Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/jG0VhQBIkIlvv-S8BdQjiO5bl6Q.roa
File: jG0VhQBIkIlvv-S8BdQjiO5bl6Q.roa (raw, json)
Hash identifier: dNPPhli/cwhwnAX0tPTXl1+S1aTBzSf4xs+V7soJ4iU=
Subject key identifier: 8C:6D:15:85:00:48:90:89:6F:BF:E4:BC:05:D4:23:88:EE:5B:97:A4
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 0192B369A06B07794565F7AFD138D9634C94
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/jG0VhQBIkIlvv-S8BdQjiO5bl6Q.roa
Signing time: Tue 22 Oct 2024 08:48:16 +0000
ROA not before: Tue 22 Oct 2024 08:48:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208505
IP address blocks: 2a0e:f43:10::/44 maxlen: 44
2a0e:f43:1f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 10:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:69:a0:6b:07:79:45:65:f7:af:d1:38:d9:63:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Oct 22 08:48:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c6d1585004890896fbfe4bc05d42388ee5b97a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:37:47:a1:4b:92:dd:3c:90:35:60:8f:63:
58:29:1d:cf:40:12:a6:3f:a7:03:aa:2f:51:65:b6:
6b:eb:1a:dc:c4:ea:12:26:f7:8e:87:fc:a0:1a:bb:
20:83:76:9c:e5:66:1a:2c:68:60:6d:6d:1a:a8:88:
01:0f:94:eb:fe:45:f9:cd:34:e9:84:ed:07:6b:d2:
af:4c:cc:0c:be:3f:56:74:02:1c:24:3e:78:58:38:
51:8c:b6:66:65:91:95:2b:a2:3a:f5:73:d2:9c:1a:
0d:90:a1:6a:67:3a:2a:91:db:91:57:5f:9e:b4:67:
bc:85:d6:84:70:cc:ff:01:f9:f9:f3:c6:57:b4:b2:
30:7b:d9:93:68:4b:1c:97:d7:f7:4e:cf:98:46:1a:
59:b3:c5:8e:f7:75:e8:3d:b5:5b:25:ff:22:54:af:
1e:ba:82:f9:7c:0d:f6:c7:69:5d:31:e5:88:94:96:
96:81:71:7c:0e:fc:33:3a:a4:59:da:91:63:27:53:
19:e4:af:ef:f8:e4:eb:ea:58:10:76:fc:94:77:90:
b9:03:38:37:3d:2a:b5:14:64:46:34:7a:2f:35:c4:
af:03:7d:88:16:c1:4f:6a:20:f5:f9:df:07:85:fd:
1f:4d:b2:0a:f2:8a:fc:25:f5:91:a7:b3:d0:9f:b2:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:15:85:00:48:90:89:6F:BF:E4:BC:05:D4:23:88:EE:5B:97:A4
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/jG0VhQBIkIlvv-S8BdQjiO5bl6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f43:10::/44
Signature Algorithm: sha256WithRSAEncryption
9a:93:ed:60:8e:87:14:6e:86:f5:fb:a0:2a:85:d3:74:37:f0:
44:df:99:e8:a9:aa:ad:fa:c3:45:c5:cd:19:91:d4:51:44:d7:
49:b4:86:2c:04:94:5d:d2:be:ba:05:a9:3a:7a:a1:5c:e1:10:
28:e9:c4:94:d3:58:75:30:d3:aa:cd:b5:18:e3:10:83:24:ec:
21:41:63:57:09:ec:52:14:6e:83:0c:a8:7d:a9:6f:ae:85:6e:
d2:4f:f8:bf:1e:d4:8f:ee:f7:57:9d:c8:22:cf:61:dc:0c:e6:
09:3c:0f:e6:b6:2a:b1:2f:83:a3:f7:83:70:b9:f4:ac:b2:0e:
af:c6:c2:37:90:e8:68:6f:c0:4c:ea:3b:70:43:7a:5d:df:25:
4a:45:4c:11:b8:1b:d0:26:cd:f7:28:e2:c0:b9:fa:03:55:87:
d8:ae:b6:f7:10:13:0f:e3:ef:05:57:4d:a6:ee:f4:5f:06:10:
81:8f:b8:48:3c:fc:d7:b5:a5:2d:5d:5e:90:0c:d5:f0:e3:01:
0f:d6:f1:81:7d:02:5c:a3:4f:90:e5:f6:a3:f9:31:77:d4:e4:
df:a9:49:af:04:b9:11:7b:58:a0:44:69:6f:4b:f7:4d:0a:1f:
89:21:dc:33:67:60:42:1a:6f:84:01:58:d8:50:26:95:43:44:
7c:37:19:39
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZKzaaBrB3lFZfev0TjZY0yUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx
MWZkMTAwHhcNMjQxMDIyMDg0ODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZkMTU4NTAwNDg5MDg5NmZiZmU0YmMwNWQ0MjM4OGVlNWI5N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u83R6FLkt08kDVgj2NYKR3PQBKm
P6cDqi9RZbZr6xrcxOoSJveOh/ygGrsgg3ac5WYaLGhgbW0aqIgBD5Tr/kX5zTTp
hO0Ha9KvTMwMvj9WdAIcJD54WDhRjLZmZZGVK6I69XPSnBoNkKFqZzoqkduRV1+e
tGe8hdaEcMz/Afn588ZXtLIwe9mTaEscl9f3Ts+YRhpZs8WO93XoPbVbJf8iVK8e
uoL5fA32x2ldMeWIlJaWgXF8DvwzOqRZ2pFjJ1MZ5K/v+OTr6lgQdvyUd5C5Azg3
PSq1FGRGNHovNcSvA32IFsFPaiD1+d8Hhf0fTbIK8or8JfWRp7PQn7Iq0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxtFYUASJCJb7/kvAXUI4juW5ekMB8GA1UdIwQY
MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt
MjFkZjU1YmE5ZWJmLzEvakcwVmhRQklrSWx2di1TOEJkUWppTzVibDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm
LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4PQwAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCak+1gjocUbob1+6AqhdN0N/BE35noqaqt+sNF
xc0ZkdRRRNdJtIYsBJRd0r66Bak6eqFc4RAo6cSU01h1MNOqzbUY4xCDJOwhQWNX
CexSFG6DDKh9qW+uhW7ST/i/HtSP7vdXncgiz2HcDOYJPA/mtiqxL4Oj94NwufSs
sg6vxsI3kOhob8BM6jtwQ3pd3yVKRUwRuBvQJs33KOLAufoDVYfYrrb3EBMP4+8F
V02m7vRfBhCBj7hIPPzXtaUtXV6QDNXw4wEP1vGBfQJco0+Q5faj+TF31OTfqUmv
BLkRe1igRGlvS/dNCh+JIdwzZ2BCGm+EAVjYUCaVQ0R8Nxk5
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:43 2025 by rpki-client