Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/wKoK8zet9xaTKpEjXMF8gFWH4Kk.roa
File: wKoK8zet9xaTKpEjXMF8gFWH4Kk.roa (raw, json)
Hash identifier: 7EO9qFDY79d7GNp6lGEvy2WI0UEcLBGOlcv1ZokWgpk=
Subject key identifier: C0:AA:0A:F3:37:AD:F7:16:93:2A:91:23:5C:C1:7C:80:55:87:E0:A9
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 018CC8DDF95D266563241EBE433B94AE4234
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/wKoK8zet9xaTKpEjXMF8gFWH4Kk.roa
Signing time: Tue 02 Jan 2024 06:30:39 +0000
ROA not before: Tue 02 Jan 2024 06:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201121
IP address blocks: 2a13:4440::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:f9:5d:26:65:63:24:1e:be:43:3b:94:ae:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jan 2 06:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0aa0af337adf716932a91235cc17c805587e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:5c:1a:f9:88:6f:5d:3a:c1:7b:ce:ab:aa:
74:a6:d9:e2:71:b7:6a:d2:42:55:8c:09:ac:2d:19:
8a:0d:3e:2f:e6:45:19:df:84:3f:3d:52:e3:63:2a:
cc:ab:e9:ab:ea:cb:66:a8:bf:75:63:23:f1:de:e8:
a3:c7:47:3d:e8:a1:85:9c:2d:fe:2b:fc:38:d1:e2:
d1:84:89:f6:69:54:8c:18:6c:f0:04:1c:3a:58:d9:
0b:7e:d8:c8:7a:44:ee:43:06:80:f9:a1:ac:fc:84:
0e:cd:7f:21:ea:b2:bd:c5:03:6b:57:db:3c:36:36:
1b:18:ab:cc:5b:14:47:0e:10:62:fc:d5:6e:79:d9:
d2:ef:2e:6a:68:e9:16:25:28:b0:a1:f3:30:70:dd:
52:f2:d3:1e:fb:55:fd:ea:92:45:e7:59:e3:ac:0f:
fa:a4:71:d5:d7:7a:f3:92:fb:84:b1:52:48:2e:46:
d0:c2:d8:33:c5:09:ca:7d:4c:4d:e2:7d:51:1f:94:
da:1b:bb:30:f7:e9:a3:16:87:13:7c:45:fc:84:10:
e0:53:43:8e:90:02:bd:79:e1:c8:e9:17:26:eb:62:
b7:c8:57:0c:32:34:a2:6a:c0:d0:87:41:2f:c2:ce:
59:ac:f2:a0:1d:4c:1e:8d:0b:9e:72:8c:cb:77:c6:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:0A:F3:37:AD:F7:16:93:2A:91:23:5C:C1:7C:80:55:87:E0:A9
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/wKoK8zet9xaTKpEjXMF8gFWH4Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4440::/29
Signature Algorithm: sha256WithRSAEncryption
9f:ea:e4:d6:06:a4:f6:4f:58:b8:58:c1:42:67:b7:2d:14:b0:
ef:b3:8c:e1:e5:e3:5d:82:51:d6:ce:b3:72:02:72:36:94:3a:
c9:1a:f2:ae:79:dc:58:5b:1f:23:b4:d3:c8:28:e7:7f:46:fc:
6f:6a:65:5f:51:3e:32:e5:2c:a6:ec:25:7f:dc:84:09:32:c0:
84:50:46:70:6f:92:6e:99:8e:63:bd:da:56:19:67:a3:70:3a:
6a:93:af:52:96:21:3d:e7:8f:4d:9d:9b:c3:21:a9:7f:36:f0:
19:0a:50:31:8a:fa:5d:fa:d1:0a:5f:82:e3:17:f0:5e:db:1b:
30:bf:bf:dc:65:7a:10:07:27:2a:c6:87:41:46:52:21:c1:0c:
ea:49:dc:01:90:b1:d2:14:ec:d4:40:a0:ea:b5:02:aa:25:6a:
80:10:63:cb:01:0f:56:21:b0:da:85:d3:2a:e2:f4:d0:fa:03:
78:55:35:81:bf:a1:3d:68:e4:cd:d8:6c:d8:5f:6b:11:74:2e:
99:4c:eb:25:ae:f6:a8:a3:21:ee:64:d0:fd:c7:83:7a:fb:cd:
af:59:62:c0:71:31:4f:f5:8c:6c:25:ac:8d:79:ab:82:cf:93:
74:3d:85:a6:21:6a:3a:f6:3e:10:22:05:e6:38:e2:bb:40:56:
18:c5:66:b1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzI3fldJmVjJB6+QzuUrkI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzFjZTIwODY4MDVmOTEyZjg1MTJiNzljNWU2NmE5Yzlm
NGQ0ZDIwHhcNMjQwMTAyMDYzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGFhMGFmMzM3YWRmNzE2OTMyYTkxMjM1Y2MxN2M4MDU1ODdlMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJNcGvmIb106wXvOq6p0ptnicbdq
0kJVjAmsLRmKDT4v5kUZ34Q/PVLjYyrMq+mr6stmqL91YyPx3uijx0c96KGFnC3+
K/w40eLRhIn2aVSMGGzwBBw6WNkLftjIekTuQwaA+aGs/IQOzX8h6rK9xQNrV9s8
NjYbGKvMWxRHDhBi/NVuednS7y5qaOkWJSiwofMwcN1S8tMe+1X96pJF51njrA/6
pHHV13rzkvuEsVJILkbQwtgzxQnKfUxN4n1RH5TaG7sw9+mjFocTfEX8hBDgU0OO
kAK9eeHI6Rcm62K3yFcMMjSiasDQh0Evws5ZrPKgHUwejQuecozLd8YqbwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMCqCvM3rfcWkyqRI1zBfIBVh+CpMB8GA1UdIwQY
MBaAFONxziCGgF+RL4USt5xeZqnJ9NTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAt
NzM1OTBhYTI5MGYxLzEvd0tvSzh6ZXQ5eGFUS3BFalhNRjhnRldINEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ZGJkYWYtNTQ5NS00Y2M1LWI3NzAtNzM1OTBhYTI5MGYx
LzEvNDNIT0lJYUFYNUV2aFJLM25GNW1xY24wMU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNEQDAN
BgkqhkiG9w0BAQsFAAOCAQEAn+rk1gak9k9YuFjBQme3LRSw77OM4eXjXYJR1s6z
cgJyNpQ6yRryrnncWFsfI7TTyCjnf0b8b2plX1E+MuUspuwlf9yECTLAhFBGcG+S
bpmOY73aVhlno3A6apOvUpYhPeePTZ2bwyGpfzbwGQpQMYr6XfrRCl+C4xfwXtsb
ML+/3GV6EAcnKsaHQUZSIcEM6kncAZCx0hTs1ECg6rUCqiVqgBBjywEPViGw2oXT
KuL00PoDeFU1gb+hPWjkzdhs2F9rEXQumUzrJa72qKMh7mTQ/ceDevvNr1liwHEx
T/WMbCWsjXmrgs+TdD2FpiFqOvY+ECIF5jjiu0BWGMVmsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org