Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/bG-WtLRYCzrJNW7vQMHbzpJ6qno.roa
File: bG-WtLRYCzrJNW7vQMHbzpJ6qno.roa (raw, json)
Hash identifier: 1lxf/dmtfVU/pn1MlV2+gtjS0Ncl+Xco6L64W1a5GFI=
Subject key identifier: 6C:6F:96:B4:B4:58:0B:3A:C9:35:6E:EF:40:C1:DB:CE:92:7A:AA:7A
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 019294F930D804422353D6807FF478E8AF92
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/bG-WtLRYCzrJNW7vQMHbzpJ6qno.roa
Signing time: Wed 16 Oct 2024 10:56:51 +0000
ROA not before: Wed 16 Oct 2024 10:56:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16621
IP address blocks: 2a02:16a::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 11:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:f9:30:d8:04:42:23:53:d6:80:7f:f4:78:e8:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Oct 16 10:56:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6f96b4b4580b3ac9356eef40c1dbce927aaa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:43:94:ac:ee:e3:fb:80:98:08:1f:94:36:
0b:d7:19:b6:9f:1a:58:38:bd:c5:fb:50:93:07:d5:
3a:39:3e:3d:67:d6:cb:64:ae:bb:f9:c7:59:8f:c4:
27:74:72:04:0a:2f:8f:ad:69:d3:c7:d8:cc:de:37:
ed:59:c9:a0:b6:8b:71:a3:06:54:2e:bf:1f:fe:28:
57:a8:16:c6:c4:f9:9a:c3:93:f8:35:67:22:f4:21:
5a:0b:88:fc:95:e8:fa:81:10:2f:d0:2d:ac:65:c2:
a5:7a:a2:fa:5a:be:14:dc:fd:a6:1c:56:e3:c2:25:
15:23:0d:d1:fa:40:b7:7d:93:a9:c6:b8:d8:5e:5b:
b5:f3:8c:21:c5:07:b3:57:4e:ea:2d:d9:b9:0f:55:
18:6c:6d:7d:f4:60:91:ee:35:3a:6b:1b:2d:5a:47:
82:e8:70:4d:d3:42:bc:24:30:6c:c9:e3:cc:cf:1a:
96:f7:ca:d2:02:29:85:48:51:f4:2f:8f:49:74:b3:
9d:be:df:72:7f:2a:90:90:e1:f7:68:32:79:f0:7e:
1d:e9:e8:8d:b4:64:83:2f:33:67:91:e3:02:bb:3a:
16:d2:63:6c:f3:a4:ea:b4:e2:30:03:1d:1a:43:9d:
3b:42:4b:10:f3:24:9c:19:e9:25:1e:50:08:9c:4d:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:96:B4:B4:58:0B:3A:C9:35:6E:EF:40:C1:DB:CE:92:7A:AA:7A
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/bG-WtLRYCzrJNW7vQMHbzpJ6qno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:16a::/32
Signature Algorithm: sha256WithRSAEncryption
97:4b:72:01:8b:b6:c3:25:4a:c4:6a:e2:e8:73:a0:65:00:62:
a6:00:76:a2:e3:61:33:aa:d8:30:65:aa:7e:63:6b:f2:4d:06:
ec:d0:92:ec:8c:1a:08:71:7c:05:bf:d1:78:d3:70:ba:75:a4:
59:20:b3:d7:6c:4f:53:7d:58:47:67:f9:07:68:0e:e5:e7:09:
66:31:51:57:12:bc:83:35:25:f8:7e:2a:51:d4:26:60:74:cb:
3a:46:50:6b:7a:d7:11:66:3f:e9:3c:e4:d7:b4:a2:93:57:41:
09:60:5e:59:6b:52:a0:8d:96:c5:f3:82:7c:e1:53:0d:1d:91:
09:a2:88:76:46:ac:e3:ec:bd:65:d5:dc:54:e2:a6:1b:62:2b:
f1:49:da:f4:39:ca:dc:76:31:e5:a2:b6:ca:45:bb:81:17:e2:
d8:02:eb:9f:99:ca:f8:57:60:ea:5e:34:34:94:49:8e:cf:0e:
5e:ca:a1:16:0d:aa:0c:eb:7a:11:a8:92:84:21:cb:97:8b:1e:
0d:b5:79:4a:f2:56:da:a2:b2:b2:07:83:02:85:81:5c:48:a8:
d4:98:7d:60:fa:0d:cb:d1:8c:e4:d6:b4:c1:b9:f2:4c:21:da:
59:e0:92:96:64:6c:86:d4:82:72:e0:66:9a:16:b9:bc:30:6c:
ef:c0:12:9d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZKU+TDYBEIjU9aAf/R46K+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDc5NTE0OTU5Mzk3YzVlM2ZhNzZlMWVhNDk1ZThlMWY2
YzMxOWIwHhcNMjQxMDE2MTA1NjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzZmOTZiNGI0NTgwYjNhYzkzNTZlZWY0MGMxZGJjZTkyN2FhYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+1DlKzu4/uAmAgflDYL1xm2nxpY
OL3F+1CTB9U6OT49Z9bLZK67+cdZj8QndHIECi+PrWnTx9jM3jftWcmgtotxowZU
Lr8f/ihXqBbGxPmaw5P4NWci9CFaC4j8lej6gRAv0C2sZcKleqL6Wr4U3P2mHFbj
wiUVIw3R+kC3fZOpxrjYXlu184whxQezV07qLdm5D1UYbG199GCR7jU6axstWkeC
6HBN00K8JDBsyePMzxqW98rSAimFSFH0L49JdLOdvt9yfyqQkOH3aDJ58H4d6eiN
tGSDLzNnkeMCuzoW0mNs86TqtOIwAx0aQ507QksQ8yScGeklHlAInE3h5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGxvlrS0WAs6yTVu70DB286Seqp6MB8GA1UdIwQY
MBaAFINHlRSVk5fF4/p24epJXo4fbDGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUt
MWU1ZTQzMGRkNzExLzEvYkctV3RMUllDenJKTlc3dlFNSGJ6cEo2cW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUtMWU1ZTQzMGRkNzEx
LzEvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIBajAN
BgkqhkiG9w0BAQsFAAOCAQEAl0tyAYu2wyVKxGri6HOgZQBipgB2ouNhM6rYMGWq
fmNr8k0G7NCS7IwaCHF8Bb/ReNNwunWkWSCz12xPU31YR2f5B2gO5ecJZjFRVxK8
gzUl+H4qUdQmYHTLOkZQa3rXEWY/6Tzk17Sik1dBCWBeWWtSoI2WxfOCfOFTDR2R
CaKIdkas4+y9ZdXcVOKmG2Ir8Una9DnK3HYx5aK2ykW7gRfi2ALrn5nK+Fdg6l40
NJRJjs8OXsqhFg2qDOt6EaiShCHLl4seDbV5SvJW2qKysgeDAoWBXEio1Jh9YPoN
y9GM5Na0wbnyTCHaWeCSlmRshtSCcuBmmha5vDBs78ASnQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:52 2025 by rpki-client