Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/PK0oSkudWfTk18qwutGA1FpETSU.roa
File: PK0oSkudWfTk18qwutGA1FpETSU.roa (raw, json)
Hash identifier: mj7XyQafxZCFQIkaPuDmk8xmDsJrrz62Zz4fDiU15jw=
Subject key identifier: 3C:AD:28:4A:4B:9D:59:F4:E4:D7:CA:B0:BA:D1:80:D4:5A:44:4D:25
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC324DA0B4F9DEB073588358D7E91
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/PK0oSkudWfTk18qwutGA1FpETSU.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 2a0f:6fc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c3:24:da:0b:4f:9d:eb:07:35:88:35:8d:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cad284a4b9d59f4e4d7cab0bad180d45a444d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:51:74:f4:48:cd:8b:fb:1b:8c:f4:c2:fa:
03:30:e7:12:40:c9:71:49:d4:dc:70:4d:0a:5a:2c:
bf:c4:87:a9:28:d1:18:43:af:e9:73:40:1e:e5:40:
ea:9e:f6:81:df:e4:eb:14:b8:fc:3a:f0:24:8c:37:
47:7d:73:6f:ab:23:15:08:eb:9d:13:6f:38:be:c2:
ae:2e:5f:61:96:09:29:f6:0b:b2:42:2e:ca:91:6c:
28:79:dd:78:a0:8c:ea:c9:5f:e5:84:cd:38:1d:89:
c5:09:de:70:3d:37:74:b4:d9:d9:00:ea:ee:4f:ca:
d8:81:83:b0:66:0c:87:58:86:bd:11:eb:0c:8b:a5:
e9:19:23:b1:db:47:6b:52:3b:db:f0:96:2f:68:5e:
17:55:bf:3b:df:08:a2:9c:ea:26:5e:63:50:fa:bb:
34:51:a3:b3:6d:d2:fe:62:5e:08:50:0c:53:8f:96:
61:f1:de:4d:37:65:b7:e4:3a:36:5a:bc:4f:a2:a2:
5d:ae:e1:6d:0d:a0:25:85:dd:8c:fb:67:0f:e4:5f:
8c:0e:d5:fe:8f:f9:b9:58:82:f9:b3:c1:95:cc:c1:
dd:77:3a:3e:9d:0f:ac:2a:65:8b:55:44:c8:94:33:
c8:9d:2b:43:ad:0f:20:5d:94:dd:64:b5:3f:a6:79:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:28:4A:4B:9D:59:F4:E4:D7:CA:B0:BA:D1:80:D4:5A:44:4D:25
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/PK0oSkudWfTk18qwutGA1FpETSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6fc1::/32
Signature Algorithm: sha256WithRSAEncryption
9b:87:47:47:b3:98:0d:7f:0c:1d:e8:83:7e:e2:9a:33:eb:5e:
39:5b:ff:4a:fe:04:64:6f:12:5c:06:a4:a5:15:5b:9a:16:85:
95:50:ab:35:96:e2:d7:b2:d4:81:49:18:04:2e:c6:b9:b9:99:
b6:1f:db:9b:e2:6e:b0:29:20:a9:06:05:37:52:a5:de:18:2d:
fe:90:b8:cd:1f:81:98:b9:0b:df:91:a6:5d:7f:91:18:6c:d6:
c4:b2:ad:1c:c1:5f:fa:ea:d0:77:bb:7b:1b:7c:b2:2b:d2:2a:
27:e5:6e:c3:86:19:da:b9:45:8f:31:0d:8c:9b:ea:47:53:84:
ea:ff:69:fa:44:91:50:11:67:ce:51:23:1e:47:04:a4:6a:34:
09:ff:29:1a:f6:46:30:ca:c4:7c:eb:48:a9:1a:17:b2:55:5f:
2e:4a:39:fa:64:4e:30:8d:5d:2f:c0:cf:a8:97:4e:30:7f:59:
d8:ed:cc:85:8d:23:c8:a4:ee:16:48:bc:71:a1:cd:94:c1:2a:
b4:fc:cd:be:d3:57:ce:f1:74:20:b0:a2:08:a0:ed:d1:bd:96:
9f:ae:61:bd:18:91:8b:08:8a:e0:ab:cd:ca:ee:06:20:5f:b3:
dc:51:c7:65:d4:a7:63:17:43:28:e4:78:0c:4f:4a:3d:fe:12:
72:57:ee:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzIb8Mk2gtPnesHNYg1jX6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjQwMTAyMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2FkMjg0YTRiOWQ1OWY0ZTRkN2NhYjBiYWQxODBkNDVhNDQ0ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPdRdPRIzYv7G4z0wvoDMOcSQMlx
SdTccE0KWiy/xIepKNEYQ6/pc0Ae5UDqnvaB3+TrFLj8OvAkjDdHfXNvqyMVCOud
E284vsKuLl9hlgkp9guyQi7KkWwoed14oIzqyV/lhM04HYnFCd5wPTd0tNnZAOru
T8rYgYOwZgyHWIa9EesMi6XpGSOx20drUjvb8JYvaF4XVb873wiinOomXmNQ+rs0
UaOzbdL+Yl4IUAxTj5Zh8d5NN2W35Do2WrxPoqJdruFtDaAlhd2M+2cP5F+MDtX+
j/m5WIL5s8GVzMHddzo+nQ+sKmWLVUTIlDPInStDrQ8gXZTdZLU/pnnOFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDytKEpLnVn05NfKsLrRgNRaRE0lMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvUEswb1NrdWRXZlRrMThxd3V0R0ExRnBFVFNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg9vwTAN
BgkqhkiG9w0BAQsFAAOCAQEAm4dHR7OYDX8MHeiDfuKaM+teOVv/Sv4EZG8SXAak
pRVbmhaFlVCrNZbi17LUgUkYBC7GubmZth/bm+JusCkgqQYFN1Kl3hgt/pC4zR+B
mLkL35GmXX+RGGzWxLKtHMFf+urQd7t7G3yyK9IqJ+Vuw4YZ2rlFjzENjJvqR1OE
6v9p+kSRUBFnzlEjHkcEpGo0Cf8pGvZGMMrEfOtIqRoXslVfLko5+mROMI1dL8DP
qJdOMH9Z2O3MhY0jyKTuFki8caHNlMEqtPzNvtNXzvF0ILCiCKDt0b2Wn65hvRiR
iwiK4KvNyu4GIF+z3FHHZdSnYxdDKOR4DE9KPf4Sclfujg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org