Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa
File: 1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa (raw, json)
Hash identifier: AOV2reGydZ9UV+G9hY8SFlQzCiJjIPfSzamixKsvFEI=
Subject key identifier: F8:9C:87:DD:1A:4A:24:EB:7C:91:6C:9C:DC:9A:57:DD:6A:DE:33:1E
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F01E28674B8A30793248BCB0BE90
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12778
IP address blocks: 2a0e:ce40::/29 maxlen: 29
2a02:d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Apr 2023 16:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f0:1e:28:67:4b:8a:30:79:32:48:bc:b0:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89c87dd1a4a24eb7c916c9cdc9a57dd6ade331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:eb:a4:50:11:6e:e3:e9:8c:69:1c:45:53:
f6:0c:15:00:a1:da:b9:d0:e4:2f:9f:af:78:f0:98:
98:38:f8:67:3b:94:a8:54:d7:06:d6:e0:00:25:73:
79:b0:26:90:c4:0f:13:36:af:3f:0c:f5:86:b0:8d:
e2:2b:cd:dd:f9:29:5a:76:66:2c:c6:c9:37:a1:89:
85:d2:5c:da:f9:fb:58:21:8b:2d:36:da:2c:74:0f:
8f:93:ed:ed:49:e6:ad:dd:f1:70:a7:41:fe:24:58:
64:d7:64:e8:e0:2e:d2:e8:07:84:88:2f:5d:17:48:
26:97:f8:e4:6c:49:a5:dc:94:4e:ac:f7:bb:be:d8:
51:92:78:1b:27:3f:7e:36:c1:53:eb:c4:7f:d4:d2:
1c:38:4b:89:1d:6d:7e:06:49:01:ab:7a:43:ca:9b:
90:87:26:5d:78:ff:7a:b3:86:05:99:61:27:57:2c:
3d:fd:f3:69:fa:c1:8e:37:8e:c4:67:3a:de:25:2c:
5d:7b:78:ee:9d:8c:17:c8:18:4f:92:72:1b:a2:6b:
51:72:0c:a4:e5:e9:38:5d:e7:c3:81:c8:cd:cb:a5:
32:90:73:c7:74:99:49:68:54:e2:eb:47:50:b8:ae:
cb:01:26:b8:ac:4c:94:02:84:e5:03:38:e8:bb:59:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:87:DD:1A:4A:24:EB:7C:91:6C:9C:DC:9A:57:DD:6A:DE:33:1E
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/1-JyH3RpKJOt8kWyc3JpX3WreMx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d80::/32
2a0e:ce40::/29
Signature Algorithm: sha256WithRSAEncryption
1d:8a:fb:91:0b:c0:c0:7a:a5:2a:89:27:19:35:62:42:c6:8a:
68:95:83:0b:a9:ea:14:03:f3:e7:28:15:70:f8:2d:bb:5f:e0:
0c:fc:f1:7a:9b:ab:5f:5b:2c:7a:48:92:64:a0:4d:a7:b3:3d:
1c:44:be:0a:e2:4c:00:c5:3d:d0:fd:62:3b:16:18:a9:7d:97:
68:24:a7:7a:d5:e7:cb:14:7d:40:52:f3:1c:87:fb:d9:c7:9e:
25:25:af:6c:ef:02:a0:93:f8:f7:40:30:62:bc:bd:49:44:d5:
cc:2e:b8:0a:1b:05:92:c9:31:33:30:b1:ce:f7:40:73:16:1f:
52:2f:8f:b7:94:5a:5e:d2:b6:9a:64:5e:77:6d:ee:f8:94:ae:
11:57:e7:97:a2:66:8b:26:57:1a:61:ee:31:44:b0:55:9a:81:
89:99:d6:84:a5:44:1e:12:d4:0a:cf:67:4f:be:75:bd:f3:6e:
fb:ae:0b:a0:93:24:c9:ad:aa:f7:e9:35:10:e7:84:4c:63:04:
c3:90:46:bb:4a:66:e5:57:e4:68:3a:e0:93:a5:f1:1b:3f:50:
b8:d7:c8:6d:8b:11:a2:7b:3b:e5:ec:1a:9a:a1:a6:ca:58:1e:
4c:28:a5:3d:2b:e6:ef:40:ce:7e:fc:fd:54:87:c5:85:ce:f1:
a8:52:2a:1d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYVvZvAeKGdLijB5Mki8sL6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwMTAxMjIxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODljODdkZDFhNGEyNGViN2M5MTZjOWNkYzlhNTdkZDZhZGUzMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jrpFARbuPpjGkcRVP2DBUAodq5
0OQvn6948JiYOPhnO5SoVNcG1uAAJXN5sCaQxA8TNq8/DPWGsI3iK83d+SladmYs
xsk3oYmF0lza+ftYIYstNtosdA+Pk+3tSeat3fFwp0H+JFhk12To4C7S6AeEiC9d
F0gml/jkbEml3JROrPe7vthRkngbJz9+NsFT68R/1NIcOEuJHW1+BkkBq3pDypuQ
hyZdeP96s4YFmWEnVyw9/fNp+sGON47EZzreJSxde3junYwXyBhPknIbomtRcgyk
5ek4XefDgcjNy6UykHPHdJlJaFTi60dQuK7LASa4rEyUAoTlAzjou1l+gwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPich90aSiTrfJFsnNyaV91q3jMeMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvMS1KeUgzUnBLSk90OGtXeWMzSnBYM1dyZU14NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvMjBhNWE1LTBiYTItNDA1Mi1iZWI0LTNjYzg1YWQzYzE5
MC8xL0dCQVhjaVNKbHJoOWtJUU1MU2ZXSlVsRmdYTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAIwDgMFACoCDYAD
BQMqDs5AMA0GCSqGSIb3DQEBCwUAA4IBAQAdivuRC8DAeqUqiScZNWJCxopolYML
qeoUA/PnKBVw+C27X+AM/PF6m6tfWyx6SJJkoE2nsz0cRL4K4kwAxT3Q/WI7Fhip
fZdoJKd61efLFH1AUvMch/vZx54lJa9s7wKgk/j3QDBivL1JRNXMLrgKGwWSyTEz
MLHO90BzFh9SL4+3lFpe0raaZF53be74lK4RV+eXomaLJlcaYe4xRLBVmoGJmdaE
pUQeEtQKz2dPvnW98277rgugkyTJrar36TUQ54RMYwTDkEa7SmblV+RoOuCTpfEb
P1C418htixGiezvl7BqaoabKWB5MKKU9K+bvQM5+/P1Uh8WFzvGoUiod
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org