Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/aQKeEr6WtM4pD8AY2MCemJnmYrs.roa
File: aQKeEr6WtM4pD8AY2MCemJnmYrs.roa (raw, json)
Hash identifier: fNcEQA8p4kns8r8WoN6nNusFrZHKEl5eTE9yQvunNYg=
Subject key identifier: 69:02:9E:12:BE:96:B4:CE:29:0F:C0:18:D8:C0:9E:98:99:E6:62:BB
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 01856BAECE7F7B6D31E71790FAC5FE4B66B0
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/aQKeEr6WtM4pD8AY2MCemJnmYrs.roa
Signing time: Sun 01 Jan 2023 04:54:56 +0000
ROA not before: Sun 01 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26769
IP address blocks: 2001:4de0:2205::/48 maxlen: 48
2001:4de0:3005::/48 maxlen: 48
2001:4de0:4105::/48 maxlen: 48
2001:4de0:2003::/48 maxlen: 48
2001:4de0:2203::/48 maxlen: 48
2001:4de0:3103::/48 maxlen: 48
2001:4de0:4003::/48 maxlen: 48
2001:4de0:4103::/48 maxlen: 48
2001:4de0:2204::/48 maxlen: 48
2001:4de0:3104::/48 maxlen: 48
2001:4de0:4004::/48 maxlen: 48
2001:4de0:2107::/48 maxlen: 48
2001:4de0:4001:5::/64 maxlen: 64
2001:4de0:4008::/48 maxlen: 48
2001:4de0:2106::/48 maxlen: 48
2001:4de0:3106::/48 maxlen: 48
2001:4de0:4001:1::/64 maxlen: 64
2001:4de0:2001::/48 maxlen: 48
2001:4de0:2201::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:ce:7f:7b:6d:31:e7:17:90:fa:c5:fe:4b:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69029e12be96b4ce290fc018d8c09e9899e662bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:02:71:0a:e3:5d:81:77:91:38:4d:2d:69:
64:e5:91:a9:42:a5:a9:17:9d:95:d6:55:28:c5:2e:
d3:16:2c:17:4c:52:cd:7e:fe:8d:d6:e3:e0:27:f4:
50:7f:7b:13:c1:00:ed:6f:1f:8b:68:62:2a:11:ec:
e3:40:ad:3d:20:48:fc:b6:30:58:fe:e4:4a:d7:48:
a0:ca:ca:57:03:a5:d2:98:be:bd:18:8b:4f:89:53:
90:54:94:18:eb:62:7d:73:e3:f8:fd:23:ba:b2:4c:
2c:13:f0:1c:02:26:ac:81:ad:1f:68:0f:aa:45:2c:
78:0c:3c:30:c6:b0:80:88:28:8a:53:96:00:55:5c:
cc:b0:10:42:38:37:1b:db:2e:9e:b1:2d:2c:ff:9e:
0d:03:6f:a0:10:83:92:22:56:17:4c:59:08:66:1c:
53:dc:5f:44:92:94:59:61:42:2a:88:2d:38:6b:fb:
4f:ed:10:2c:2a:84:ac:4b:3f:b6:70:b8:29:c8:89:
87:8d:27:c8:44:ce:9c:39:35:0a:97:9b:cf:88:06:
a5:a2:9d:5b:d6:b8:2c:f2:33:5d:ac:b0:7e:47:a4:
2c:98:2b:22:5a:4f:f4:55:89:57:74:0c:51:1d:50:
ad:3f:c1:54:1a:84:6e:76:d8:0f:ab:f0:47:70:8a:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:9E:12:BE:96:B4:CE:29:0F:C0:18:D8:C0:9E:98:99:E6:62:BB
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/aQKeEr6WtM4pD8AY2MCemJnmYrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:2001::/48
2001:4de0:2003::/48
2001:4de0:2106::/47
2001:4de0:2201::/48
2001:4de0:2203::-2001:4de0:2205:ffff:ffff:ffff:ffff:ffff
2001:4de0:3005::/48
