Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/5xHLCyXZTGPqWxSkM5GMo4RllhU.roa
File: 5xHLCyXZTGPqWxSkM5GMo4RllhU.roa (raw, json)
Hash identifier: G0DdrMmO0wCEWtRHCv8laTzqM+MzLw3+4um/dey1MBY=
Subject key identifier: E7:11:CB:0B:25:D9:4C:63:EA:5B:14:A4:33:91:8C:A3:84:65:96:15
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 01856F14A4ED9C6F8ADA81024DD467BB412F
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/5xHLCyXZTGPqWxSkM5GMo4RllhU.roa
Signing time: Sun 01 Jan 2023 20:45:01 +0000
ROA not before: Sun 01 Jan 2023 20:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213346
IP address blocks: 2a10:b9c0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a4:ed:9c:6f:8a:da:81:02:4d:d4:67:bb:41:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Jan 1 20:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e711cb0b25d94c63ea5b14a433918ca384659615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:58:42:93:30:88:55:5c:61:85:86:5e:2a:
82:cd:d0:3a:d9:de:6c:60:03:f2:2e:ce:55:f8:b6:
e6:94:01:12:be:db:f0:0c:2e:0d:ca:32:d3:3f:d2:
cc:c7:e2:dc:58:ab:d5:1e:3a:06:d9:e6:e3:ca:9b:
a3:ec:5d:0e:17:cc:4c:60:6e:8d:7d:4c:cc:ef:32:
4a:3e:36:83:30:a5:8e:10:b8:ff:fa:20:33:74:22:
0f:6d:c1:5a:6e:1f:1f:fb:f5:94:7f:8c:55:ca:c6:
c4:9e:75:5b:ae:05:6d:31:dd:44:d9:d2:d1:89:a9:
f4:16:eb:48:14:bb:b6:d5:64:8a:ca:4d:46:dc:89:
0c:fe:2c:64:bf:b7:cd:2f:08:7c:14:74:de:5b:cc:
a9:d4:4a:da:06:69:31:26:e8:f0:fe:05:66:19:31:
a6:2c:00:96:82:1b:73:79:ea:22:c9:5e:9a:f7:e9:
ee:55:31:85:1b:4b:55:c4:d3:38:ea:32:fe:f2:73:
ce:be:68:c4:03:0f:81:4e:8c:72:22:22:b5:3e:ff:
3a:ac:85:d0:cc:5f:e7:ae:0b:bd:fc:da:b7:3f:d2:
b8:d1:94:18:49:2a:83:00:62:be:0b:a6:5f:86:ea:
3b:73:24:86:1b:2c:69:61:1f:91:4a:e5:99:14:a0:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:CB:0B:25:D9:4C:63:EA:5B:14:A4:33:91:8C:A3:84:65:96:15
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/5xHLCyXZTGPqWxSkM5GMo4RllhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b9c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
28:81:fc:d1:29:aa:fe:d1:ac:46:66:74:a4:e1:65:04:de:18:
d1:91:5a:96:6e:37:1a:da:f5:cb:99:31:b3:f9:53:4f:bb:df:
98:c2:59:ed:5b:6e:68:c0:b6:28:0c:f4:5e:92:7e:15:3c:c3:
28:88:9f:c8:19:96:d2:18:3c:e1:cf:a4:d6:ff:49:db:36:0b:
84:3d:04:7d:98:71:7d:0d:31:66:bd:26:88:10:7c:b8:ad:32:
2f:c3:8b:cc:0a:7a:c8:cd:1d:33:94:ef:b8:dd:a5:0a:11:5f:
a7:63:26:e5:be:48:45:48:a1:9f:24:9c:54:0d:c6:39:e7:12:
ae:df:cd:9d:bd:3d:32:37:ce:7a:ef:18:36:75:2b:f5:9b:dd:
21:17:11:91:9c:c0:9e:08:50:9d:50:8f:a8:2f:2b:9b:d8:b7:
b2:c8:89:c9:53:10:98:ba:53:9e:39:f2:ba:24:48:cd:71:d5:
8b:f5:94:83:8a:61:12:3b:d2:4a:e8:67:58:15:cf:b1:c5:4f:
a0:8b:e2:5d:b4:9c:05:5e:13:72:2f:e5:da:5c:7e:69:f7:79:
99:66:d6:5e:2f:73:aa:8e:a3:47:5c:71:d1:40:a8:3d:67:b1:
98:45:c1:44:1c:2c:6d:03:0e:a0:c4:5a:17:81:34:e2:be:96:
d6:91:a4:d9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvFKTtnG+K2oECTdRnu0EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2
OWQxMGUwHhcNMjMwMTAxMjA0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzExY2IwYjI1ZDk0YzYzZWE1YjE0YTQzMzkxOGNhMzg0NjU5NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbhYQpMwiFVcYYWGXiqCzdA62d5s
YAPyLs5V+LbmlAESvtvwDC4NyjLTP9LMx+LcWKvVHjoG2ebjypuj7F0OF8xMYG6N
fUzM7zJKPjaDMKWOELj/+iAzdCIPbcFabh8f+/WUf4xVysbEnnVbrgVtMd1E2dLR
ian0FutIFLu21WSKyk1G3IkM/ixkv7fNLwh8FHTeW8yp1EraBmkxJujw/gVmGTGm
LACWghtzeeoiyV6a9+nuVTGFG0tVxNM46jL+8nPOvmjEAw+BToxyIiK1Pv86rIXQ
zF/nrgu9/Nq3P9K40ZQYSSqDAGK+C6Zfhuo7cySGGyxpYR+RSuWZFKBJlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOcRywsl2Uxj6lsUpDORjKOEZZYVMB8GA1UdIwQY
MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt
OWVjN2FkZDBlYjY4LzEvNXhITEN5WFpUR1BxV3hTa001R01vNFJsbGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4
LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhC5wP//
MA0GCSqGSIb3DQEBCwUAA4IBAQAogfzRKar+0axGZnSk4WUE3hjRkVqWbjca2vXL
mTGz+VNPu9+YwlntW25owLYoDPRekn4VPMMoiJ/IGZbSGDzhz6TW/0nbNguEPQR9
mHF9DTFmvSaIEHy4rTIvw4vMCnrIzR0zlO+43aUKEV+nYyblvkhFSKGfJJxUDcY5
5xKu382dvT0yN8567xg2dSv1m90hFxGRnMCeCFCdUI+oLyub2LeyyInJUxCYulOe
OfK6JEjNcdWL9ZSDimESO9JK6GdYFc+xxU+gi+JdtJwFXhNyL+XaXH5p93mZZtZe
L3OqjqNHXHHRQKg9Z7GYRcFEHCxtAw6gxFoXgTTivpbWkaTZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org