Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/WVpnLkbPgfIZx9lwR2xEwEyKQZk.roa
File: WVpnLkbPgfIZx9lwR2xEwEyKQZk.roa (raw, json)
Hash identifier: TQWPsuAusBUL0qI1s4B0G5UMgQMvNRLJrA18qORYyCs=
Subject key identifier: 59:5A:67:2E:46:CF:81:F2:19:C7:D9:70:47:6C:44:C0:4C:8A:41:99
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 01856D2F3F79F7BB48347BE428B0128002D4
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/WVpnLkbPgfIZx9lwR2xEwEyKQZk.roa
Signing time: Sun 01 Jan 2023 11:54:51 +0000
ROA not before: Sun 01 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212461
IP address blocks: 2a0b:6900:1ad::/48 maxlen: 48
2a0b:6903:1ad::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:3f:79:f7:bb:48:34:7b:e4:28:b0:12:80:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jan 1 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=595a672e46cf81f219c7d970476c44c04c8a4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:2e:58:bc:dc:03:9f:ec:9e:1d:00:84:e2:
aa:19:51:b6:4f:0b:86:06:e8:f0:85:e3:75:56:ec:
71:55:00:29:a9:3e:6d:23:63:db:77:20:95:1b:39:
72:77:c8:6d:8b:47:b9:f8:d9:e0:27:fa:31:f3:35:
7f:64:4f:16:5e:95:24:e7:4b:97:08:18:ec:92:a7:
0a:75:e3:ef:d7:6a:94:1a:08:83:4f:f9:22:15:d6:
aa:8d:2d:26:a1:c0:f6:03:fb:48:da:cf:cf:8a:4e:
08:ae:5f:7b:21:5e:6b:e0:ce:d8:96:5b:7a:82:61:
2a:2d:bf:ce:31:8a:e3:58:8d:39:cb:42:59:bd:21:
31:6a:dc:ba:26:1c:07:10:1e:3c:9c:72:24:e5:61:
12:cb:b1:cf:41:bb:d2:30:dd:2a:31:09:9c:34:7c:
74:f5:f3:d8:b9:0f:bc:67:82:bb:7a:65:53:b8:53:
06:ba:f7:5a:9b:65:e1:d0:1a:2b:7b:2d:86:a8:96:
1d:4e:c0:90:68:32:31:2a:9f:7e:22:02:81:19:2e:
70:24:c6:f2:e1:2c:33:a1:ea:a0:6b:3d:4c:00:e5:
3c:2a:24:d2:cf:ea:ad:fc:54:54:81:e8:9b:40:d2:
56:11:ba:a1:ba:f0:03:57:97:9d:51:b9:80:54:9d:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:67:2E:46:CF:81:F2:19:C7:D9:70:47:6C:44:C0:4C:8A:41:99
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/WVpnLkbPgfIZx9lwR2xEwEyKQZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6900:1ad::/48
2a0b:6903:1ad::/48
Signature Algorithm: sha256WithRSAEncryption
a2:16:5c:87:97:dd:f6:57:c2:24:a7:2b:08:7e:ff:79:89:9f:
d7:8b:09:85:32:b6:09:d1:71:85:bf:45:cb:d3:64:fe:67:40:
8c:8e:d4:bf:04:e7:f0:73:39:0c:ba:8e:2a:fb:81:a3:f0:3a:
8f:7f:c8:11:66:78:f2:b2:bf:26:28:1e:a5:af:53:d3:aa:40:
9d:f0:6c:a7:a7:88:19:87:be:66:ed:d1:d5:51:16:0c:d6:5c:
b1:df:9b:ac:09:e4:48:30:79:a5:ad:3d:8d:4c:37:99:d8:6e:
5d:d8:9c:0c:31:36:51:d6:69:c3:f4:7c:cd:7c:4d:fb:44:52:
b7:8e:9b:ad:14:b7:b7:67:42:98:d8:98:aa:b6:87:bb:b2:11:
99:f4:ba:78:0c:a9:f3:29:f7:10:2c:41:16:35:40:e6:a3:09:
dc:dc:f2:c8:cd:5a:9f:3f:03:f4:b9:3d:b9:01:98:69:2f:d4:
4e:c5:cc:ea:98:38:1c:40:f3:34:bb:f7:0c:77:9e:db:78:f5:
23:9a:8d:39:f4:a7:19:ba:52:3f:02:e7:95:29:9f:50:f0:01:
69:28:d8:83:b1:56:51:ed:b7:67:f5:b0:fe:32:76:34:fe:bb:
e9:d4:49:3f:78:fd:9c:12:d8:63:b7:4c:e3:87:e8:bb:da:90:
ba:7e:18:06
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVtLz9597tINHvkKLASgALUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2
ZTg5ZWUwHhcNMjMwMTAxMTE1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTVhNjcyZTQ2Y2Y4MWYyMTljN2Q5NzA0NzZjNDRjMDRjOGE0MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus4uWLzcA5/snh0AhOKqGVG2TwuG
BujwheN1VuxxVQApqT5tI2PbdyCVGzlyd8hti0e5+NngJ/ox8zV/ZE8WXpUk50uX
CBjskqcKdePv12qUGgiDT/kiFdaqjS0mocD2A/tI2s/Pik4Irl97IV5r4M7Yllt6
gmEqLb/OMYrjWI05y0JZvSExaty6JhwHEB48nHIk5WESy7HPQbvSMN0qMQmcNHx0
9fPYuQ+8Z4K7emVTuFMGuvdam2Xh0Borey2GqJYdTsCQaDIxKp9+IgKBGS5wJMby
4Swzoeqgaz1MAOU8KiTSz+qt/FRUgeibQNJWEbqhuvADV5edUbmAVJ3sxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFlaZy5Gz4HyGcfZcEdsRMBMikGZMB8GA1UdIwQY
MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt
YzM3NzkwZTZkNDgyLzEvV1ZwbkxrYlBnZklaeDlsd1IyeEV3RXlLUVprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy
LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgtpAAGt
AwcAKgtpAwGtMA0GCSqGSIb3DQEBCwUAA4IBAQCiFlyHl932V8IkpysIfv95iZ/X
iwmFMrYJ0XGFv0XL02T+Z0CMjtS/BOfwczkMuo4q+4Gj8DqPf8gRZnjysr8mKB6l
r1PTqkCd8Gynp4gZh75m7dHVURYM1lyx35usCeRIMHmlrT2NTDeZ2G5d2JwMMTZR
1mnD9HzNfE37RFK3jputFLe3Z0KY2Jiqtoe7shGZ9Lp4DKnzKfcQLEEWNUDmownc
3PLIzVqfPwP0uT25AZhpL9ROxczqmDgcQPM0u/cMd57bePUjmo059KcZulI/AueV
KZ9Q8AFpKNiDsVZR7bdn9bD+MnY0/rvp1Ek/eP2cEthjt0zjh+i72pC6fhgG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:07 2024 by rpki-client on console-ams.rpki-client.org