Ozt7
E5MPrCXmkXXIpLmHMCTwL3Hz3IKO5Yj3uuAFyfksiQse93hGWdSVP9C7/h91AAfX
2L8sjsHP/5cb9xnU1GKHHP/2kUnuowacQbWC14936zQbegmnz6VTHN0OYjNv/hsE
AiYPRlQH62cRo+oPz6Ple5JFQB6ooUk6mXmkbT8atFlNosmYyYxwqAAsfFXajQqR
rP1Gh8AFd625ON9HO8piJg20Eti2PdA+I6QbLI+HcdGFQzlWRMtS1RdknwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCtajNtSRUbMAZeQxJ2vvi8yKAGIMB8GA1UdIwQY
MBaAFGu6HSTnLEOex6XL3DkTV92Jy4arMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEt
Y2VmOTQ0ODEyNGIwLzEvSzFxTTIxSkZSc3dCbDVERW5hLS1MeklvQVlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hOTRhNGMtYTU1Mi00NmY2LThhODEtY2VmOTQ0ODEyNGIw
LzEvYTdvZEpPY3NRNTdIcGN2Y09STlgzWW5MaHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1/ADAN
BgkqhkiG9w0BAQsFAAOCAQEAXJ6wXWwbdaaMOkNzJcsbi5Pu3MyvesiWn5A3JTKP
jI74/NwLdd9duP85dcRFk7wlHiuFI0DZ0Wajhboe2et9kBI71qwPKc8KZ+1wQEwx
vi9tQBmnlyCIGaaxW5Tn/sQni6Z/X2952Ygc+XiTI8UIJtN1bQWuSyinjyyCmf8L
mi7BP+Wz+tRKSnm1/0hjVbRbJKK+ie6WA84bpJm+a6GKkF49Gcjs2HOg/pxB5zkj
5VdZEsHvmv8zcUwFDyRCJPP5l44pi0QPwbZfpjEH2CJ837YWYZK5ZIKzJwGsjByS
/INt/VNLAvLP0OpPfee8SospxAcfZ2HG9u9qxsLj3Z9jxQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:27 2024 by rpki-client on console-fra.rpki-client.org