2001:4de0:3103::-2001:4de0:3104:ffff:ffff:ffff:ffff:ffff
2001:4de0:3106::/48
2001:4de0:4001:1::/64
2001:4de0:4001:5::/64
2001:4de0:4003::-2001:4de0:4004:ffff:ffff:ffff:ffff:ffff
2001:4de0:4008::/48
2001:4de0:4103::/48
2001:4de0:4105::/48
Signature Algorithm: sha256WithRSAEncryption
64:44:39:0e:31:6b:0f:5b:0d:1c:50:56:af:18:bb:07:87:65:
c6:b6:86:54:ed:11:83:af:e3:c0:85:13:52:09:48:0b:20:bc:
33:96:95:75:f7:15:81:06:b1:82:1f:2e:a8:96:6e:fa:1f:82:
e0:85:6b:23:f3:1f:20:87:3e:94:2a:aa:c5:2c:85:83:71:3a:
ce:63:f6:bf:f7:f2:9f:f8:1b:06:32:ac:c3:11:07:a9:dc:d8:
70:4a:4e:d5:66:4f:32:6e:a8:5f:f3:f1:8f:9a:d2:0c:15:f5:
5f:53:3b:c0:6b:fe:d2:ff:c9:ff:47:1c:4f:60:13:39:2a:aa:
58:ae:8e:3d:2f:1a:8d:44:fe:7b:f8:09:a0:fa:ba:fc:c3:b1:
9b:4d:f9:50:b2:b0:a6:d1:4f:0e:fb:ca:78:9a:0b:5b:88:c8:
8f:8b:0e:14:8c:b6:66:9b:6f:85:e3:08:07:76:50:b1:9b:9d:
e4:f3:a6:48:88:64:0f:df:dc:9c:f4:47:2e:3d:02:22:60:f1:
18:27:d1:dc:99:d8:6a:db:5a:92:4d:0c:49:1c:df:2b:cf:d3:
fe:58:17:cd:d9:41:04:85:c0:6a:d3:4f:78:47:e3:78:69:32:
1d:cc:a4:d7:a2:79:4a:f5:76:b2:7a:1a:a4:14:74:86:59:f8:
b4:f9:a9:79
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAYVrrs5/e20x5xeQ+sX+S2awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjMwMTAxMDQ1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTAyOWUxMmJlOTZiNGNlMjkwZmMwMThkOGMwOWU5ODk5ZTY2MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtboCcQrjXYF3kThNLWlk5ZGpQqWp
F52V1lUoxS7TFiwXTFLNfv6N1uPgJ/RQf3sTwQDtbx+LaGIqEezjQK09IEj8tjBY
/uRK10igyspXA6XSmL69GItPiVOQVJQY62J9c+P4/SO6skwsE/AcAiasga0faA+q
RSx4DDwwxrCAiCiKU5YAVVzMsBBCODcb2y6esS0s/54NA2+gEIOSIlYXTFkIZhxT
3F9EkpRZYUIqiC04a/tP7RAsKoSsSz+2cLgpyImHjSfIRM6cOTUKl5vPiAalop1b
1rgs8jNdrLB+R6QsmCsiWk/0VYlXdAxRHVCtP8FUGoRudtgPq/BHcIqWYQIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFGkCnhK+lrTOKQ/AGNjAnpiZ5mK7MB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvYVFLZUVyNld0TTRwRDhBWTJNQ2VtSm5tWXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBqgQCAAIwgaMDBwAg
AU3gIAEDBwAgAU3gIAMDBwEgAU3gIQYDBwAgAU3gIgEwEgMHACABTeAiAwMHASAB
TeAiBAMHACABTeAwBTASAwcAIAFN4DEDAwcAIAFN4DEEAwcAIAFN4DEGAwkAIAFN
4EABAAEDCQAgAU3gQAEABTASAwcAIAFN4EADAwcAIAFN4EAEAwcAIAFN4EAIAwcA
IAFN4EEDAwcAIAFN4EEFMA0GCSqGSIb3DQEBCwUAA4IBAQBkRDkOMWsPWw0cUFav
GLsHh2XGtoZU7RGDr+PAhRNSCUgLILwzlpV19xWBBrGCHy6olm76H4LghWsj8x8g
hz6UKqrFLIWDcTrOY/a/9/Kf+BsGMqzDEQep3NhwSk7VZk8ybqhf8/GPmtIMFfVf
UzvAa/7S/8n/RxxPYBM5KqpYro49LxqNRP57+Amg+rr8w7GbTflQsrCm0U8O+8p4
mgtbiMiPiw4UjLZmm2+F4wgHdlCxm53k86ZIiGQP39yc9EcuPQIiYPEYJ9Hcmdhq
21qSTQxJHN8rz9P+WBfN2UEEhcBq0094R+N4aTIdzKTXonlK9XayehqkFHSGWfi0
+al5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org