Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Rogx3Vqlv_3iq8d0F7HuqC-3hV0.roa
File: Rogx3Vqlv_3iq8d0F7HuqC-3hV0.roa (raw, json)
Hash identifier: fwT6eh+d7erbKboTpncgB+ZMRBVZJ0TyD78fBdDO7KY=
Subject key identifier: 46:88:31:DD:5A:A5:BF:FD:E2:AB:C7:74:17:B1:EE:A8:2F:B7:85:5D
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 018EA5881E13A9F1BE7F20F88FCC888BFB64
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Rogx3Vqlv_3iq8d0F7HuqC-3hV0.roa
Signing time: Wed 03 Apr 2024 19:55:44 +0000
ROA not before: Wed 03 Apr 2024 19:55:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a13:5040::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 06 Apr 2024 17:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:88:1e:13:a9:f1:be:7f:20:f8:8f:cc:88:8b:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Apr 3 19:55:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=468831dd5aa5bffde2abc77417b1eea82fb7855d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:95:9e:94:10:c1:9b:35:9c:89:e5:b3:a6:d4:
fb:32:80:22:cb:1f:54:8e:f8:58:47:30:a7:f9:a9:
97:ce:d8:ca:e0:4a:01:15:16:73:36:11:1a:7f:4d:
4b:82:91:8b:64:8e:b2:ec:15:c0:87:8a:8f:0b:9e:
9f:39:70:51:05:54:7a:14:f7:12:c9:dc:7f:54:c8:
d4:aa:ff:fc:09:4d:56:04:d3:ed:fb:4c:69:0b:de:
31:cf:e8:e6:36:1d:a8:be:9c:c5:36:b8:49:61:b9:
4e:83:93:e4:aa:cc:98:8f:35:eb:72:2a:61:72:03:
32:a3:bd:73:af:d6:63:ba:40:98:74:fe:4f:99:cf:
ac:8a:82:76:0f:f6:0a:af:ff:b5:ec:42:98:b0:90:
19:61:8f:03:d1:32:34:a6:b1:9c:f7:5e:1b:ce:7a:
0e:3d:70:27:1e:0e:75:27:b7:56:63:33:40:56:16:
06:4f:18:b1:52:7c:f4:aa:3e:ea:d6:a8:89:2a:7f:
49:3f:24:07:ff:64:2b:80:64:c4:7e:38:51:86:1e:
e8:45:60:bd:fd:96:3e:98:aa:58:ff:a9:fa:b7:b4:
46:38:b0:2b:39:97:6c:9a:88:1a:f1:0f:ee:ac:0d:
92:68:8d:9c:25:6f:04:c1:b3:90:27:35:9a:1a:f5:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:88:31:DD:5A:A5:BF:FD:E2:AB:C7:74:17:B1:EE:A8:2F:B7:85:5D
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/Rogx3Vqlv_3iq8d0F7HuqC-3hV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5040::/29
Signature Algorithm: sha256WithRSAEncryption
7b:74:1d:43:97:9e:e2:6a:1f:0e:6b:9d:42:b5:d1:6c:e6:63:
fa:71:0a:1a:93:b8:11:22:e7:59:74:c1:7e:4b:a6:a4:69:76:
6f:04:ed:d2:6a:5b:d5:fb:10:b1:23:16:73:fd:04:b5:10:4d:
fa:db:3f:5e:c2:1a:ab:19:af:f7:c5:33:4c:22:11:ce:45:45:
b3:bb:93:7b:38:92:87:0b:4a:d0:ed:f2:b4:dc:51:04:a1:cd:
cf:5c:89:bb:19:ed:00:c1:a6:de:e8:15:6e:01:c6:b8:e7:1a:
5c:da:d2:7b:32:58:25:93:fe:50:0d:cf:ff:78:ac:3c:f6:70:
16:6a:23:9f:72:bc:aa:93:fb:35:aa:66:bb:a4:27:44:0b:b3:
5b:79:b4:c9:8c:17:90:04:be:37:72:fe:44:6c:6d:4c:b7:95:
79:45:05:9b:c4:ab:49:b4:43:34:2e:e4:b8:ac:e6:0c:35:95:
70:29:a6:75:f3:06:a0:3e:f0:5f:63:b6:7d:aa:2c:54:0a:af:
7a:20:5f:1b:44:bc:61:dd:3e:c8:9a:71:06:c5:d4:23:f1:6c:
00:5c:5d:09:66:c0:12:7d:83:e7:98:d1:74:e4:ad:c2:3a:fb:
e5:cb:0f:bb:dc:87:e0:be:57:ac:ef:96:be:86:94:cf:cd:af:
df:89:d8:b0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY6liB4TqfG+fyD4j8yIi/tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjljZjIzZmM5Y2U2ZTJiOGMzOTMyM2QyNzBjZTUyZTg5
Mzg3MDIwHhcNMjQwNDAzMTk1NTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njg4MzFkZDVhYTViZmZkZTJhYmM3NzQxN2IxZWVhODJmYjc4NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JWelBDBmzWcieWzptT7MoAiyx9U
jvhYRzCn+amXztjK4EoBFRZzNhEaf01LgpGLZI6y7BXAh4qPC56fOXBRBVR6FPcS
ydx/VMjUqv/8CU1WBNPt+0xpC94xz+jmNh2ovpzFNrhJYblOg5PkqsyYjzXrciph
cgMyo71zr9ZjukCYdP5Pmc+sioJ2D/YKr/+17EKYsJAZYY8D0TI0prGc914bznoO
PXAnHg51J7dWYzNAVhYGTxixUnz0qj7q1qiJKn9JPyQH/2QrgGTEfjhRhh7oRWC9
/ZY+mKpY/6n6t7RGOLArOZdsmoga8Q/urA2SaI2cJW8EwbOQJzWaGvVp5QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEaIMd1apb/94qvHdBex7qgvt4VdMB8GA1UdIwQY
MBaAFPspzyP8nObiuMOTI9JwzlLok4cCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15blBJX3ljNXVLNHc1TWowbkRPVXVpVGh3SS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRk
LTA3NmJmMDJkY2RkOS8xL1JvZ3gzVnFsdl8zaXE4ZDBGN0h1cUMtM2hWMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRkLTA3NmJmMDJkY2Rk
OS8xLzEteW5QSV95YzV1SzR3NU1qMG5ET1V1aVRod0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqE1BA
MA0GCSqGSIb3DQEBCwUAA4IBAQB7dB1Dl57iah8Oa51CtdFs5mP6cQoak7gRIudZ
dMF+S6akaXZvBO3SalvV+xCxIxZz/QS1EE362z9ewhqrGa/3xTNMIhHORUWzu5N7
OJKHC0rQ7fK03FEEoc3PXIm7Ge0Awabe6BVuAca45xpc2tJ7Mlglk/5QDc//eKw8
9nAWaiOfcryqk/s1qma7pCdEC7NbebTJjBeQBL43cv5EbG1Mt5V5RQWbxKtJtEM0
LuS4rOYMNZVwKaZ18wagPvBfY7Z9qixUCq96IF8bRLxh3T7ImnEGxdQj8WwAXF0J
ZsASfYPnmNF05K3COvvlyw+73Ifgvles75a+hpTPza/fidiw
-----END CERTIFICATE-----
Generated at Sat Apr 6 21:46:03 2024 by rpki-client on console-fra.rpki-client.org