Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/E6I8VtmIOZ77qXVPZYrelXrKGDE.roa
File: E6I8VtmIOZ77qXVPZYrelXrKGDE.roa (raw, json)
Hash identifier: HvxrQzkqNSjU0LT3jgyugHkGVVI6R1Loy90Zj5XCQWI=
Subject key identifier: 13:A2:3C:56:D9:88:39:9E:FB:A9:75:4F:65:8A:DE:95:7A:CA:18:31
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 0187DC08E4B5F5E531B76715CE8BEB03CCB5
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/E6I8VtmIOZ77qXVPZYrelXrKGDE.roa
Signing time: Tue 02 May 2023 10:36:22 +0000
ROA not before: Tue 02 May 2023 10:36:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a0b:f7c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 28 Nov 2023 18:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:08:e4:b5:f5:e5:31:b7:67:15:ce:8b:eb:03:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: May 2 10:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13a23c56d988399efba9754f658ade957aca1831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:3d:bd:b2:aa:e9:64:8f:de:24:49:9e:77:
06:3a:db:a5:de:1f:3a:48:41:63:84:d3:db:92:28:
27:21:fc:81:f1:0a:59:d3:ad:88:d2:c7:74:20:48:
9b:a0:e9:c4:bd:d2:be:03:5a:e6:d0:5f:46:9c:d3:
c2:4e:89:3e:e3:90:32:81:89:8b:98:94:9a:07:da:
84:23:90:02:74:ba:cd:f3:f5:3a:08:79:59:10:2a:
69:44:20:b8:d5:cd:55:e7:5b:73:4a:01:c0:a7:39:
f6:c7:be:61:12:95:52:1f:6a:f5:7b:04:88:89:d8:
38:7e:1e:16:4b:89:e4:aa:2e:41:b0:23:78:63:99:
61:1c:ef:6a:96:dc:24:e8:89:9a:f7:1d:cb:d6:18:
a6:06:38:1e:92:99:cf:44:d3:9a:77:a8:8c:f2:e9:
c9:e8:75:af:4b:a8:1b:ef:6c:40:e5:a9:9e:72:3e:
f4:36:be:db:79:ad:6a:e8:03:3b:5d:5f:62:eb:b7:
43:3f:fc:7f:f5:7b:75:5f:17:a7:51:6d:82:01:77:
95:91:8a:1f:d3:c9:fc:97:30:e0:79:af:fa:7f:ff:
46:80:bc:53:a7:58:8c:08:aa:44:b1:f7:36:e2:18:
91:ff:81:d8:99:8d:67:d2:5c:e1:52:5d:95:d8:f7:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:3C:56:D9:88:39:9E:FB:A9:75:4F:65:8A:DE:95:7A:CA:18:31
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/E6I8VtmIOZ77qXVPZYrelXrKGDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
93:50:b2:b6:e3:4d:36:42:7e:a7:93:b4:a7:a4:ba:69:9b:08:
89:2c:0e:e6:3e:f0:ac:1a:07:df:f3:05:15:0b:77:4e:bc:02:
9a:be:2d:87:a1:82:7b:41:e4:8a:f7:1b:68:28:b4:4c:5a:19:
0b:23:e8:fe:6c:db:29:87:81:c6:4b:8c:72:b3:cb:bf:b2:fe:
8f:bd:22:a3:07:ce:24:a7:ed:e3:dd:e3:bf:08:53:4c:59:7b:
97:80:aa:6d:5c:1d:b0:5c:d0:cc:0e:22:f1:6a:d7:e6:c3:bc:
9a:72:21:b1:f9:4e:46:2c:8a:be:35:b9:97:44:a5:f7:9c:6b:
2e:8f:b5:16:00:56:54:01:99:65:92:0c:f7:42:cc:77:53:ff:
79:6d:d9:6a:98:9f:7c:90:7d:c6:b2:36:e4:27:3c:71:fa:3f:
2e:55:d4:e9:dc:a2:20:c8:66:cb:3f:15:3d:00:2a:94:f9:0c:
73:c8:e1:fc:c9:a6:d1:56:bf:40:d4:eb:00:8e:2d:ea:72:88:
1d:6a:37:19:99:cc:63:db:4b:2d:22:00:45:4f:a3:ce:ca:e9:
04:43:70:6b:cb:f3:3f:2c:b5:48:bc:8b:bf:81:82:c9:d4:0b:
f7:b6:a7:64:a1:63:5c:b2:bb:06:a4:a0:78:95:4d:e5:40:f3:
c0:9b:0f:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYfcCOS19eUxt2cVzovrA8y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjMwNTAyMTAzNjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2EyM2M1NmQ5ODgzOTllZmJhOTc1NGY2NThhZGU5NTdhY2ExODMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZM9vbKq6WSP3iRJnncGOtul3h86
SEFjhNPbkignIfyB8QpZ062I0sd0IEiboOnEvdK+A1rm0F9GnNPCTok+45AygYmL
mJSaB9qEI5ACdLrN8/U6CHlZECppRCC41c1V51tzSgHApzn2x75hEpVSH2r1ewSI
idg4fh4WS4nkqi5BsCN4Y5lhHO9qltwk6Ima9x3L1himBjgekpnPRNOad6iM8unJ
6HWvS6gb72xA5amecj70Nr7bea1q6AM7XV9i67dDP/x/9Xt1XxenUW2CAXeVkYof
08n8lzDgea/6f/9GgLxTp1iMCKpEsfc24hiR/4HYmY1n0lzhUl2V2Pe9dQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBOiPFbZiDme+6l1T2WK3pV6yhgxMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvRTZJOFZ0bUlPWjc3cVhWUFpZcmVsWHJLR0RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgv3wDAN
BgkqhkiG9w0BAQsFAAOCAQEAk1CytuNNNkJ+p5O0p6S6aZsIiSwO5j7wrBoH3/MF
FQt3TrwCmr4th6GCe0HkivcbaCi0TFoZCyPo/mzbKYeBxkuMcrPLv7L+j70iowfO
JKft493jvwhTTFl7l4CqbVwdsFzQzA4i8WrX5sO8mnIhsflORiyKvjW5l0Sl95xr
Lo+1FgBWVAGZZZIM90LMd1P/eW3ZapiffJB9xrI25Cc8cfo/LlXU6dyiIMhmyz8V
PQAqlPkMc8jh/Mmm0Va/QNTrAI4t6nKIHWo3GZnMY9tLLSIARU+jzsrpBENwa8vz
Pyy1SLyLv4GCydQL97anZKFjXLK7BqSgeJVN5UDzwJsPow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org