Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6VEvG2e-L-uZCJqLVibBe7SjEMU.roa
File: 6VEvG2e-L-uZCJqLVibBe7SjEMU.roa (raw, json)
Hash identifier: p1q5TZ/hEz7V+Oxc05x6G5405Hi6Wf7D3A9Z4/Q1Jts=
Subject key identifier: E9:51:2F:1B:67:BE:2F:EB:99:08:9A:8B:56:26:C1:7B:B4:A3:10:C5
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA74C1FA549880C6DABCDAE4C37F24
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6VEvG2e-L-uZCJqLVibBe7SjEMU.roa
Signing time: Mon 02 Jan 2023 13:45:00 +0000
ROA not before: Mon 02 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205210
IP address blocks: 2a0f:5707:aa50::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:74:c1:fa:54:98:80:c6:da:bc:da:e4:c3:7f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9512f1b67be2feb99089a8b5626c17bb4a310c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:44:1a:7e:42:15:da:51:63:09:c2:4a:30:
0d:e0:f4:ee:55:7d:4c:c2:0f:fe:64:05:1a:19:4e:
3a:18:aa:e6:06:11:d0:02:3a:2f:d6:51:88:04:55:
18:3e:33:87:b5:29:1c:13:22:bb:ae:99:6b:c4:cd:
88:79:8b:aa:6c:fd:15:63:15:75:5c:d9:3b:c3:50:
53:cc:b4:2a:6e:5c:5e:9f:a4:c4:77:bb:13:4d:ac:
01:ec:7f:9a:94:28:5d:68:a8:16:fb:fc:0b:c0:5c:
a7:ae:19:78:38:f0:09:ff:00:74:85:42:61:30:a2:
53:10:ca:70:24:d3:5d:2a:bb:57:f2:54:7c:0c:d9:
66:aa:a3:ca:c8:8f:52:fa:0e:3f:ef:7e:82:51:d1:
e7:41:85:e4:24:7d:85:9a:df:a7:f5:33:fb:6a:a9:
57:57:dd:66:b2:fe:1d:f2:88:af:e4:48:6d:96:2c:
f6:60:f1:bd:93:15:18:6d:1b:e2:ac:73:ae:31:69:
30:9b:1b:79:04:34:53:1a:40:46:99:aa:12:b4:17:
5c:69:a7:aa:c6:12:da:00:82:b6:77:5b:d2:e8:88:
a3:3f:f6:ae:fe:b4:87:a0:a6:69:2c:83:5b:26:8b:
92:21:98:5b:24:ec:cc:60:25:a3:d0:3a:ee:a2:39:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:2F:1B:67:BE:2F:EB:99:08:9A:8B:56:26:C1:7B:B4:A3:10:C5
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6VEvG2e-L-uZCJqLVibBe7SjEMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa50::/44
Signature Algorithm: sha256WithRSAEncryption
43:92:7f:a9:27:3c:0f:c1:be:ed:a0:42:da:d6:79:71:ab:60:
9f:46:e5:7f:94:74:e9:79:d0:e3:af:89:9a:2b:2d:ed:a6:32:
8c:bd:b6:98:d8:70:2f:a7:76:1d:01:00:ef:c6:48:5d:42:26:
3e:e1:a0:2b:6c:e4:39:08:a8:7f:88:3d:7c:5c:fe:d7:cf:c3:
c8:1c:0b:06:51:be:57:f0:e8:f1:5f:c6:06:de:b0:76:c6:86:
e0:ce:3c:ec:ac:83:57:ab:ad:72:e0:34:e6:a4:67:86:1f:ce:
56:33:2f:05:5d:b7:29:51:57:98:25:5d:6d:03:84:1f:71:1e:
7f:02:56:01:2d:4e:78:a9:80:50:f0:32:49:08:d5:c5:c8:e4:
e6:d6:75:45:6e:17:1b:24:18:d5:71:ad:31:6a:2e:4a:3f:8b:
43:a6:47:2d:80:a4:a1:eb:a6:87:70:e9:8d:3e:d3:d8:2a:4a:
92:49:b1:9c:64:21:2c:cb:69:9f:f6:40:de:57:fe:ee:e3:70:
22:4d:a1:90:58:8b:9b:2a:4f:91:75:55:7e:14:99:31:7c:80:
1c:87:49:30:40:7a:9a:e9:fc:8c:a4:93:db:31:a3:84:6c:ef:
cb:e4:42:d4:93:13:4c:72:77:5d:04:b5:3b:0c:27:ac:cb:54:
9e:95:03:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyunTB+lSYgMbavNrkw38kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTUxMmYxYjY3YmUyZmViOTkwODlhOGI1NjI2YzE3YmI0YTMxMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4REGn5CFdpRYwnCSjAN4PTuVX1M
wg/+ZAUaGU46GKrmBhHQAjov1lGIBFUYPjOHtSkcEyK7rplrxM2IeYuqbP0VYxV1
XNk7w1BTzLQqblxen6TEd7sTTawB7H+alChdaKgW+/wLwFynrhl4OPAJ/wB0hUJh
MKJTEMpwJNNdKrtX8lR8DNlmqqPKyI9S+g4/736CUdHnQYXkJH2Fmt+n9TP7aqlX
V91msv4d8oiv5Ehtliz2YPG9kxUYbRvirHOuMWkwmxt5BDRTGkBGmaoStBdcaaeq
xhLaAIK2d1vS6IijP/au/rSHoKZpLINbJouSIZhbJOzMYCWj0DruojmxrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOlRLxtnvi/rmQiai1YmwXu0oxDFMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvNlZFdkcyZS1MLXVaQ0pxTFZpYkJlN1NqRU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6pQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBDkn+pJzwPwb7toELa1nlxq2CfRuV/lHTpedDj
r4maKy3tpjKMvbaY2HAvp3YdAQDvxkhdQiY+4aArbOQ5CKh/iD18XP7Xz8PIHAsG
Ub5X8OjxX8YG3rB2xobgzjzsrINXq61y4DTmpGeGH85WMy8FXbcpUVeYJV1tA4Qf
cR5/AlYBLU54qYBQ8DJJCNXFyOTm1nVFbhcbJBjVca0xai5KP4tDpkctgKSh66aH
cOmNPtPYKkqSSbGcZCEsy2mf9kDeV/7u43AiTaGQWIubKk+RdVV+FJkxfIAch0kw
QHqa6fyMpJPbMaOEbO/L5ELUkxNMcnddBLU7DCesy1SelQM6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org