Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/ne4-ZiTW51qMgHWJOysJdtZ5FZw.roa
File: ne4-ZiTW51qMgHWJOysJdtZ5FZw.roa (raw, json)
Hash identifier: 5ZdOyVvqXjoE7uZKAXCHf/UAIfFjYGjp7yG9imOcguI=
Subject key identifier: 9D:EE:3E:66:24:D6:E7:5A:8C:80:75:89:3B:2B:09:76:D6:79:15:9C
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 018B19468D317731E0D0CBF462E598F3DA9E
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/ne4-ZiTW51qMgHWJOysJdtZ5FZw.roa
Signing time: Tue 10 Oct 2023 11:08:55 +0000
ROA not before: Tue 10 Oct 2023 11:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210701
IP address blocks: 2a11:4e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:46:8d:31:77:31:e0:d0:cb:f4:62:e5:98:f3:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Oct 10 11:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dee3e6624d6e75a8c8075893b2b0976d679159c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:86:18:eb:1a:18:13:9c:ee:c0:72:9b:d4:
c3:49:34:3d:11:fd:0e:1a:be:93:95:ff:0f:07:74:
fd:9b:5e:ff:4f:06:54:84:e1:61:e0:cf:8d:2e:bd:
23:e7:fb:63:0f:78:60:b7:e8:83:46:d8:5f:44:b1:
fe:81:0c:37:e0:ac:74:99:b9:7e:35:89:46:f3:9b:
ff:68:a5:48:46:70:b2:53:43:97:93:60:6e:3d:33:
f7:ef:d4:81:73:66:9b:40:67:3e:7d:a3:01:03:9a:
d4:28:6a:13:c3:32:bf:c0:db:55:1f:74:e2:86:01:
23:29:32:65:c3:a9:9f:6c:f3:27:94:90:0e:08:9a:
7f:2a:4b:fa:cd:88:8c:e3:5f:b8:50:7d:4b:a1:58:
1d:b3:e8:e6:7a:ed:89:a4:3b:5d:3d:04:29:63:dc:
0b:74:19:1e:a3:07:98:87:f9:5b:09:c0:27:51:c2:
c8:82:39:d6:e9:2d:31:b7:75:8b:e1:14:87:51:a9:
f3:64:35:f6:c6:3d:cd:ad:73:1c:2f:ec:88:e0:03:
57:15:b9:10:6f:d6:9f:b3:2a:31:19:3b:b8:5f:ac:
2b:bb:8c:eb:78:71:2b:c6:4d:d5:61:eb:7d:b6:a3:
e5:98:af:7d:37:10:f8:b1:d5:bf:95:5f:7f:84:1c:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:3E:66:24:D6:E7:5A:8C:80:75:89:3B:2B:09:76:D6:79:15:9C
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/ne4-ZiTW51qMgHWJOysJdtZ5FZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:02:7b:5d:e1:f3:06:ba:1b:ae:c4:6f:92:9a:27:b5:d3:b9:
e3:6a:e7:4e:3b:73:b4:7a:27:12:73:51:99:9e:34:5e:01:9a:
eb:29:dc:41:9f:98:1f:da:72:d1:06:a4:13:86:1e:91:ca:59:
43:87:a1:ba:8d:d1:a5:0f:a0:46:ca:f3:44:69:de:f2:0f:b2:
75:7e:5b:b7:45:b8:8a:c3:dc:65:7d:fe:bc:f4:66:3b:db:6e:
db:3a:ac:c7:f7:b5:ef:89:e0:03:d3:b1:9d:68:cc:1b:2f:23:
6d:89:bd:dc:43:dc:14:ab:85:79:0b:79:88:0f:33:ed:9f:e3:
fb:56:26:93:dc:02:15:41:1e:8c:a0:63:a4:50:87:3f:e5:f9:
a3:9f:2d:6c:16:07:61:95:db:df:e7:7d:fa:fe:56:73:31:6b:
52:5c:5b:68:76:37:62:12:99:e9:ab:3f:30:8a:64:f8:8b:4a:
ae:77:45:93:05:8e:ab:28:1c:3d:ed:f3:27:86:f5:ff:d8:01:
a4:3a:36:41:0c:92:c2:9f:5e:8e:26:24:c0:f6:f1:8e:47:fa:
c8:99:ec:48:b1:c0:b1:c0:b0:95:7d:99:d4:31:41:e9:bc:da:
49:90:e0:4f:42:5f:23:8e:fe:c1:55:af:a3:77:81:3a:d9:d8:
3e:a7:2b:28
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYsZRo0xdzHg0Mv0YuWY89qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm
ZjBlNWIwHhcNMjMxMDEwMTEwODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGVlM2U2NjI0ZDZlNzVhOGM4MDc1ODkzYjJiMDk3NmQ2NzkxNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4eGGOsaGBOc7sBym9TDSTQ9Ef0O
Gr6Tlf8PB3T9m17/TwZUhOFh4M+NLr0j5/tjD3hgt+iDRthfRLH+gQw34Kx0mbl+
NYlG85v/aKVIRnCyU0OXk2BuPTP379SBc2abQGc+faMBA5rUKGoTwzK/wNtVH3Ti
hgEjKTJlw6mfbPMnlJAOCJp/Kkv6zYiM41+4UH1LoVgds+jmeu2JpDtdPQQpY9wL
dBkeoweYh/lbCcAnUcLIgjnW6S0xt3WL4RSHUanzZDX2xj3NrXMcL+yI4ANXFbkQ
b9afsyoxGTu4X6wru4zreHErxk3VYet9tqPlmK99NxD4sdW/lV9/hBwE6wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ3uPmYk1udajIB1iTsrCXbWeRWcMB8GA1UdIwQY
MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt
NmFhYjJiMWI5MjJjLzEvbmU0LVppVFc1MXFNZ0hXSk95c0pkdFo1Rlp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj
LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhFOQDAN
BgkqhkiG9w0BAQsFAAOCAQEASgJ7XeHzBrobrsRvkpontdO542rnTjtztHonEnNR
mZ40XgGa6yncQZ+YH9py0QakE4YekcpZQ4ehuo3RpQ+gRsrzRGne8g+ydX5bt0W4
isPcZX3+vPRmO9tu2zqsx/e174ngA9OxnWjMGy8jbYm93EPcFKuFeQt5iA8z7Z/j
+1Ymk9wCFUEejKBjpFCHP+X5o58tbBYHYZXb3+d9+v5WczFrUlxbaHY3YhKZ6as/
MIpk+ItKrndFkwWOqygcPe3zJ4b1/9gBpDo2QQySwp9ejiYkwPbxjkf6yJnsSLHA
scCwlX2Z1DFB6bzaSZDgT0JfI47+wVWvo3eBOtnYPqcrKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org