Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/0UoJCM_-bXIUaU5nKcHgGNBHiVE.roa
File: 0UoJCM_-bXIUaU5nKcHgGNBHiVE.roa (raw, json)
Hash identifier: vZ3kNoz9cTZwgEbrb2/EquiXUQ62/gbnXfuN+ktz9eg=
Subject key identifier: D1:4A:09:08:CF:FE:6D:72:14:69:4E:67:29:C1:E0:18:D0:47:89:51
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019276370BF63F7677C832E8E3AA04B0C236
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/0UoJCM_-bXIUaU5nKcHgGNBHiVE.roa
Signing time: Thu 10 Oct 2024 11:36:11 +0000
ROA not before: Thu 10 Oct 2024 11:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208505
IP address blocks: 2a0e:f43:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:37:0b:f6:3f:76:77:c8:32:e8:e3:aa:04:b0:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Oct 10 11:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d14a0908cffe6d7214694e6729c1e018d0478951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:d2:60:2f:ce:d5:85:d2:14:1a:0e:7a:63:
0c:a6:97:84:f3:d5:d9:bf:d4:58:0b:8b:a0:d4:13:
84:b1:0c:65:38:c1:11:c2:1e:cb:96:14:66:6c:73:
fd:40:df:96:4b:06:d5:68:8a:44:ca:e3:98:5b:c7:
5d:2d:72:c5:5d:b7:d2:49:cd:1e:b1:b1:5d:9b:88:
6d:c3:68:91:09:45:42:d9:b4:b6:73:1d:b0:95:cb:
a4:76:84:a5:fe:05:61:9f:54:37:d8:1a:68:3c:b2:
5d:7a:1e:e8:6c:36:99:db:22:c0:e9:8a:e4:69:cf:
7b:8d:b5:bc:58:f3:0e:ac:48:35:52:14:82:c0:fa:
2b:51:5f:1a:16:62:24:49:c2:c4:32:57:af:27:5d:
22:a4:11:b8:5e:37:85:fe:c3:89:d2:c2:df:91:5e:
91:b2:f3:24:17:f9:32:61:86:2d:1d:e1:f0:8e:49:
f2:5a:e6:a0:99:8b:fe:eb:31:ca:2b:3e:4a:23:e4:
cf:04:22:7d:54:07:ac:b8:0f:d6:e9:57:fc:91:43:
f6:ce:e8:b3:e8:b7:b6:86:63:ee:8b:4f:91:11:7f:
8c:6c:10:2d:bb:54:ee:22:bc:d5:a3:ee:99:44:15:
a7:be:6c:ae:48:fd:44:b4:a8:09:cc:b8:e0:a3:8a:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4A:09:08:CF:FE:6D:72:14:69:4E:67:29:C1:E0:18:D0:47:89:51
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/0UoJCM_-bXIUaU5nKcHgGNBHiVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f43:10::/44
Signature Algorithm: sha256WithRSAEncryption
02:16:46:df:8c:bb:c8:ac:9e:fb:aa:bd:7d:2f:df:48:17:02:
f1:94:77:b1:0b:da:86:bc:53:3e:17:c6:59:cb:cc:ec:4b:91:
cc:ec:90:fe:72:f0:d4:2c:15:91:f2:9a:5a:dd:0c:4c:d9:32:
94:57:8b:80:0d:76:1b:15:73:98:a3:bd:2d:28:8d:89:84:d6:
55:f5:f2:74:9f:67:52:72:85:95:f5:95:e8:d3:10:9e:47:2e:
f0:a2:5e:1e:57:00:b8:a6:49:bf:3a:b5:6f:4e:1a:44:81:d0:
5f:c2:3f:bc:54:b9:7f:ee:c2:f9:d2:3c:3f:7a:96:8e:55:e0:
a9:01:83:91:9c:16:18:d3:c2:71:eb:b5:43:3d:fd:85:dc:2d:
6b:62:6b:40:7f:70:f4:cb:9c:af:ad:1f:d7:47:6c:09:92:79:
c4:4a:3b:78:f5:db:f1:21:9e:88:4e:bf:4e:df:6b:98:49:5d:
a6:6f:ee:b9:97:95:aa:af:a0:bf:9e:21:68:c0:78:26:64:75:
05:cc:07:16:54:63:bc:44:d0:83:c3:5a:cd:0f:a9:ed:57:e1:
cf:19:59:71:d5:5b:da:dc:e9:68:98:84:e6:30:f8:66:5c:c5:
9f:03:5a:f2:b5:e2:d6:64:e4:e0:66:ea:6e:9f:39:1d:2f:74:
dd:74:48:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZJ2Nwv2P3Z3yDLo46oEsMI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx
MWZkMTAwHhcNMjQxMDEwMTEzNjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTRhMDkwOGNmZmU2ZDcyMTQ2OTRlNjcyOWMxZTAxOGQwNDc4OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNbSYC/O1YXSFBoOemMMppeE89XZ
v9RYC4ug1BOEsQxlOMERwh7LlhRmbHP9QN+WSwbVaIpEyuOYW8ddLXLFXbfSSc0e
sbFdm4htw2iRCUVC2bS2cx2wlcukdoSl/gVhn1Q32BpoPLJdeh7obDaZ2yLA6Yrk
ac97jbW8WPMOrEg1UhSCwPorUV8aFmIkScLEMlevJ10ipBG4XjeF/sOJ0sLfkV6R
svMkF/kyYYYtHeHwjknyWuagmYv+6zHKKz5KI+TPBCJ9VAesuA/W6Vf8kUP2zuiz
6Le2hmPui0+REX+MbBAtu1TuIrzVo+6ZRBWnvmyuSP1EtKgJzLjgo4qp0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNFKCQjP/m1yFGlOZynB4BjQR4lRMB8GA1UdIwQY
MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt
MjFkZjU1YmE5ZWJmLzEvMFVvSkNNXy1iWElVYVU1bktjSGdHTkJIaVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm
LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4PQwAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQACFkbfjLvIrJ77qr19L99IFwLxlHexC9qGvFM+
F8ZZy8zsS5HM7JD+cvDULBWR8ppa3QxM2TKUV4uADXYbFXOYo70tKI2JhNZV9fJ0
n2dScoWV9ZXo0xCeRy7wol4eVwC4pkm/OrVvThpEgdBfwj+8VLl/7sL50jw/epaO
VeCpAYORnBYY08Jx67VDPf2F3C1rYmtAf3D0y5yvrR/XR2wJknnESjt49dvxIZ6I
Tr9O32uYSV2mb+65l5Wqr6C/niFowHgmZHUFzAcWVGO8RNCDw1rND6ntV+HPGVlx
1Vva3OlomITmMPhmXMWfA1ryteLWZOTgZupunzkdL3TddEi3
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:13 2025 by rpki-client