Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/kg0T4-lnJIkI1BtAut67_mtYvMg.roa
File: kg0T4-lnJIkI1BtAut67_mtYvMg.roa (raw, json)
Hash identifier: TXxhPwTJhGreH0nspLPoWGjWk4R/ZCOaQEhR+XM9+Zo=
Subject key identifier: 92:0D:13:E3:E9:67:24:89:08:D4:1B:40:BA:DE:BB:FE:6B:58:BC:C8
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C32626915F375AEBF8CC72E88D92EC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/kg0T4-lnJIkI1BtAut67_mtYvMg.roa
Signing time: Mon 02 Jan 2023 09:14:52 +0000
ROA not before: Mon 02 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209859
IP address blocks: 2a06:e881:5300::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:26:26:91:5f:37:5a:eb:f8:cc:72:e8:8d:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=920d13e3e967248908d41b40badebbfe6b58bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:d5:c9:85:14:7b:f5:af:6e:dc:d7:86:0b:
a4:4c:6d:cd:33:97:78:d6:ef:a1:e0:8e:c4:33:8d:
aa:89:92:78:ed:9e:33:95:b6:b7:c4:f1:6f:27:0a:
de:bf:fc:dd:9b:44:c6:a2:4d:4d:54:f9:8e:28:38:
c7:47:79:a3:9b:5c:6a:16:72:37:96:c3:0c:29:33:
7b:68:35:33:1c:05:2d:fd:a6:3c:d3:3d:2d:57:f6:
34:72:23:aa:6b:c5:9f:da:7c:4c:70:58:de:72:ed:
a4:76:96:13:a8:19:50:fa:bf:04:55:68:7f:27:d1:
12:07:e6:52:5c:17:cf:27:05:1c:92:4e:60:dd:b5:
37:e3:d7:45:ef:f6:a8:9e:da:e7:4e:22:f2:c9:25:
6e:62:b4:40:6d:97:af:ac:1b:86:34:a7:bc:53:f8:
29:0e:98:07:c9:2d:2c:ea:49:ae:ff:d7:68:ac:41:
67:b1:dd:f9:77:2b:e5:80:fa:d8:f9:58:32:65:55:
fc:e9:46:ca:ec:d6:d0:29:01:f6:1a:41:dd:f9:1b:
d6:24:cb:6c:53:48:d9:c0:be:8a:e7:0e:e2:ef:85:
72:51:fc:88:7a:e0:f4:31:8d:fc:b9:31:c3:dd:53:
72:23:f1:1c:08:aa:1b:42:7e:81:2d:6a:e4:45:49:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:13:E3:E9:67:24:89:08:D4:1B:40:BA:DE:BB:FE:6B:58:BC:C8
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/kg0T4-lnJIkI1BtAut67_mtYvMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5300::/40
Signature Algorithm: sha256WithRSAEncryption
70:6a:1e:0d:fa:e9:65:33:38:f2:b9:4c:b4:61:52:d6:c2:da:
ca:c9:6d:eb:51:9b:af:eb:e2:c2:38:a0:b4:e3:05:15:fe:3e:
97:f0:97:fd:d4:cd:9f:85:12:ca:fd:0d:74:bc:ec:b1:aa:b5:
0d:8b:31:c2:3b:3e:56:e3:b0:8f:2a:d1:7e:0a:ad:b1:ce:03:
b1:06:e1:92:ee:9e:bd:ef:1d:c1:1d:7b:a8:5a:af:9d:19:64:
ba:07:f8:45:22:6e:34:f8:67:d5:b4:ca:a5:49:87:0f:86:ab:
42:22:b8:77:76:a2:75:15:a4:50:ca:d1:e5:57:1f:f1:6f:13:
d3:82:5b:68:b9:cf:0a:3e:b6:6d:62:18:50:85:36:90:d1:05:
8f:6b:cb:7d:53:06:4d:23:5d:ca:7b:35:7e:a5:c7:d3:ec:85:
cf:80:67:6f:0e:52:37:df:0e:4c:80:79:43:b6:0e:df:b5:ed:
e6:7a:f3:41:a2:56:2a:0f:28:3f:d1:22:ff:ae:a4:d1:2f:71:
90:f9:1e:60:1a:50:57:3f:48:9b:8c:7a:4f:bd:69:c2:ce:14:
63:1a:10:18:2b:bb:9e:80:c3:b3:84:f6:b2:c6:2e:4d:35:34:
73:50:08:50:8b:96:f1:47:5e:1f:5f:3b:1c:28:f7:ef:c0:18:
f1:6c:04:ee
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVxwyYmkV83Wuv4zHLojZLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMwMTAyMDkxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjBkMTNlM2U5NjcyNDg5MDhkNDFiNDBiYWRlYmJmZTZiNThiY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD3VyYUUe/WvbtzXhgukTG3NM5d4
1u+h4I7EM42qiZJ47Z4zlba3xPFvJwrev/zdm0TGok1NVPmOKDjHR3mjm1xqFnI3
lsMMKTN7aDUzHAUt/aY80z0tV/Y0ciOqa8Wf2nxMcFjecu2kdpYTqBlQ+r8EVWh/
J9ESB+ZSXBfPJwUckk5g3bU349dF7/aontrnTiLyySVuYrRAbZevrBuGNKe8U/gp
DpgHyS0s6kmu/9dorEFnsd35dyvlgPrY+VgyZVX86UbK7NbQKQH2GkHd+RvWJMts
U0jZwL6K5w7i74VyUfyIeuD0MY38uTHD3VNyI/EcCKobQn6BLWrkRUlglQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJINE+PpZySJCNQbQLreu/5rWLzIMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEva2cwVDQtbG5KSWtJMUJ0QXV0NjdfbXRZdk1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogVMw
DQYJKoZIhvcNAQELBQADggEBAHBqHg366WUzOPK5TLRhUtbC2srJbetRm6/r4sI4
oLTjBRX+Ppfwl/3UzZ+FEsr9DXS87LGqtQ2LMcI7PlbjsI8q0X4KrbHOA7EG4ZLu
nr3vHcEde6har50ZZLoH+EUibjT4Z9W0yqVJhw+Gq0IiuHd2onUVpFDK0eVXH/Fv
E9OCW2i5zwo+tm1iGFCFNpDRBY9ry31TBk0jXcp7NX6lx9Pshc+AZ28OUjffDkyA
eUO2Dt+17eZ680GiVioPKD/RIv+upNEvcZD5HmAaUFc/SJuMek+9acLOFGMaEBgr
u56Aw7OE9rLGLk01NHNQCFCLlvFHXh9fOxwo9+/AGPFsBO4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org