Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/OmWPE40anQbjBOdVAHSQIV5yXfQ.roa
File: OmWPE40anQbjBOdVAHSQIV5yXfQ.roa (raw, json)
Hash identifier: ZF9aRDHKHW0boF/vprcghkau5s72T2QfwMKqdVNIKoA=
Subject key identifier: 3A:65:8F:13:8D:1A:9D:06:E3:04:E7:55:00:74:90:21:5E:72:5D:F4
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 01856FA71A0FFC8508B1E2496F27D9185D7A
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/OmWPE40anQbjBOdVAHSQIV5yXfQ.roa
Signing time: Sun 01 Jan 2023 23:25:00 +0000
ROA not before: Sun 01 Jan 2023 23:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207200
IP address blocks: 2a0e:1cc0:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:1a:0f:fc:85:08:b1:e2:49:6f:27:d9:18:5d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 23:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a658f138d1a9d06e304e755007490215e725df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:7b:a9:db:31:92:88:a2:41:d1:fb:9a:90:
fd:46:1d:f7:09:8b:30:38:fa:39:7b:d7:41:70:b1:
e7:7c:10:52:0f:a8:a2:dc:3b:b9:f8:79:39:a6:e0:
90:ed:70:f5:85:02:02:be:8a:50:7e:ab:d2:2d:6c:
e7:13:65:23:02:1c:6a:a5:aa:59:00:c3:a6:de:bf:
30:f5:99:32:14:62:c7:65:d1:5f:02:04:c1:0e:cf:
3b:f8:74:0e:cb:96:0d:a0:6d:74:1e:48:6c:0c:d6:
b7:7f:ed:f5:49:e7:94:a4:8d:92:42:15:27:f8:49:
ca:ed:9e:a4:21:ef:7b:c7:8a:e9:ad:8e:23:45:64:
3f:17:7d:9a:bb:31:4e:c5:c4:b2:89:b2:d2:87:0d:
b8:52:ec:89:3f:9b:13:5a:78:a0:b3:d5:8f:99:c1:
90:c0:bf:e7:40:ac:16:38:a7:ea:da:85:ef:59:54:
d5:09:e4:ce:c7:56:1a:be:75:c1:62:47:1d:1b:f3:
e0:2d:4f:55:68:9f:5d:bd:9f:77:24:a0:7b:4e:c5:
aa:c2:e6:2e:c5:56:aa:ca:4e:d1:0b:35:d1:d0:a8:
07:90:21:1f:d3:1c:f7:b0:45:e3:e1:66:04:fe:a8:
12:94:3a:9e:8b:44:59:6f:c3:6d:99:98:51:5e:28:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:8F:13:8D:1A:9D:06:E3:04:E7:55:00:74:90:21:5E:72:5D:F4
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/OmWPE40anQbjBOdVAHSQIV5yXfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1cc0:8::/48
Signature Algorithm: sha256WithRSAEncryption
79:3e:24:e5:14:d9:89:9d:b3:ad:05:f6:b1:ac:9c:7b:38:58:
42:c4:a3:ca:5e:2c:ca:73:89:85:66:f5:79:5c:79:3e:1e:a1:
01:f8:a9:ee:13:95:72:a3:c7:48:5e:00:1b:83:bf:72:f8:34:
9d:4b:00:58:fd:b1:59:00:3a:f7:b3:2d:a8:81:4f:83:4c:31:
61:76:66:d0:84:8e:7d:eb:b0:9e:f0:2e:7b:d4:68:4d:3c:19:
de:d9:65:63:b1:44:3f:e5:2a:ed:35:9a:86:53:9f:0a:34:6d:
8f:5c:15:74:27:fa:ef:f1:0d:b0:71:04:d8:6d:ae:5a:62:3a:
bb:f0:8b:41:30:52:71:b7:ae:25:2e:68:25:2a:4f:a1:94:a0:
c2:6f:0f:64:7d:3f:2a:e9:0d:00:2d:49:32:99:9d:0a:de:31:
6d:10:36:b5:13:1a:11:36:d0:bf:9f:1d:0d:69:68:f5:67:32:
f8:de:c1:2a:c5:c7:35:90:36:53:90:0e:59:f7:39:04:49:21:
14:e4:23:73:6a:92:dd:94:83:05:bf:1d:97:4a:07:91:4b:a3:
fb:9b:c3:f5:9c:d6:04:89:7e:00:ff:51:3b:83:51:bd:15:b7:
03:05:27:9c:e0:26:3d:65:3b:5d:34:39:b9:89:a2:04:1d:e0:
ae:aa:bc:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvpxoP/IUIseJJbyfZGF16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjMwMTAxMjMyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTY1OGYxMzhkMWE5ZDA2ZTMwNGU3NTUwMDc0OTAyMTVlNzI1ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJB7qdsxkoiiQdH7mpD9Rh33CYsw
OPo5e9dBcLHnfBBSD6ii3Du5+Hk5puCQ7XD1hQICvopQfqvSLWznE2UjAhxqpapZ
AMOm3r8w9ZkyFGLHZdFfAgTBDs87+HQOy5YNoG10HkhsDNa3f+31SeeUpI2SQhUn
+EnK7Z6kIe97x4rprY4jRWQ/F32auzFOxcSyibLShw24UuyJP5sTWnigs9WPmcGQ
wL/nQKwWOKfq2oXvWVTVCeTOx1YavnXBYkcdG/PgLU9VaJ9dvZ93JKB7TsWqwuYu
xVaqyk7RCzXR0KgHkCEf0xz3sEXj4WYE/qgSlDqei0RZb8NtmZhRXigFZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDpljxONGp0G4wTnVQB0kCFecl30MB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvT21XUEU0MGFuUWJqQk9kVkFIU1FJVjV5WGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cwAAI
MA0GCSqGSIb3DQEBCwUAA4IBAQB5PiTlFNmJnbOtBfaxrJx7OFhCxKPKXizKc4mF
ZvV5XHk+HqEB+KnuE5Vyo8dIXgAbg79y+DSdSwBY/bFZADr3sy2ogU+DTDFhdmbQ
hI5967Ce8C571GhNPBne2WVjsUQ/5SrtNZqGU58KNG2PXBV0J/rv8Q2wcQTYba5a
Yjq78ItBMFJxt64lLmglKk+hlKDCbw9kfT8q6Q0ALUkymZ0K3jFtEDa1ExoRNtC/
nx0NaWj1ZzL43sEqxcc1kDZTkA5Z9zkESSEU5CNzapLdlIMFvx2XSgeRS6P7m8P1
nNYEiX4A/1E7g1G9FbcDBSec4CY9ZTtdNDm5iaIEHeCuqrwd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org