Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/aud6ehvEFEnz9YvMXHGR31XnTTI.roa
File: aud6ehvEFEnz9YvMXHGR31XnTTI.roa (raw, json)
Hash identifier: MRwK7o9emakCzjBap3bDPXnZSLI2Mg6XYK//UHCtK2w=
Subject key identifier: 6A:E7:7A:7A:1B:C4:14:49:F3:F5:8B:CC:5C:71:91:DF:55:E7:4D:32
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 018A4FE9004A5AFD368C347CED2BEDFDE5AA
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/aud6ehvEFEnz9YvMXHGR31XnTTI.roa
Signing time: Fri 01 Sep 2023 08:43:04 +0000
ROA not before: Fri 01 Sep 2023 08:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:20c7:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:e9:00:4a:5a:fd:36:8c:34:7c:ed:2b:ed:fd:e5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Sep 1 08:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae77a7a1bc41449f3f58bcc5c7191df55e74d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:73:d7:d8:34:e9:2c:ab:a7:f6:17:02:b4:
86:f7:7d:06:5d:c1:85:a2:64:f1:15:56:94:2c:48:
65:f1:2e:d2:ab:06:65:5c:3d:52:a4:6b:23:e6:35:
19:e4:78:99:d1:cb:2c:cc:d7:d9:24:cb:e6:0a:1f:
e2:d9:db:90:95:fd:62:7b:77:1d:2c:4d:86:77:1e:
fd:8f:06:dd:23:a0:e5:f5:38:14:d5:33:c1:c9:eb:
ff:61:47:72:dd:51:66:6a:01:1c:c5:e3:5e:a1:5e:
98:89:a3:4c:05:d9:d8:d5:af:1c:c5:7d:6d:46:be:
d5:ca:24:85:74:56:68:bc:0e:cc:f9:b0:d3:3f:75:
4e:0a:72:bd:0a:36:59:fd:7c:fd:e8:b3:3e:51:26:
8b:fd:76:77:16:80:00:88:f8:8a:4a:b5:33:75:07:
3f:61:06:8a:d3:0a:2c:67:95:20:03:9a:66:c9:57:
fc:49:8e:3b:28:0f:69:07:06:fb:45:5c:e7:25:a2:
93:72:83:e4:b4:00:d5:a8:98:70:3f:b3:96:7e:1f:
45:99:e3:1a:f5:87:2b:ca:08:5a:43:20:f0:36:1c:
2f:c2:1d:6c:da:56:4e:cf:6e:20:ac:f7:32:36:25:
48:df:92:ef:35:46:1b:ed:f2:7e:40:ff:73:ac:50:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:7A:7A:1B:C4:14:49:F3:F5:8B:CC:5C:71:91:DF:55:E7:4D:32
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/aud6ehvEFEnz9YvMXHGR31XnTTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:20c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
79:e1:c9:e0:37:c7:aa:6e:16:70:e1:6f:bc:4e:aa:7e:14:1c:
4c:e5:7f:90:17:f4:b6:33:5d:6c:67:ba:6f:b6:6b:95:85:4b:
84:56:37:19:49:0d:5c:6b:3c:f5:e3:c4:e4:73:f2:18:56:64:
c9:4f:98:b3:1d:32:c7:c8:2d:46:d6:6f:94:64:5c:7a:96:fb:
d7:71:20:d4:6b:60:fa:33:15:fe:a3:70:02:93:64:88:12:40:
5d:ac:1d:68:b2:bc:4a:be:b8:f9:f6:8b:ba:e2:5a:28:40:e3:
17:95:c9:75:f1:1a:80:f1:e2:0b:70:20:98:dc:dc:2b:b9:0b:
77:ab:30:6a:65:c3:47:0d:6c:06:d4:77:4a:31:f6:40:05:87:
2a:0c:3c:13:4a:27:50:94:15:19:be:c7:b6:df:9d:9a:94:e0:
1b:3f:89:24:68:ea:29:2a:81:8e:e4:d0:10:7a:05:a5:57:46:
70:8f:9d:98:32:36:5e:4f:fd:60:48:23:98:ac:57:41:d5:39:
45:96:c8:6b:94:a2:07:89:e3:45:60:18:74:6a:4b:29:3a:33:
5b:35:cc:90:8f:1e:ee:1c:19:27:f1:92:c0:cb:74:dc:40:41:
38:fb:2d:24:75:25:76:fe:df:b5:91:20:49:38:d8:0c:4a:63:
c5:fa:56:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYpP6QBKWv02jDR87Svt/eWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjMwOTAxMDg0MzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWU3N2E3YTFiYzQxNDQ5ZjNmNThiY2M1YzcxOTFkZjU1ZTc0ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/hz19g06Syrp/YXArSG930GXcGF
omTxFVaULEhl8S7SqwZlXD1SpGsj5jUZ5HiZ0csszNfZJMvmCh/i2duQlf1ie3cd
LE2Gdx79jwbdI6Dl9TgU1TPByev/YUdy3VFmagEcxeNeoV6YiaNMBdnY1a8cxX1t
Rr7VyiSFdFZovA7M+bDTP3VOCnK9CjZZ/Xz96LM+USaL/XZ3FoAAiPiKSrUzdQc/
YQaK0wosZ5UgA5pmyVf8SY47KA9pBwb7RVznJaKTcoPktADVqJhwP7OWfh9FmeMa
9YcryghaQyDwNhwvwh1s2lZOz24grPcyNiVI35LvNUYb7fJ+QP9zrFC4OwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGrnenobxBRJ8/WLzFxxkd9V500yMB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEvYXVkNmVodkVGRW56OVl2TVhIR1IzMVhuVFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAgx/8w
DQYJKoZIhvcNAQELBQADggEBAHnhyeA3x6puFnDhb7xOqn4UHEzlf5AX9LYzXWxn
um+2a5WFS4RWNxlJDVxrPPXjxORz8hhWZMlPmLMdMsfILUbWb5RkXHqW+9dxINRr
YPozFf6jcAKTZIgSQF2sHWiyvEq+uPn2i7riWihA4xeVyXXxGoDx4gtwIJjc3Cu5
C3erMGplw0cNbAbUd0ox9kAFhyoMPBNKJ1CUFRm+x7bfnZqU4Bs/iSRo6ikqgY7k
0BB6BaVXRnCPnZgyNl5P/WBII5isV0HVOUWWyGuUogeJ40VgGHRqSyk6M1s1zJCP
Hu4cGSfxksDLdNxAQTj7LSR1JXb+37WRIEk42AxKY8X6VuE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org