Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-Oep1Da8u5Snz19sGc01-B3jyVA.roa
File: 1-Oep1Da8u5Snz19sGc01-B3jyVA.roa (raw, json)
Hash identifier: x61gMS7fWhXy1hGOMHjUDZ+kjdkRNWoK+wfe+q3trF0=
Subject key identifier: F8:E7:A9:D4:36:BC:BB:94:A7:CF:5F:6C:19:CD:35:F8:1D:E3:C9:50
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E14C2E782AB4B6BEB07D387C102522D12
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-Oep1Da8u5Snz19sGc01-B3jyVA.roa
Signing time: Wed 06 Mar 2024 17:15:01 +0000
ROA not before: Wed 06 Mar 2024 17:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 2a02:26f0:c700::/48 maxlen: 48
2a02:26f0:cb00::/48 maxlen: 48
2a02:26f0:d100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:c2:e7:82:ab:4b:6b:eb:07:d3:87:c1:02:52:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 6 17:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8e7a9d436bcbb94a7cf5f6c19cd35f81de3c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:3e:49:97:f4:1d:60:a8:79:15:b7:64:9a:
8e:e1:a6:07:8a:38:20:59:0a:59:2b:3e:17:80:58:
08:8b:b5:b5:42:42:4f:32:4a:69:6d:44:9b:27:a1:
86:23:bc:2e:01:63:ab:88:bb:a6:e4:13:dd:04:f1:
89:b6:ba:1a:43:1b:64:e6:23:1c:79:b5:80:ed:6e:
a1:e4:68:7c:6d:f4:51:d2:96:58:52:c1:d7:9e:2a:
83:27:2e:93:6f:25:18:fa:99:d2:3c:f6:f8:ae:92:
16:db:81:7e:e4:9a:e6:9a:22:7c:c7:04:73:6c:ac:
59:a8:6d:67:3e:3f:a7:9a:a9:bb:cc:90:bc:5b:5d:
e1:7b:9a:00:f9:2b:2a:aa:50:85:a4:02:a4:ee:2b:
d5:29:02:a8:97:57:05:1a:10:95:6f:8d:db:41:f5:
b5:f8:c8:a4:0a:aa:1a:73:e4:61:9c:28:07:73:da:
1d:e5:87:10:20:59:ef:ef:04:c3:63:de:62:c2:2a:
95:7f:46:09:58:0e:ef:28:78:f8:40:e2:a3:0f:75:
9d:7a:76:06:0d:ec:ba:00:59:f4:7e:89:ca:e7:2c:
ad:ed:58:b2:21:f4:98:56:27:66:91:27:1b:73:2c:
70:7e:72:a7:45:a3:74:e3:d2:65:ce:a6:1f:ed:de:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:A9:D4:36:BC:BB:94:A7:CF:5F:6C:19:CD:35:F8:1D:E3:C9:50
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1-Oep1Da8u5Snz19sGc01-B3jyVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:c700::/48
2a02:26f0:cb00::/48
2a02:26f0:d100::/48
Signature Algorithm: sha256WithRSAEncryption
54:7e:16:a2:d0:68:31:d9:ce:3b:bd:b5:6b:dc:4a:4a:66:c5:
b6:ce:b4:95:ec:23:e9:26:f2:4f:64:7e:78:37:f9:6c:66:d1:
32:64:86:4a:01:3d:9a:58:78:71:95:09:64:16:73:68:7d:7c:
42:dd:bc:ab:2a:1c:f4:fc:25:45:83:04:3e:fe:ba:c6:71:5b:
50:09:02:2e:42:d5:cc:de:03:70:4d:a1:d7:04:e6:76:fe:f2:
4d:4f:eb:f7:c3:81:56:c0:d6:b1:5a:f6:cd:79:6c:ce:f9:0c:
29:89:a6:1b:82:78:49:78:4d:5c:17:f3:33:d6:10:c0:1a:ae:
40:a4:fc:92:f3:d4:21:ab:cc:7c:a7:52:9e:a4:a0:0c:fc:8d:
4d:4c:12:c9:69:ba:30:6d:39:30:90:4d:57:52:da:5b:bf:da:
4f:4e:fd:99:18:c7:0c:0a:f4:08:ce:1a:8d:e8:aa:2b:4a:14:
d7:01:72:8d:e0:4c:0a:b6:cf:1d:90:eb:eb:26:ef:d5:de:ac:
36:ae:9c:66:a8:29:7d:e3:25:89:02:f0:39:e1:40:39:94:18:
ef:44:6b:b6:c0:aa:8e:fd:5a:62:8c:73:b9:f8:fe:00:50:71:
5a:d5:a8:39:f1:92:1c:e9:e3:13:cd:d3:98:78:83:b8:34:47:
52:45:ca:55
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAY4UwueCq0tr6wfTh8ECUi0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMzA2MTcxNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGU3YTlkNDM2YmNiYjk0YTdjZjVmNmMxOWNkMzVmODFkZTNjOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqg+SZf0HWCoeRW3ZJqO4aYHijgg
WQpZKz4XgFgIi7W1QkJPMkppbUSbJ6GGI7wuAWOriLum5BPdBPGJtroaQxtk5iMc
ebWA7W6h5Gh8bfRR0pZYUsHXniqDJy6TbyUY+pnSPPb4rpIW24F+5JrmmiJ8xwRz
bKxZqG1nPj+nmqm7zJC8W13he5oA+SsqqlCFpAKk7ivVKQKol1cFGhCVb43bQfW1
+MikCqoac+RhnCgHc9od5YcQIFnv7wTDY95iwiqVf0YJWA7vKHj4QOKjD3WdenYG
Dey6AFn0fonK5yyt7ViyIfSYVidmkScbcyxwfnKnRaN049JlzqYf7d7ytQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPjnqdQ2vLuUp89fbBnNNfgd48lQMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvMS1PZXAxRGE4dTVTbnoxOXNHYzAxLUIzanlWQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzAvMDQyMTg4LWRmYjYtNGFkNC05MWE0LTg4ZDFjYWM5ZTRm
MS8xL2ExX0x2cVNKTjZSQ3VyMnpNQ0V5eEx5YjFxby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACoCJvDH
AAMHACoCJvDLAAMHACoCJvDRADANBgkqhkiG9w0BAQsFAAOCAQEAVH4WotBoMdnO
O721a9xKSmbFts60lewj6SbyT2R+eDf5bGbRMmSGSgE9mlh4cZUJZBZzaH18Qt28
qyoc9PwlRYMEPv66xnFbUAkCLkLVzN4DcE2h1wTmdv7yTU/r98OBVsDWsVr2zXls
zvkMKYmmG4J4SXhNXBfzM9YQwBquQKT8kvPUIavMfKdSnqSgDPyNTUwSyWm6MG05
MJBNV1LaW7/aT079mRjHDAr0CM4ajeiqK0oU1wFyjeBMCrbPHZDr6ybv1d6sNq6c
ZqgpfeMliQLwOeFAOZQY70RrtsCqjv1aYoxzufj+AFBxWtWoOfGSHOnjE83TmHiD
uDRHUkXKVQ==
-----END CERTIFICATE-----
Generated at Wed Mar 27 15:17:37 2024 by rpki-client on console-fra.rpki-client.org