Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/keqWkKgfcfo6BLIxiiJD9Ynjst4.roa
File: keqWkKgfcfo6BLIxiiJD9Ynjst4.roa (raw, json)
Hash identifier: IfE5yZEQtLXlxwV/yCErSWY4P0qN7b2pqnSGpzY4QNI=
Subject key identifier: 91:EA:96:90:A8:1F:71:FA:3A:04:B2:31:8A:22:43:F5:89:E3:B2:DE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA7EA49EB1EFE1F3414A69DAAFD62A
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/keqWkKgfcfo6BLIxiiJD9Ynjst4.roa
Signing time: Mon 02 Jan 2023 13:45:02 +0000
ROA not before: Mon 02 Jan 2023 13:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208814
IP address blocks: 2a0f:5707:aa10::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:7e:a4:9e:b1:ef:e1:f3:41:4a:69:da:af:d6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ea9690a81f71fa3a04b2318a2243f589e3b2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:a9:05:31:d6:23:a3:37:f4:17:80:fa:9b:
48:04:23:4e:2a:e5:e3:0d:c8:5f:f0:d9:07:73:2c:
5d:4a:06:36:f4:98:51:2b:1f:99:f8:14:36:10:20:
d8:58:d2:be:9c:a3:bc:2c:7d:8c:f0:fd:2f:71:dc:
98:75:e5:5d:db:2b:25:d2:99:32:2f:fc:bc:67:fa:
d7:05:26:2c:e8:c9:4a:9b:15:90:c4:6e:3f:a5:23:
56:b5:16:38:cd:9d:33:62:76:0f:7a:ef:a3:0e:2d:
5a:63:86:d0:21:94:30:d7:7a:3b:9b:62:37:2b:24:
da:dd:fd:cc:2a:d8:69:f1:0f:c2:75:79:a5:fc:10:
74:48:73:84:78:b6:28:de:b2:07:75:cd:f6:b2:aa:
d3:90:88:46:b2:1f:af:47:ce:2d:0d:65:ed:5c:cb:
10:a9:62:1a:cb:d9:82:a3:39:83:85:47:96:8e:be:
06:ef:27:9c:91:67:80:a5:4b:8a:51:71:34:3a:fc:
6a:b3:80:0b:e3:48:d6:34:fe:3c:e2:75:74:18:aa:
61:f3:90:b9:78:52:f7:75:e7:1a:92:f4:e1:e4:a7:
2b:8c:2b:9a:18:ab:c8:81:7d:13:94:ba:66:61:2c:
5f:19:32:a1:a1:b0:27:e3:aa:4a:46:46:00:7d:cf:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:96:90:A8:1F:71:FA:3A:04:B2:31:8A:22:43:F5:89:E3:B2:DE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/keqWkKgfcfo6BLIxiiJD9Ynjst4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa10::/44
Signature Algorithm: sha256WithRSAEncryption
bc:aa:ad:46:84:e9:b1:be:b0:1f:5f:29:db:45:91:9d:4d:7e:
2a:f2:0f:d1:d0:b3:8d:b7:65:13:d0:3f:ae:d8:0a:bd:55:29:
b0:e3:26:b3:32:bc:28:25:6b:ee:e0:14:eb:6e:bb:14:3b:6f:
92:12:ef:09:55:6c:0b:c9:fc:5c:b4:71:3c:63:e2:62:52:fe:
3f:26:97:bc:27:89:11:1d:32:9d:e5:0b:fc:f5:db:04:6f:b4:
7f:b7:4a:f7:cf:34:9a:38:91:63:a3:96:a1:d0:3f:d5:7d:cd:
b8:cc:3f:83:df:c3:e6:52:5d:7d:67:11:a2:a0:2c:ea:86:87:
ea:60:d2:6c:90:7f:fb:6b:97:b4:be:bb:66:3c:0c:8a:0c:29:
9c:75:86:dd:86:80:0d:83:08:4f:8f:79:8c:0e:4a:5d:20:20:
d0:df:6f:6a:8a:65:0f:17:be:a6:dd:77:19:81:cf:68:50:8c:
a3:f3:16:84:90:9b:be:9a:3a:43:6d:03:40:f6:86:33:38:c8:
bb:c8:bf:73:66:cb:aa:6b:43:86:66:71:bf:32:74:bd:9b:7a:
1f:30:a9:51:be:1c:59:01:51:d6:ac:3d:45:fd:d2:e5:7f:3a:
a2:25:f0:d3:f7:a5:cc:7c:08:9e:bb:87:2e:b5:55:9c:70:69:
e2:c3:bb:f1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyun6knrHv4fNBSmnar9YqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWVhOTY5MGE4MWY3MWZhM2EwNGIyMzE4YTIyNDNmNTg5ZTNiMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGOpBTHWI6M39BeA+ptIBCNOKuXj
Dchf8NkHcyxdSgY29JhRKx+Z+BQ2ECDYWNK+nKO8LH2M8P0vcdyYdeVd2ysl0pky
L/y8Z/rXBSYs6MlKmxWQxG4/pSNWtRY4zZ0zYnYPeu+jDi1aY4bQIZQw13o7m2I3
KyTa3f3MKthp8Q/CdXml/BB0SHOEeLYo3rIHdc32sqrTkIhGsh+vR84tDWXtXMsQ
qWIay9mCozmDhUeWjr4G7yeckWeApUuKUXE0Ovxqs4AL40jWNP484nV0GKph85C5
eFL3decakvTh5KcrjCuaGKvIgX0TlLpmYSxfGTKhobAn46pKRkYAfc9akwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJHqlpCoH3H6OgSyMYoiQ/WJ47LeMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEva2VxV2tLZ2ZjZm82QkxJeGlpSkQ5WW5qc3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6oQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC8qq1GhOmxvrAfXynbRZGdTX4q8g/R0LONt2UT
0D+u2Aq9VSmw4yazMrwoJWvu4BTrbrsUO2+SEu8JVWwLyfxctHE8Y+JiUv4/Jpe8
J4kRHTKd5Qv89dsEb7R/t0r3zzSaOJFjo5ah0D/Vfc24zD+D38PmUl19ZxGioCzq
hofqYNJskH/7a5e0vrtmPAyKDCmcdYbdhoANgwhPj3mMDkpdICDQ329qimUPF76m
3XcZgc9oUIyj8xaEkJu+mjpDbQNA9oYzOMi7yL9zZsuqa0OGZnG/MnS9m3ofMKlR
vhxZAVHWrD1F/dLlfzqiJfDT96XMfAieu4cutVWccGniw7vx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org