Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/V0x0Y639lMtzBtUBIg_oW6PW2-o.roa
File: V0x0Y639lMtzBtUBIg_oW6PW2-o.roa (raw, json)
Hash identifier: 1wXfJCDoUtx2sK4SqtaB47YCCSpHaTtH9bXOXQxMqvc=
Subject key identifier: 57:4C:74:63:AD:FD:94:CB:73:06:D5:01:22:0F:E8:5B:A3:D6:DB:EA
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE1E2DA83F31AF7C380E67AC408F2
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/V0x0Y639lMtzBtUBIg_oW6PW2-o.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135671
IP address blocks: 2a0e:aa06:450::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e1:e2:da:83:f3:1a:f7:c3:80:e6:7a:c4:08:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574c7463adfd94cb7306d501220fe85ba3d6dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:fe:1a:07:27:73:74:5e:40:f2:65:e6:33:
0c:e3:e5:77:c4:b9:c7:39:a0:e6:5d:f4:30:52:28:
b0:8c:8f:b4:9f:b3:b5:ac:37:bb:14:2e:21:5e:2b:
ac:72:d4:d8:e1:3a:59:d4:6f:89:31:34:55:ff:42:
52:a1:58:90:ac:2f:c1:78:26:2e:a9:f8:8d:65:b2:
2d:0e:9d:78:9d:6a:72:36:8a:f1:4c:b5:68:1f:f7:
6b:a0:c7:30:53:ca:1f:9b:d3:07:4f:50:1f:03:7c:
86:fd:cc:4d:93:3a:8e:7d:d8:da:c4:26:e7:05:df:
56:03:d5:e8:e7:a2:3c:ac:f5:0f:63:24:19:85:a0:
be:18:e5:76:1a:fb:9a:5a:08:f7:53:69:a0:ca:d0:
16:48:bd:c7:ff:df:b0:39:df:2c:2a:ef:35:ca:97:
cf:2b:5a:4d:79:02:3a:78:68:dd:f9:f6:9b:6d:9b:
e3:8c:38:76:56:92:af:e8:e4:31:54:d3:ae:42:26:
95:66:04:70:d7:3d:69:41:83:51:df:91:5d:51:63:
f7:4f:d9:b8:f9:92:6c:2a:6a:35:dc:a5:b9:04:b2:
d2:21:37:eb:e7:15:d0:f7:f0:40:4f:a3:3a:02:2c:
e4:19:8a:9f:60:f3:b0:fc:99:4c:3a:33:f0:9d:c9:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:74:63:AD:FD:94:CB:73:06:D5:01:22:0F:E8:5B:A3:D6:DB:EA
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/V0x0Y639lMtzBtUBIg_oW6PW2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:450::/44
Signature Algorithm: sha256WithRSAEncryption
46:ff:f5:45:2c:93:40:1f:a9:0c:e8:22:39:b5:cf:62:53:6b:
ee:1d:51:58:6b:85:9d:ab:9f:f8:df:49:29:93:ac:ca:4c:90:
a7:c3:89:e4:90:5e:16:13:72:6a:c4:b6:14:69:58:10:17:07:
91:81:41:e5:a2:30:d3:35:55:2c:27:6e:c8:1d:15:e7:db:23:
e8:8f:e9:55:88:a8:66:fc:17:3d:7d:96:53:25:dc:ab:82:50:
75:e3:ec:49:e3:bc:26:de:26:ad:47:64:2f:2a:53:51:dd:f8:
28:29:63:a9:11:38:6c:14:12:60:8f:7c:5c:50:1f:0c:fe:13:
87:9c:92:ea:a8:df:42:5b:ba:ca:48:1d:20:33:a2:b3:e6:46:
60:90:8b:57:0b:29:17:cd:6d:32:c5:7c:df:53:16:e6:87:f5:
e4:36:bf:d0:50:4a:87:46:ee:c7:56:e6:49:bb:fb:d3:ac:85:
0f:fe:15:7a:1c:cf:4b:d2:65:23:98:2b:d7:74:8e:2e:da:b5:
60:70:0f:f1:43:07:9e:91:12:01:13:73:c3:b8:eb:ec:41:7f:
c1:1b:db:05:76:aa:da:8d:2a:24:54:22:97:01:5b:f3:de:9c:
af:cd:fc:12:c6:b8:42:f6:60:df:21:31:55:68:cd:f5:2a:8e:
32:76:4a:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL+Hi2oPzGvfDgOZ6xAjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzRjNzQ2M2FkZmQ5NGNiNzMwNmQ1MDEyMjBmZTg1YmEzZDZkYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQr+Ggcnc3ReQPJl5jMM4+V3xLnH
OaDmXfQwUiiwjI+0n7O1rDe7FC4hXiusctTY4TpZ1G+JMTRV/0JSoViQrC/BeCYu
qfiNZbItDp14nWpyNorxTLVoH/droMcwU8ofm9MHT1AfA3yG/cxNkzqOfdjaxCbn
Bd9WA9Xo56I8rPUPYyQZhaC+GOV2GvuaWgj3U2mgytAWSL3H/9+wOd8sKu81ypfP
K1pNeQI6eGjd+fabbZvjjDh2VpKv6OQxVNOuQiaVZgRw1z1pQYNR35FdUWP3T9m4
+ZJsKmo13KW5BLLSITfr5xXQ9/BAT6M6AizkGYqfYPOw/JlMOjPwnclhTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFdMdGOt/ZTLcwbVASIP6Fuj1tvqMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvVjB4MFk2MzlsTXR6QnRVQklnX29XNlBXMi1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgRQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBG//VFLJNAH6kM6CI5tc9iU2vuHVFYa4Wdq5/4
30kpk6zKTJCnw4nkkF4WE3JqxLYUaVgQFweRgUHlojDTNVUsJ27IHRXn2yPoj+lV
iKhm/Bc9fZZTJdyrglB14+xJ47wm3iatR2QvKlNR3fgoKWOpEThsFBJgj3xcUB8M
/hOHnJLqqN9CW7rKSB0gM6Kz5kZgkItXCykXzW0yxXzfUxbmh/XkNr/QUEqHRu7H
VuZJu/vTrIUP/hV6HM9L0mUjmCvXdI4u2rVgcA/xQweekRIBE3PDuOvsQX/BG9sF
dqrajSokVCKXAVvz3pyvzfwSxrhC9mDfITFVaM31Ko4ydkri
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org