Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3C6hQlGREHQqiHhwpzo34DJ_vh4.roa
File: 3C6hQlGREHQqiHhwpzo34DJ_vh4.roa (raw, json)
Hash identifier: 2Rsx1htQzCspr8voceGlcD1ZYJ+21k7w8axIhb++j5Y=
Subject key identifier: DC:2E:A1:42:51:91:10:74:2A:88:78:70:A7:3A:37:E0:32:7F:BE:1E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01905A84EA919F40C44D3C641962D7E34976
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3C6hQlGREHQqiHhwpzo34DJ_vh4.roa
Signing time: Thu 27 Jun 2024 16:26:18 +0000
ROA not before: Thu 27 Jun 2024 16:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f801::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Jun 2024 16:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:84:ea:91:9f:40:c4:4d:3c:64:19:62:d7:e3:49:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 27 16:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc2ea142519110742a887870a73a37e0327fbe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:43:e5:99:89:02:99:56:30:e2:13:ee:83:
3b:26:79:cf:49:c2:a6:b0:76:33:35:f1:36:32:7c:
08:9d:b5:a4:07:fa:5f:55:d2:a4:54:71:4e:b4:f3:
a8:4f:99:cd:da:55:75:29:6a:61:fc:e7:11:7b:22:
9d:a9:b6:60:61:b9:0e:15:55:7c:d2:07:71:85:29:
ba:09:78:67:4b:38:1a:49:f3:c9:fb:71:f2:26:29:
0a:bb:0c:ca:8a:9e:b4:cb:e0:8a:60:7c:8d:b4:1d:
76:6d:9b:91:df:03:44:2d:b2:3f:a7:1a:52:db:62:
bc:bb:bb:22:97:4d:59:0d:67:61:29:b3:c4:6f:25:
a1:2d:12:d1:05:a9:96:c5:9b:15:1a:0f:9b:6c:d6:
19:dc:92:46:3c:0a:c2:51:40:0c:7e:3b:80:f8:90:
e8:6a:2f:c2:8c:85:83:5f:1b:04:8e:73:89:0b:71:
15:a7:df:d6:6d:38:45:39:ec:3a:01:df:bb:f5:ce:
fa:3a:bb:8f:33:6e:79:81:47:74:ee:a4:c1:67:77:
96:3b:94:f1:0f:da:6c:4f:b1:c3:9b:19:05:73:92:
55:12:80:7e:02:ae:a5:6b:fb:97:12:81:c7:5a:d1:
06:3a:a1:10:2d:24:f4:4a:9d:88:54:b8:71:a0:cb:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:A1:42:51:91:10:74:2A:88:78:70:A7:3A:37:E0:32:7F:BE:1E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/3C6hQlGREHQqiHhwpzo34DJ_vh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f801::/48
Signature Algorithm: sha256WithRSAEncryption
5c:72:9d:b3:3a:22:e5:e5:58:c6:4f:66:95:35:1f:5c:ef:18:
58:70:d0:ce:d8:fe:d1:fd:45:e7:60:19:4f:8f:a7:2e:2d:47:
96:fa:34:60:bf:3c:cf:6a:36:7a:d5:68:5f:4a:07:ef:74:1b:
da:63:1e:08:d1:79:0d:c6:ac:46:27:fd:47:c1:42:04:52:01:
59:2c:5c:ef:22:67:5e:0f:d0:e3:d5:b1:94:b3:58:e5:f2:b7:
02:b4:4b:de:97:a0:48:f5:dc:29:43:0c:3b:7f:90:47:a2:f1:
6a:b9:a0:9a:6f:5d:c0:a0:18:f3:83:38:28:dd:9a:c1:be:f6:
5f:23:b6:00:ef:0a:4a:af:76:51:64:37:4e:61:f5:1f:ac:4a:
82:a2:bd:7d:cc:90:a1:fd:ae:f1:68:3a:fb:74:59:0a:f4:7b:
69:bd:98:4f:dc:15:d8:d2:c9:a0:da:46:7a:d9:1d:cd:3a:e4:
0d:ce:72:30:83:0b:55:11:b8:bb:f7:e1:b2:d5:cf:22:22:60:
d7:cc:c6:40:00:f3:b5:fe:0c:72:2c:c5:cc:72:3a:78:68:c7:
b2:62:64:e2:a8:82:ac:e2:7b:e2:40:28:64:31:9c:4d:da:06:
45:3d:d6:33:f6:a0:2e:04:09:8a:1d:61:64:00:e3:e1:7f:a9:
d2:95:d7:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZBahOqRn0DETTxkGWLX40l2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwNjI3MTYyNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzJlYTE0MjUxOTExMDc0MmE4ODc4NzBhNzNhMzdlMDMyN2ZiZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RVD5ZmJAplWMOIT7oM7JnnPScKm
sHYzNfE2MnwInbWkB/pfVdKkVHFOtPOoT5nN2lV1KWph/OcReyKdqbZgYbkOFVV8
0gdxhSm6CXhnSzgaSfPJ+3HyJikKuwzKip60y+CKYHyNtB12bZuR3wNELbI/pxpS
22K8u7sil01ZDWdhKbPEbyWhLRLRBamWxZsVGg+bbNYZ3JJGPArCUUAMfjuA+JDo
ai/CjIWDXxsEjnOJC3EVp9/WbThFOew6Ad+79c76OruPM255gUd07qTBZ3eWO5Tx
D9psT7HDmxkFc5JVEoB+Aq6la/uXEoHHWtEGOqEQLST0Sp2IVLhxoMt3bwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNwuoUJRkRB0Koh4cKc6N+Ayf74eMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvM0M2aFFsR1JFSFFxaUhod3B6bzM0REpfdmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgp5x/gB
MA0GCSqGSIb3DQEBCwUAA4IBAQBccp2zOiLl5VjGT2aVNR9c7xhYcNDO2P7R/UXn
YBlPj6cuLUeW+jRgvzzPajZ61WhfSgfvdBvaYx4I0XkNxqxGJ/1HwUIEUgFZLFzv
ImdeD9Dj1bGUs1jl8rcCtEvel6BI9dwpQww7f5BHovFquaCab13AoBjzgzgo3ZrB
vvZfI7YA7wpKr3ZRZDdOYfUfrEqCor19zJCh/a7xaDr7dFkK9HtpvZhP3BXY0smg
2kZ62R3NOuQNznIwgwtVEbi79+Gy1c8iImDXzMZAAPO1/gxyLMXMcjp4aMeyYmTi
qIKs4nviQChkMZxN2gZFPdYz9qAuBAmKHWFkAOPhf6nSldeM
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:42:12 2024 by rpki-client on console-fra.rpki-client.org