Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9Eju-VIqFRti1yJXRalXIV81D3o.roa
File: 9Eju-VIqFRti1yJXRalXIV81D3o.roa (raw, json)
Hash identifier: tBZVUiKNsCfDiOaaNR/d/HDPYIxKL86UsJ7LN5emHq4=
Subject key identifier: F4:48:EE:F9:52:2A:15:1B:62:D7:22:57:45:A9:57:21:5F:35:0F:7A
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0189635D148FB113105A63117630FC8EA5FD
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9Eju-VIqFRti1yJXRalXIV81D3o.roa
Signing time: Mon 17 Jul 2023 10:19:51 +0000
ROA not before: Mon 17 Jul 2023 10:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51087
IP address blocks: 2a0f:5707:fa00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:5d:14:8f:b1:13:10:5a:63:11:76:30:fc:8e:a5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jul 17 10:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f448eef9522a151b62d7225745a957215f350f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:70:88:86:85:79:18:b5:51:16:ca:8b:fa:
7e:ea:9f:d8:1c:e3:63:0d:30:57:ca:0a:51:9c:a4:
22:99:f4:aa:34:e5:da:88:bf:51:b6:b1:b8:bd:a5:
e9:72:73:34:10:12:26:22:a9:bd:4d:35:92:9e:a9:
ae:0c:7b:76:90:7b:ef:3a:b9:8b:ce:e7:ee:88:d0:
27:c3:d4:5c:79:c0:c1:8b:77:14:17:9f:68:28:6e:
30:48:e6:bd:5c:4c:12:b0:93:a1:7d:7a:28:2a:42:
5f:d3:60:66:e1:d1:8d:84:4e:a2:81:d7:60:32:b1:
f2:89:e1:f9:ae:59:20:6f:57:5f:56:d4:f0:8f:e7:
dc:af:8c:5c:df:fa:06:7d:5d:66:08:30:0e:90:79:
29:df:da:4b:d0:b1:40:5b:c8:50:1d:20:98:1b:69:
7f:5b:04:7d:8d:86:11:3d:fe:26:48:c4:c9:df:d3:
9c:21:31:5a:a1:ef:4d:86:e5:75:a2:bc:97:88:13:
53:91:31:92:f6:86:d5:c1:29:ed:40:0e:6c:97:7a:
4a:bf:35:60:61:28:bb:19:e4:ae:e8:b3:28:9a:dc:
af:d1:a3:ff:cd:0a:34:88:4a:d7:b9:b6:a2:95:37:
71:3f:87:62:69:24:af:2a:e9:b9:31:29:7b:a0:35:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:EE:F9:52:2A:15:1B:62:D7:22:57:45:A9:57:21:5F:35:0F:7A
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9Eju-VIqFRti1yJXRalXIV81D3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:71:21:1b:0f:de:33:d9:18:fb:cd:e4:95:61:67:ab:d7:d4:
2c:15:14:0a:b2:19:a7:da:89:7e:c6:f1:1f:9c:30:e3:4e:fa:
0d:8e:0f:ec:dd:88:59:85:e6:31:01:e1:ee:ad:9d:1a:29:ef:
2b:75:26:45:93:8f:ae:88:78:eb:d2:ff:19:36:28:a4:28:64:
12:15:f2:37:30:5f:21:10:5a:26:3b:46:5f:9f:e4:6d:85:75:
e2:17:85:04:62:e6:7d:25:80:b4:89:46:a2:70:69:36:1a:18:
00:2f:34:e0:7f:a2:5b:f1:2b:5b:27:da:25:93:e4:57:d6:d4:
9e:4b:c3:49:d0:6b:38:52:e7:8e:b6:03:b4:dd:9d:b3:11:02:
a8:27:6f:92:73:8b:f0:b2:40:76:e5:23:38:df:34:89:e0:ad:
7d:3d:ae:dc:9b:b0:16:42:0b:67:b7:f8:2b:6e:35:2c:73:5f:
8f:67:9e:c3:fe:4f:07:46:76:07:c5:3c:44:8f:0e:1e:44:22:
1f:fc:84:b8:3f:6a:b1:1a:e5:2a:c9:d1:94:86:1b:ec:d2:fc:
3d:64:83:65:8a:c9:95:03:38:30:22:62:82:1a:37:87:b1:5b:
73:be:41:2d:b1:5c:a7:d3:14:fd:0e:7e:06:9b:a0:50:f7:72:
46:95:a0:ea
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYljXRSPsRMQWmMRdjD8jqX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwNzE3MTAxOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ4ZWVmOTUyMmExNTFiNjJkNzIyNTc0NWE5NTcyMTVmMzUwZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFwiIaFeRi1URbKi/p+6p/YHONj
DTBXygpRnKQimfSqNOXaiL9RtrG4vaXpcnM0EBImIqm9TTWSnqmuDHt2kHvvOrmL
zufuiNAnw9RcecDBi3cUF59oKG4wSOa9XEwSsJOhfXooKkJf02Bm4dGNhE6igddg
MrHyieH5rlkgb1dfVtTwj+fcr4xc3/oGfV1mCDAOkHkp39pL0LFAW8hQHSCYG2l/
WwR9jYYRPf4mSMTJ39OcITFaoe9NhuV1oryXiBNTkTGS9obVwSntQA5sl3pKvzVg
YSi7GeSu6LMomtyv0aP/zQo0iErXubailTdxP4diaSSvKum5MSl7oDVCfQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPRI7vlSKhUbYtciV0WpVyFfNQ96MB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvOUVqdS1WSXFGUnRpMXlKWFJhbFhJVjgxRDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg9XB/ow
DQYJKoZIhvcNAQELBQADggEBAD9xIRsP3jPZGPvN5JVhZ6vX1CwVFAqyGafaiX7G
8R+cMONO+g2OD+zdiFmF5jEB4e6tnRop7yt1JkWTj66IeOvS/xk2KKQoZBIV8jcw
XyEQWiY7Rl+f5G2FdeIXhQRi5n0lgLSJRqJwaTYaGAAvNOB/olvxK1sn2iWT5FfW
1J5Lw0nQazhS5462A7TdnbMRAqgnb5Jzi/CyQHblIzjfNIngrX09rtybsBZCC2e3
+CtuNSxzX49nnsP+TwdGdgfFPESPDh5EIh/8hLg/arEa5SrJ0ZSGG+zS/D1kg2WK
yZUDODAiYoIaN4exW3O+QS2xXKfTFP0OfgaboFD3ckaVoOo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org