Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/0jehdhil7DV-KECt7N05ILDyH7I.roa
File: 0jehdhil7DV-KECt7N05ILDyH7I.roa (raw, json)
Hash identifier: Rfarn8fQxeIo29LYIoW2CyORTHvS1DK1Aq21GF3bSsI=
Subject key identifier: D2:37:A1:76:18:A5:EC:35:7E:28:40:AD:EC:DD:39:20:B0:F2:1F:B2
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018571D7CE87392B502A8E92D5B9AAAE7466
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/0jehdhil7DV-KECt7N05ILDyH7I.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52423
IP address blocks: 2a11:840:29::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:ce:87:39:2b:50:2a:8e:92:d5:b9:aa:ae:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d237a17618a5ec357e2840adecdd3920b0f21fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:c9:22:9c:1c:b8:30:3a:2b:8e:5d:6d:29:
12:c1:90:56:24:57:8d:c3:67:d9:a3:0b:e5:c9:80:
39:3b:97:1c:72:73:a2:10:23:95:19:53:24:c7:cd:
3c:0e:b5:4b:70:37:01:7f:e0:17:66:b3:22:1d:48:
de:d2:32:cb:c5:7c:c0:b7:66:8e:03:b8:ee:c6:d1:
07:52:7b:34:d8:19:09:f4:3b:8e:e9:23:b6:bf:4f:
9f:8a:a3:74:92:1e:7e:a4:56:f1:41:a3:61:7e:56:
af:d5:5f:29:e2:11:51:ae:12:05:62:6a:17:71:d9:
58:14:ea:de:ff:8e:0e:4e:8b:a5:60:6a:14:80:8a:
2c:38:bc:6c:ca:80:9f:eb:02:3b:49:5a:3b:0d:43:
f9:7f:0b:a0:b0:1f:f2:44:7b:74:3e:b7:25:ab:0c:
3e:82:4f:db:56:a9:a3:51:c2:d6:5a:f7:be:f8:92:
54:bf:92:7f:2d:35:07:a6:b6:ae:4d:03:c2:26:60:
b8:26:ed:6a:06:44:6b:3e:c0:97:00:23:cc:6d:67:
66:ff:a2:94:7d:ad:19:16:b1:c7:46:93:60:76:60:
75:3e:26:da:b9:f9:97:69:54:16:fe:72:52:43:11:
b7:77:ce:d7:a8:af:84:35:2b:bc:01:29:3e:24:ea:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:A1:76:18:A5:EC:35:7E:28:40:AD:EC:DD:39:20:B0:F2:1F:B2
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/0jehdhil7DV-KECt7N05ILDyH7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:29::/48
Signature Algorithm: sha256WithRSAEncryption
4f:82:6c:d0:84:ca:fd:9d:29:4d:b9:ae:94:7e:98:44:93:e7:
05:73:ce:a2:02:b3:4c:bb:f1:ad:36:2c:cf:7d:37:99:02:62:
cf:e0:38:10:09:89:d3:a2:a2:2e:55:a6:ee:3d:ea:69:de:70:
f1:b0:cd:34:b0:f8:af:2e:c9:43:4f:6a:6c:7a:08:c9:68:f7:
13:d6:a1:a1:2a:2f:8f:7f:8c:49:50:53:f4:4f:c2:a7:3f:44:
6f:08:01:86:eb:8d:4e:62:dd:71:d5:cf:49:69:f6:e5:0a:1c:
d7:e8:3b:c4:64:80:41:90:59:a4:a2:4d:4f:19:f8:f8:58:4f:
c6:b2:43:0a:32:b7:bd:fe:a2:3e:e6:82:39:c0:b5:95:08:3c:
c9:b7:dc:d4:b1:75:fb:6d:a0:3e:15:19:d1:4a:bb:c1:0c:b4:
ac:9d:56:80:af:7f:9c:af:ef:4e:83:3f:75:ae:eb:71:31:2c:
df:b9:80:40:fe:f7:75:2d:36:1c:57:72:85:a7:56:b8:7d:d7:
3f:99:34:b7:20:49:f3:ea:39:ed:d1:03:28:7d:50:ac:03:04:
db:54:b7:4f:20:13:9a:03:91:3c:09:44:c4:16:5f:1a:77:01:
52:a9:1e:8b:8e:c9:a1:61:d4:27:58:97:23:72:fb:d0:9f:b3:
6c:59:ed:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVx186HOStQKo6S1bmqrnRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjMwMTAyMDkzNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM3YTE3NjE4YTVlYzM1N2UyODQwYWRlY2RkMzkyMGIwZjIxZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTTJIpwcuDA6K45dbSkSwZBWJFeN
w2fZowvlyYA5O5cccnOiECOVGVMkx808DrVLcDcBf+AXZrMiHUje0jLLxXzAt2aO
A7juxtEHUns02BkJ9DuO6SO2v0+fiqN0kh5+pFbxQaNhflav1V8p4hFRrhIFYmoX
cdlYFOre/44OToulYGoUgIosOLxsyoCf6wI7SVo7DUP5fwugsB/yRHt0Prclqww+
gk/bVqmjUcLWWve++JJUv5J/LTUHprauTQPCJmC4Ju1qBkRrPsCXACPMbWdm/6KU
fa0ZFrHHRpNgdmB1PibaufmXaVQW/nJSQxG3d87XqK+ENSu8ASk+JOr16QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNI3oXYYpew1fihArezdOSCw8h+yMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvMGplaGRoaWw3RFYtS0VDdDdOMDVJTER5SDdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAp
MA0GCSqGSIb3DQEBCwUAA4IBAQBPgmzQhMr9nSlNua6UfphEk+cFc86iArNMu/Gt
NizPfTeZAmLP4DgQCYnToqIuVabuPepp3nDxsM00sPivLslDT2psegjJaPcT1qGh
Ki+Pf4xJUFP0T8KnP0RvCAGG641OYt1x1c9JafblChzX6DvEZIBBkFmkok1PGfj4
WE/GskMKMre9/qI+5oI5wLWVCDzJt9zUsXX7baA+FRnRSrvBDLSsnVaAr3+cr+9O
gz91rutxMSzfuYBA/vd1LTYcV3KFp1a4fdc/mTS3IEnz6jnt0QMofVCsAwTbVLdP
IBOaA5E8CUTEFl8adwFSqR6LjsmhYdQnWJcjcvvQn7NsWe0j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org