Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/TvQMIe8m77tbsQZptN9R2Bhz7R8.roa
File: TvQMIe8m77tbsQZptN9R2Bhz7R8.roa (raw, json)
Hash identifier: o2jTA1vzOMlJJIq9rsk3Qtan/6mXeCBFjEvpnA2NMWQ=
Subject key identifier: 4E:F4:0C:21:EF:26:EF:BB:5B:B1:06:69:B4:DF:51:D8:18:73:ED:1F
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F02DD17274C0F679E2FC32DC2434D
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/TvQMIe8m77tbsQZptN9R2Bhz7R8.roa
Signing time: Sun 01 Jan 2023 08:24:52 +0000
ROA not before: Sun 01 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57183
IP address blocks: 2a0e:46c6:900::/40 maxlen: 40
2a0e:46c0::/31 maxlen: 31
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:02:dd:17:27:4c:0f:67:9e:2f:c3:2d:c2:43:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef40c21ef26efbb5bb10669b4df51d81873ed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:66:e8:94:35:a1:34:18:64:06:29:bb:53:
34:be:eb:5a:39:74:b6:f9:d1:a6:3d:b7:ba:be:d1:
41:46:0e:31:dd:a8:f5:6d:cf:92:35:e2:b2:51:26:
c4:eb:de:db:8f:36:2f:40:0f:fd:d8:88:57:05:12:
dd:80:8b:00:02:ac:03:da:69:39:e1:75:b5:df:98:
1b:8a:f3:dd:e4:02:92:91:44:bc:0b:6a:53:9e:22:
58:b8:61:80:ee:57:87:50:7e:2f:33:d1:07:90:8a:
b0:7a:58:71:ee:b8:e9:cd:6e:19:b9:e1:ce:e2:e2:
de:58:70:bd:2c:c9:f3:59:58:a6:54:fd:5d:78:4b:
e7:16:c6:a6:b9:62:e7:dc:62:f4:02:e1:59:e8:67:
1e:9f:34:88:07:1d:97:f8:10:4f:e9:dc:37:db:3d:
8e:b8:0f:5e:2f:b3:fc:e0:d1:ab:c6:74:c0:2a:97:
ae:da:86:f3:61:e1:35:e8:8f:78:b8:90:de:ff:76:
a4:0d:65:a9:be:0b:80:49:a7:60:b0:da:c7:09:35:
f8:5c:f1:f3:85:06:b9:1d:57:87:12:87:ff:4e:4d:
a9:10:6c:34:21:c2:80:58:ae:17:89:b1:54:2b:65:
59:36:46:c9:21:69:b6:ae:ff:af:70:ec:19:67:86:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:0C:21:EF:26:EF:BB:5B:B1:06:69:B4:DF:51:D8:18:73:ED:1F
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/TvQMIe8m77tbsQZptN9R2Bhz7R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c0::/31
2a0e:46c6:900::/40
Signature Algorithm: sha256WithRSAEncryption
71:c3:a3:01:70:36:56:c8:7c:29:4c:00:c8:a5:90:a0:c8:9b:
58:5b:15:9a:03:4f:90:89:f6:bf:d1:2f:62:38:b6:cd:94:ff:
44:99:e2:05:a5:fb:00:61:23:9e:e9:80:5e:49:a9:c0:62:d7:
e5:f9:bc:81:28:07:53:fc:7f:96:7c:99:5f:53:62:9e:c9:a3:
99:80:6c:d5:5a:0b:88:96:80:86:aa:c2:f8:da:2f:1c:15:32:
85:c3:2b:72:3a:c9:41:76:8b:36:35:7f:c6:4b:87:b2:79:8c:
d9:e6:66:10:2c:e0:1e:d6:d4:49:c1:be:5f:bf:8e:f8:82:28:
2a:d4:70:91:65:33:2b:3c:9c:bb:ac:d6:1f:64:49:60:1f:59:
39:84:c8:b4:9b:c3:9e:99:37:46:65:09:cb:5a:0d:91:28:21:
29:fc:b3:88:0d:5c:b8:e6:5f:a6:c6:9d:a7:95:c4:db:40:97:
df:fd:b6:0a:3a:37:0a:09:a4:1d:b3:d6:15:94:40:a6:65:b3:
18:f3:98:98:0c:32:2b:04:10:f0:22:77:ae:5b:ce:1d:fb:76:
d9:d0:b7:b9:9b:36:e0:53:58:26:69:60:ca:76:1b:54:a2:9d:
b0:c9:80:7a:cd:22:73:e4:0a:9b:66:40:4a:00:d1:af:bf:77:
07:e8:8d:45
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYVsbwLdFydMD2eeL8MtwkNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjMwMTAxMDgyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWY0MGMyMWVmMjZlZmJiNWJiMTA2NjliNGRmNTFkODE4NzNlZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN1m6JQ1oTQYZAYpu1M0vutaOXS2
+dGmPbe6vtFBRg4x3aj1bc+SNeKyUSbE697bjzYvQA/92IhXBRLdgIsAAqwD2mk5
4XW135gbivPd5AKSkUS8C2pTniJYuGGA7leHUH4vM9EHkIqwelhx7rjpzW4ZueHO
4uLeWHC9LMnzWVimVP1deEvnFsamuWLn3GL0AuFZ6GcenzSIBx2X+BBP6dw32z2O
uA9eL7P84NGrxnTAKpeu2obzYeE16I94uJDe/3akDWWpvguASadgsNrHCTX4XPHz
hQa5HVeHEof/Tk2pEGw0IcKAWK4XibFUK2VZNkbJIWm2rv+vcOwZZ4ZsmwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFE70DCHvJu+7W7EGabTfUdgYc+0fMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvVHZRTUllOG03N3Ric1FacHROOVIyQmh6N1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwUBKg5GwAMG
ACoORsYJMA0GCSqGSIb3DQEBCwUAA4IBAQBxw6MBcDZWyHwpTADIpZCgyJtYWxWa
A0+Qifa/0S9iOLbNlP9EmeIFpfsAYSOe6YBeSanAYtfl+byBKAdT/H+WfJlfU2Ke
yaOZgGzVWguIloCGqsL42i8cFTKFwytyOslBdos2NX/GS4eyeYzZ5mYQLOAe1tRJ
wb5fv474gigq1HCRZTMrPJy7rNYfZElgH1k5hMi0m8OemTdGZQnLWg2RKCEp/LOI
DVy45l+mxp2nlcTbQJff/bYKOjcKCaQds9YVlECmZbMY85iYDDIrBBDwIneuW84d
+3bZ0Le5mzbgU1gmaWDKdhtUop2wyYB6zSJz5AqbZkBKANGvv3cH6I1F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:15 2024 by rpki-client on console-fra.rpki-client.org