Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/aKvj4XlZk6tHHxM29V8vmx9LKLI.roa
File: aKvj4XlZk6tHHxM29V8vmx9LKLI.roa (raw, json)
Hash identifier: 9OAnu+gA/Sg+08efmOf2ER7VBdO7FT3im7aA6fNqaP4=
Subject key identifier: 68:AB:E3:E1:79:59:93:AB:47:1F:13:36:F5:5F:2F:9B:1F:4B:28:B2
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018C8D8B7F2218AE2236DBF932765568D5BC
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/aKvj4XlZk6tHHxM29V8vmx9LKLI.roa
Signing time: Thu 21 Dec 2023 18:02:58 +0000
ROA not before: Thu 21 Dec 2023 18:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208302
IP address blocks: 2a0e:46c6:600::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:8b:7f:22:18:ae:22:36:db:f9:32:76:55:68:d5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Dec 21 18:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68abe3e1795993ab471f1336f55f2f9b1f4b28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bc:d7:5a:86:40:4f:52:cf:ac:0b:2b:90:6a:
8a:12:de:86:a3:e3:7b:e8:88:cc:ea:1d:41:09:5d:
5f:2a:3e:a2:aa:2f:60:fb:e6:cd:6b:a8:e0:87:45:
ef:8c:69:b6:3c:2a:d0:e6:60:0a:48:ec:6e:f9:34:
66:35:ef:1f:48:39:2c:8c:53:6c:c6:0b:e0:77:49:
7c:4b:0b:83:0e:93:17:b6:d0:78:0e:e0:ef:07:63:
c0:97:ae:2b:e2:15:b4:08:df:ad:f6:92:8b:b5:c7:
6f:9e:c6:e1:57:e7:02:bb:c7:2b:99:dd:95:ad:b9:
9b:46:7f:f3:19:b8:e2:08:9e:9c:8e:c2:db:38:4a:
e3:0c:8f:61:9a:17:07:e1:25:80:87:c6:0b:c2:0b:
ff:1c:23:6c:6c:c7:0d:81:42:56:59:3c:79:3e:f2:
a5:5a:97:19:11:48:9b:9e:e6:d0:86:21:82:a2:25:
e9:05:88:46:e5:c7:6d:e4:9d:1d:b4:1a:56:09:04:
ca:0d:ae:26:e9:a9:39:38:3f:63:f7:ce:f7:f8:3d:
19:8e:4c:e6:5b:57:51:a5:06:2c:1e:67:00:38:d1:
6c:e1:91:df:46:52:b1:ba:04:d7:f3:5f:76:e4:8b:
ea:d6:2d:58:63:fd:0f:4a:88:50:8f:2d:63:85:20:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:E3:E1:79:59:93:AB:47:1F:13:36:F5:5F:2F:9B:1F:4B:28:B2
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/aKvj4XlZk6tHHxM29V8vmx9LKLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c6:600::/40
Signature Algorithm: sha256WithRSAEncryption
7d:b0:1b:68:d2:a8:af:41:d5:77:9c:86:d2:f5:5f:b1:d0:4c:
63:c7:e3:90:b1:e6:bc:f8:a8:e3:d6:20:19:7e:d5:cc:0c:98:
5f:ad:5c:58:ff:a3:13:0a:f4:22:8a:f8:e9:d5:f4:3e:d9:dc:
f9:c8:3f:12:08:bf:ee:76:d6:19:5b:cb:0f:2a:c3:9c:21:ec:
c1:c2:16:47:ef:a7:f6:5a:a9:36:25:6c:7c:44:aa:be:39:da:
93:c8:0e:94:f7:ff:08:63:67:0c:59:e2:58:17:e6:95:a3:89:
1a:af:3f:d2:99:19:34:f5:92:d6:80:b8:cb:3f:64:12:d1:f7:
8e:2e:39:26:a4:d2:57:7a:99:4a:e6:9f:08:80:d0:17:86:3f:
00:8b:46:bf:11:6a:2c:68:a9:f7:af:74:de:1f:e6:36:a7:6c:
39:2f:ce:99:d0:d5:71:ac:73:de:14:64:b5:dc:30:d6:28:ad:
8f:bf:b9:72:09:b2:93:43:fa:10:ab:d5:41:84:77:a3:02:3c:
a5:76:49:e5:96:d7:0a:bb:ce:1e:3c:10:94:90:19:29:1e:d3:
47:70:22:36:57:f0:a4:56:90:3f:7e:f9:c7:dc:bf:ee:ea:79:
ec:f2:a1:8e:7c:b9:f0:66:ea:b5:61:b7:d0:53:b8:81:f9:24:
a1:9b:82:c5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYyNi38iGK4iNtv5MnZVaNW8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjMxMjIxMTgwMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGFiZTNlMTc5NTk5M2FiNDcxZjEzMzZmNTVmMmY5YjFmNGIyOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrzXWoZAT1LPrAsrkGqKEt6Go+N7
6IjM6h1BCV1fKj6iqi9g++bNa6jgh0XvjGm2PCrQ5mAKSOxu+TRmNe8fSDksjFNs
xgvgd0l8SwuDDpMXttB4DuDvB2PAl64r4hW0CN+t9pKLtcdvnsbhV+cCu8crmd2V
rbmbRn/zGbjiCJ6cjsLbOErjDI9hmhcH4SWAh8YLwgv/HCNsbMcNgUJWWTx5PvKl
WpcZEUibnubQhiGCoiXpBYhG5cdt5J0dtBpWCQTKDa4m6ak5OD9j9873+D0Zjkzm
W1dRpQYsHmcAONFs4ZHfRlKxugTX81925Ivq1i1YY/0PSohQjy1jhSBaiwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGir4+F5WZOrRx8TNvVfL5sfSyiyMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvYUt2ajRYbFprNnRISHhNMjlWOHZteDlMS0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GxgYw
DQYJKoZIhvcNAQELBQADggEBAH2wG2jSqK9B1XechtL1X7HQTGPH45Cx5rz4qOPW
IBl+1cwMmF+tXFj/oxMK9CKK+OnV9D7Z3PnIPxIIv+521hlbyw8qw5wh7MHCFkfv
p/ZaqTYlbHxEqr452pPIDpT3/whjZwxZ4lgX5pWjiRqvP9KZGTT1ktaAuMs/ZBLR
944uOSak0ld6mUrmnwiA0BeGPwCLRr8RaixoqfevdN4f5janbDkvzpnQ1XGsc94U
ZLXcMNYorY+/uXIJspND+hCr1UGEd6MCPKV2SeWW1wq7zh48EJSQGSke00dwIjZX
8KRWkD9++cfcv+7qeezyoY58ufBm6rVht9BTuIH5JKGbgsU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org