Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/S-0EjEz0rzulq7aVFELDV8CHc7U.roa
File: S-0EjEz0rzulq7aVFELDV8CHc7U.roa (raw, json)
Hash identifier: OLmtvdZJU5LJUdrgbIN5pboRB3jEk0s0RUc6X6HOPJg=
Subject key identifier: 4B:ED:04:8C:4C:F4:AF:3B:A5:AB:B6:95:14:42:C3:57:C0:87:73:B5
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01905FA309B8FD152D4490FBF7295391B4DF
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/S-0EjEz0rzulq7aVFELDV8CHc7U.roa
Signing time: Fri 28 Jun 2024 16:17:18 +0000
ROA not before: Fri 28 Jun 2024 16:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214976
IP address blocks: 2a0a:79c7:f801::/48 maxlen: 48
2a0a:79c7:f802::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Aug 2024 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:a3:09:b8:fd:15:2d:44:90:fb:f7:29:53:91:b4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 28 16:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bed048c4cf4af3ba5abb6951442c357c08773b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:3b:cd:e8:a4:a9:4f:4a:87:be:77:db:b6:
ee:a1:ac:89:cd:5b:09:3d:8e:26:1d:ec:f9:a3:f8:
be:aa:7e:99:ba:8a:fa:b4:39:1a:82:e3:02:ca:83:
2f:c4:48:e0:17:ff:c6:9b:bb:7a:c0:13:9d:04:1a:
a8:ff:62:35:d4:78:ba:69:b1:ab:86:8d:76:61:4e:
8e:ee:16:0e:e3:72:b1:d5:8b:b3:3a:e7:0f:87:a3:
5c:69:df:e7:f5:d3:1f:8f:5e:56:8b:82:bc:27:16:
70:7c:04:1e:e0:00:4b:0b:84:e8:5e:e9:65:ea:10:
00:c8:22:0a:fd:44:f2:f7:06:ba:94:7e:cb:6b:6f:
37:6d:63:7a:db:46:37:88:6e:c4:63:a5:e7:04:7b:
a4:38:14:23:1b:fd:bf:f7:5d:d7:73:e9:d0:8e:c0:
75:10:20:d5:8f:f3:7c:27:a2:9a:66:05:31:78:e5:
e1:bc:96:67:14:57:e6:e6:77:d2:ca:89:39:ff:12:
f8:65:e9:8f:ef:8b:e1:f3:76:76:9a:61:d8:3f:27:
66:fa:f8:15:ae:cb:36:30:59:23:f3:41:03:5f:46:
c7:fa:04:2c:fc:1b:d2:32:e5:e8:10:cf:68:fb:5c:
79:86:17:8a:a7:4a:98:78:e0:21:28:01:5c:0d:73:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:04:8C:4C:F4:AF:3B:A5:AB:B6:95:14:42:C3:57:C0:87:73:B5
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/S-0EjEz0rzulq7aVFELDV8CHc7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f801::-2a0a:79c7:f802:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:27:ce:93:4f:e9:cf:a3:dd:35:8a:fa:bd:38:ad:b7:70:df:
79:2b:9e:c0:43:82:06:d0:d3:da:0a:a9:74:8a:ee:3e:5e:86:
b8:f7:dc:df:fa:73:4c:73:36:85:7f:d8:60:ad:77:00:a2:c7:
e3:b3:a1:34:49:20:48:12:91:3b:fe:dd:ce:5a:4f:1f:5e:13:
9c:bf:65:45:9c:60:fc:a1:6a:83:14:6f:43:9d:ee:55:61:23:
1e:80:d8:c0:a2:3f:db:82:49:15:9f:1f:6f:b5:f1:f4:5a:42:
c1:92:1d:c2:e8:98:29:80:da:8e:c0:eb:2c:81:4b:8c:c3:1d:
ad:cf:70:8e:b3:d1:3c:c0:f1:5e:62:e2:df:22:97:80:94:66:
5f:4d:07:3f:a1:ad:e5:28:20:4e:92:12:9e:17:7e:b2:57:e0:
7c:aa:36:2b:68:4c:0e:66:06:67:ce:89:08:4a:89:16:15:fa:
2e:1c:49:bc:da:3d:b3:f2:88:02:bc:88:af:44:c9:f2:e0:8a:
b9:49:97:b2:bc:09:4d:bf:e9:8f:07:08:b6:a6:35:a9:b3:b9:
76:28:dd:67:94:e7:80:34:43:97:56:df:7f:54:e1:67:59:58:
bc:c4:b1:71:b9:57:6f:90:e9:03:14:f6:62:d6:f0:3d:a6:4e:
49:b2:b2:6a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZBfowm4/RUtRJD79ylTkbTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwNjI4MTYxNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmVkMDQ4YzRjZjRhZjNiYTVhYmI2OTUxNDQyYzM1N2MwODc3M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoM7zeikqU9Kh75327buoayJzVsJ
PY4mHez5o/i+qn6Zuor6tDkaguMCyoMvxEjgF//Gm7t6wBOdBBqo/2I11Hi6abGr
ho12YU6O7hYO43Kx1YuzOucPh6Ncad/n9dMfj15Wi4K8JxZwfAQe4ABLC4ToXull
6hAAyCIK/UTy9wa6lH7La283bWN620Y3iG7EY6XnBHukOBQjG/2/913Xc+nQjsB1
ECDVj/N8J6KaZgUxeOXhvJZnFFfm5nfSyok5/xL4ZemP74vh83Z2mmHYPydm+vgV
rss2MFkj80EDX0bH+gQs/BvSMuXoEM9o+1x5hheKp0qYeOAhKAFcDXPV7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEvtBIxM9K87pau2lRRCw1fAh3O1MB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvUy0wRWpFejByenVscTdhVkZFTERWOENIYzdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqCnnH
+AEDBwAqCnnH+AIwDQYJKoZIhvcNAQELBQADggEBAJQnzpNP6c+j3TWK+r04rbdw
33krnsBDggbQ09oKqXSK7j5ehrj33N/6c0xzNoV/2GCtdwCix+OzoTRJIEgSkTv+
3c5aTx9eE5y/ZUWcYPyhaoMUb0Od7lVhIx6A2MCiP9uCSRWfH2+18fRaQsGSHcLo
mCmA2o7A6yyBS4zDHa3PcI6z0TzA8V5i4t8il4CUZl9NBz+hreUoIE6SEp4XfrJX
4HyqNitoTA5mBmfOiQhKiRYV+i4cSbzaPbPyiAK8iK9EyfLgirlJl7K8CU2/6Y8H
CLamNamzuXYo3WeU54A0Q5dW339U4WdZWLzEsXG5V2+Q6QMU9mLW8D2mTkmysmo=
-----END CERTIFICATE-----
Generated at Sun Aug 11 23:22:54 2024 by rpki-client on console-fra.rpki-client.org