Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/yo8pD6FHNmi3TB1jsqlsf_PRdxI.roa
File: yo8pD6FHNmi3TB1jsqlsf_PRdxI.roa (raw, json)
Hash identifier: m3XV2y2IV94X1oNVUkfP89wDq7WBnAeCZpkHSBlpLxk=
Subject key identifier: CA:8F:29:0F:A1:47:36:68:B7:4C:1D:63:B2:A9:6C:7F:F3:D1:77:12
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 01900BDC2278E024F268A409AAA4BA67943D
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/yo8pD6FHNmi3TB1jsqlsf_PRdxI.roa
Signing time: Wed 12 Jun 2024 09:51:34 +0000
ROA not before: Wed 12 Jun 2024 09:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214718
IP address blocks: 2a14:6440::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:dc:22:78:e0:24:f2:68:a4:09:aa:a4:ba:67:94:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jun 12 09:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca8f290fa1473668b74c1d63b2a96c7ff3d17712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:84:84:b4:08:73:71:76:bd:9d:d2:0f:28:
ae:e5:98:ba:cb:ee:fa:f9:d4:c0:a6:6a:6a:64:c4:
9a:f5:f4:6d:7c:0f:9a:cb:bf:17:51:55:be:bf:f1:
0b:e1:48:3b:e1:ee:6c:9f:92:07:26:6e:2a:e5:6a:
63:fd:2a:d0:65:89:13:8e:87:ad:bc:f0:85:a3:d7:
0b:04:26:0c:c2:28:2e:b3:ce:fb:c1:ba:30:62:70:
6d:e8:88:91:1c:4f:35:b4:77:f6:ba:3b:a0:1b:8b:
19:88:cc:98:b2:1c:1c:12:e3:b9:9b:e1:14:91:82:
69:85:59:9a:76:fc:eb:64:f4:b8:99:e4:e5:bb:dd:
b1:56:31:b8:04:17:e2:a5:1b:86:54:aa:a8:97:5a:
a5:7b:a5:bd:00:5c:aa:42:08:17:04:5b:5a:23:23:
6c:c7:4f:4c:8c:a5:91:1a:0f:db:0b:39:5c:5f:94:
cb:1c:8e:ca:e1:f5:6c:85:ac:23:9b:40:85:2a:7c:
a9:21:4e:3f:d9:70:6b:f0:ec:17:dc:e0:c0:28:74:
19:57:42:31:26:62:be:12:07:fa:f8:c4:29:0a:da:
43:28:08:33:d8:9e:6c:fe:7c:c9:c9:fc:67:7e:01:
79:37:44:3a:76:7a:be:25:5e:62:a4:c5:cc:17:b2:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:29:0F:A1:47:36:68:B7:4C:1D:63:B2:A9:6C:7F:F3:D1:77:12
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/yo8pD6FHNmi3TB1jsqlsf_PRdxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6440::/32
Signature Algorithm: sha256WithRSAEncryption
6e:a4:95:6f:5f:e6:99:a4:51:f4:52:39:5a:eb:34:88:f5:61:
8e:ad:e3:fa:9a:20:19:3d:c2:60:c7:92:7d:c0:dd:e0:92:5a:
a0:85:cd:c8:c3:2b:ef:32:8d:22:1f:ac:46:a8:09:e0:12:e2:
a2:68:8f:89:53:ee:7b:12:26:e2:a6:e6:ff:7a:b8:ed:79:8a:
c8:99:61:30:ce:f3:f9:90:c5:88:63:66:a5:e8:47:b5:32:e4:
17:05:c7:0e:da:4b:e4:12:d2:8c:4d:67:21:f1:c9:e2:12:ec:
2c:b9:f0:a2:c0:51:1a:fd:15:bf:68:5e:f0:7b:0a:25:50:7f:
99:76:8b:1a:7a:06:59:cb:e0:f2:55:90:4f:48:9e:c0:1a:43:
1a:89:3b:4d:5c:6e:fd:09:c4:ba:c8:1a:93:81:ef:0a:be:fc:
c2:7d:ee:11:a5:19:eb:4c:55:24:b0:f5:ac:d3:51:ac:56:50:
ff:97:2a:46:65:ff:5b:40:40:c0:db:a4:0b:43:7e:c7:be:5c:
19:91:d8:31:4e:46:36:1f:b9:c3:51:89:8e:2f:4e:9b:74:73:
ec:1e:a9:a6:87:04:b2:30:1b:91:56:54:0d:eb:5b:56:42:6b:
f1:d3:1c:2a:35:b3:bd:02:50:ee:2e:1c:f9:39:2b:0b:1a:02:
31:76:24:ec
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZAL3CJ44CTyaKQJqqS6Z5Q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm
ZDA3Y2IwHhcNMjQwNjEyMDk1MTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYThmMjkwZmExNDczNjY4Yjc0YzFkNjNiMmE5NmM3ZmYzZDE3NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0OEhLQIc3F2vZ3SDyiu5Zi6y+76
+dTApmpqZMSa9fRtfA+ay78XUVW+v/EL4Ug74e5sn5IHJm4q5Wpj/SrQZYkTjoet
vPCFo9cLBCYMwigus877wbowYnBt6IiRHE81tHf2ujugG4sZiMyYshwcEuO5m+EU
kYJphVmadvzrZPS4meTlu92xVjG4BBfipRuGVKqol1qle6W9AFyqQggXBFtaIyNs
x09MjKWRGg/bCzlcX5TLHI7K4fVshawjm0CFKnypIU4/2XBr8OwX3ODAKHQZV0Ix
JmK+Egf6+MQpCtpDKAgz2J5s/nzJyfxnfgF5N0Q6dnq+JV5ipMXMF7K/IwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMqPKQ+hRzZot0wdY7KpbH/z0XcSMB8GA1UdIwQY
MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt
ZTZlOTI4Y2U1MzRmLzEveW84cEQ2RkhObWkzVEIxanNxbHNmX1BSZHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm
LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhRkQDAN
BgkqhkiG9w0BAQsFAAOCAQEAbqSVb1/mmaRR9FI5Wus0iPVhjq3j+pogGT3CYMeS
fcDd4JJaoIXNyMMr7zKNIh+sRqgJ4BLiomiPiVPuexIm4qbm/3q47XmKyJlhMM7z
+ZDFiGNmpehHtTLkFwXHDtpL5BLSjE1nIfHJ4hLsLLnwosBRGv0Vv2he8HsKJVB/
mXaLGnoGWcvg8lWQT0iewBpDGok7TVxu/QnEusgak4HvCr78wn3uEaUZ60xVJLD1
rNNRrFZQ/5cqRmX/W0BAwNukC0N+x75cGZHYMU5GNh+5w1GJji9Om3Rz7B6ppocE
sjAbkVZUDetbVkJr8dMcKjWzvQJQ7i4c+TkrCxoCMXYk7A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:26:14 2025 by rpki-client