Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W8K5OAGe63PpizRwaO5zL1Rv0JM.roa
File: W8K5OAGe63PpizRwaO5zL1Rv0JM.roa (raw, json)
Hash identifier: 6wG1ftI9k2m2lHPcuOofiSlnMI2Q7XQBzKMA30MucIo=
Subject key identifier: 5B:C2:B9:38:01:9E:EB:73:E9:8B:34:70:68:EE:73:2F:54:6F:D0:93
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE18E6029E63E05C3559D375C3159
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W8K5OAGe63PpizRwaO5zL1Rv0JM.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135028
IP address blocks: 2a0e:aa07:f010::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e1:8e:60:29:e6:3e:05:c3:55:9d:37:5c:31:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc2b938019eeb73e98b347068ee732f546fd093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:01:aa:42:d3:0d:9a:51:aa:dd:4b:42:94:
5e:a4:fc:8b:3e:d7:7b:ac:d7:75:7e:06:b6:fb:97:
b6:35:1b:3b:89:e6:ad:83:5d:a8:dc:0b:ef:f8:4d:
2b:47:d6:14:bf:9a:ae:29:10:03:69:e6:2a:54:8a:
5e:8f:56:c4:80:87:81:06:ef:c6:85:57:09:b7:7e:
f3:4e:0b:86:2d:db:ff:60:4e:06:eb:65:96:ba:e5:
57:04:6b:00:8b:cc:91:36:40:75:4c:51:51:22:36:
9d:83:f6:4f:64:af:48:c1:0c:62:5b:89:d2:98:4d:
f4:0f:e8:07:c2:2e:cb:38:a8:c0:59:b9:fa:25:3d:
ef:55:a1:c1:b4:5b:91:87:63:40:30:eb:b2:83:26:
61:4a:3e:2a:21:40:4f:95:a4:3a:1f:3a:4e:e7:47:
7e:d4:51:01:82:86:21:cb:47:63:5e:37:c2:30:b8:
87:41:38:e5:69:03:b9:7d:ce:9d:9d:b3:4e:05:93:
5b:93:4f:6d:e1:10:de:e3:6a:d7:49:46:10:8a:d0:
f8:00:71:38:3b:7b:99:16:19:d4:ec:7b:a7:6c:d1:
f3:03:a5:3d:12:7f:22:cc:9c:5e:57:98:7e:41:ff:
96:94:83:ac:03:97:db:31:07:e3:0d:da:8d:24:43:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:B9:38:01:9E:EB:73:E9:8B:34:70:68:EE:73:2F:54:6F:D0:93
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/W8K5OAGe63PpizRwaO5zL1Rv0JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f010::/44
Signature Algorithm: sha256WithRSAEncryption
c0:39:81:3e:49:25:c7:e8:f6:2c:8e:a9:8d:6f:82:16:ef:59:
8e:79:36:a3:7e:68:35:e1:a1:d2:b2:85:09:83:8c:55:3d:b1:
0a:cb:62:d4:2f:e3:38:28:ce:2b:8b:d2:f8:3f:bf:22:d2:64:
5d:23:72:f2:13:7b:81:5f:05:4d:ee:12:8c:71:d3:77:d3:eb:
6e:14:7c:9b:97:26:0b:f4:2d:e9:0b:93:75:8f:a8:f0:9d:35:
55:8d:fb:b1:6d:e6:ad:da:1f:7c:97:cd:4a:1d:a9:f8:50:5f:
3e:b0:ce:4e:0f:98:ef:f3:83:fd:b2:8f:a8:1e:d5:5c:24:01:
2b:23:fd:cf:5b:ea:f4:b8:3f:b2:58:e3:72:2b:6e:bb:ef:f3:
36:4a:bf:d7:d5:0a:fd:47:60:7e:0e:8d:4a:67:a7:34:85:33:
62:f2:fc:33:dd:78:c5:d5:16:7a:e2:22:a6:51:77:ea:ed:d8:
2a:b4:f9:c2:3d:d4:b2:99:c0:4e:fe:b4:fb:dd:d9:22:39:67:
74:f8:9b:b0:1d:03:78:6f:d6:dd:6d:e2:e3:5e:c4:93:3a:68:
6b:83:58:11:35:25:0a:1b:87:ad:c4:6c:08:12:14:68:25:86:
ff:f4:02:fd:16:97:d6:3d:ee:da:af:d9:ea:86:bd:19:89:3d:
57:12:a0:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvL+GOYCnmPgXDVZ03XDFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMTAxMjExNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmMyYjkzODAxOWVlYjczZTk4YjM0NzA2OGVlNzMyZjU0NmZkMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC8BqkLTDZpRqt1LQpRepPyLPtd7
rNd1fga2+5e2NRs7ieatg12o3Avv+E0rR9YUv5quKRADaeYqVIpej1bEgIeBBu/G
hVcJt37zTguGLdv/YE4G62WWuuVXBGsAi8yRNkB1TFFRIjadg/ZPZK9IwQxiW4nS
mE30D+gHwi7LOKjAWbn6JT3vVaHBtFuRh2NAMOuygyZhSj4qIUBPlaQ6HzpO50d+
1FEBgoYhy0djXjfCMLiHQTjlaQO5fc6dnbNOBZNbk09t4RDe42rXSUYQitD4AHE4
O3uZFhnU7HunbNHzA6U9En8izJxeV5h+Qf+WlIOsA5fbMQfjDdqNJEO47QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFvCuTgBnutz6Ys0cGjucy9Ub9CTMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvVzhLNU9BR2U2M1BwaXpSd2FPNXpMMVJ2MEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB/AQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDAOYE+SSXH6PYsjqmNb4IW71mOeTajfmg14aHS
soUJg4xVPbEKy2LUL+M4KM4ri9L4P78i0mRdI3LyE3uBXwVN7hKMcdN30+tuFHyb
lyYL9C3pC5N1j6jwnTVVjfuxbeat2h98l81KHan4UF8+sM5OD5jv84P9so+oHtVc
JAErI/3PW+r0uD+yWONyK2677/M2Sr/X1Qr9R2B+Do1KZ6c0hTNi8vwz3XjF1RZ6
4iKmUXfq7dgqtPnCPdSymcBO/rT73dkiOWd0+JuwHQN4b9bdbeLjXsSTOmhrg1gR
NSUKG4etxGwIEhRoJYb/9AL9FpfWPe7ar9nqhr0ZiT1XEqBe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org