Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/wqRJDxAUr_FZzy8lpJv95lRlcE8.roa
File: wqRJDxAUr_FZzy8lpJv95lRlcE8.roa (raw, json)
Hash identifier: 3YKr1rt3fvPLhzp8qxs6eSmc9UQdcqsWsj8nwyMmZEQ=
Subject key identifier: C2:A4:49:0F:10:14:AF:F1:59:CF:2F:25:A4:9B:FD:E6:54:65:70:4F
Certificate issuer: /CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Certificate serial: 0189B57EBCDDE373CF933D93C684202DCC0A
Authority key identifier: E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/wqRJDxAUr_FZzy8lpJv95lRlcE8.roa
Signing time: Wed 02 Aug 2023 09:05:29 +0000
ROA not before: Wed 02 Aug 2023 09:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48448
IP address blocks: 2a06:4d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:7e:bc:dd:e3:73:cf:93:3d:93:c6:84:20:2d:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5619fb9868c8f0fbf5e3eb9ce72b485f7a005df
Validity
Not Before: Aug 2 09:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a4490f1014aff159cf2f25a49bfde65465704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:c0:28:17:48:f7:4d:e3:1d:06:fc:c6:45:
4f:52:55:a9:6f:a5:57:f4:80:0b:21:46:4d:28:f5:
25:68:3f:4e:21:40:c6:77:8c:c0:b1:22:20:56:9c:
e1:0f:d8:54:27:5d:dc:d4:61:d6:45:3a:bc:01:b3:
5d:df:9d:15:12:c2:01:70:4c:c4:94:3a:60:78:12:
60:91:84:21:fd:c4:e5:b9:02:0f:21:26:8f:c3:ca:
fe:8e:03:b1:e0:51:1b:e0:ec:f8:36:81:3a:d2:94:
ce:7d:7a:f1:36:9d:50:e2:95:d3:78:49:6a:09:72:
ab:69:db:49:e0:9b:8c:78:5a:84:8b:b8:53:07:9b:
29:13:92:61:30:2c:2f:9b:e0:16:6b:ab:17:19:ad:
49:e8:90:d2:ac:ea:f8:cb:2e:f9:05:e1:60:ea:c2:
47:cc:5d:1a:64:9f:a7:05:1d:f3:f6:cd:3a:87:1f:
9b:3e:6f:c4:5a:4c:02:c4:c9:5f:07:97:86:c0:0b:
12:79:bd:6c:82:ac:7e:89:44:d3:3a:dc:c1:fe:40:
4c:99:73:97:78:79:ad:2e:c6:eb:a4:63:cd:25:6e:
36:79:e0:af:0a:41:28:2e:57:7b:1e:5d:6d:f3:8e:
be:d3:a7:ea:b5:fe:17:bc:31:16:89:fe:c8:32:66:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A4:49:0F:10:14:AF:F1:59:CF:2F:25:A4:9B:FD:E6:54:65:70:4F
X509v3 Authority Key Identifier:
keyid:E5:61:9F:B9:86:8C:8F:0F:BF:5E:3E:B9:CE:72:B4:85:F7:A0:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WGfuYaMjw-_Xj65znK0hfegBd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/wqRJDxAUr_FZzy8lpJv95lRlcE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/700cb3-4383-4cbf-bb25-88c173ed2e34/1/5WGfuYaMjw-_Xj65znK0hfegBd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
6c:6f:81:0b:f1:b8:75:7f:b7:3f:3d:99:46:46:60:4f:61:21:
5a:75:43:3b:4b:10:be:d4:23:55:a3:c3:e0:9e:a7:4f:56:6c:
ac:25:bd:a5:a3:ba:f4:d4:14:00:fc:75:d0:f1:e4:7e:64:db:
8a:df:b4:30:a3:6b:85:5d:99:1c:b6:45:ee:3a:20:14:97:ac:
67:ef:2f:e6:60:14:7b:25:fe:09:c0:a4:c2:ba:72:25:31:8f:
eb:e4:5e:b9:0b:c9:a1:ad:90:85:71:f4:42:36:7b:48:31:85:
d1:18:3b:0c:14:26:fd:05:e8:51:b0:60:b8:a4:e1:ef:f7:9a:
8d:00:52:df:9d:66:8e:55:fd:3d:04:08:d6:52:8d:cf:18:cc:
a6:b2:f6:86:3c:b7:ca:9e:ae:c3:8a:35:76:9a:44:40:98:26:
52:97:4d:7c:a8:dd:e1:3f:71:39:0e:86:16:50:67:6f:aa:2a:
c0:97:a8:69:aa:08:ab:54:ca:62:42:90:f4:29:a3:22:79:af:
a0:09:a4:e1:13:bc:fd:7a:ae:4c:cd:5d:51:08:4f:39:40:b4:
fa:1d:8a:02:c7:d3:ec:68:e2:99:06:8e:a1:8e:3f:1a:79:33:
3a:13:c6:12:db:22:e5:c3:dd:df:c4:28:bf:9c:2b:65:83:cb:
ac:de:3f:c8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYm1frzd43PPkz2TxoQgLcwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjE5ZmI5ODY4YzhmMGZiZjVlM2ViOWNlNzJiNDg1Zjdh
MDA1ZGYwHhcNMjMwODAyMDkwNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE0NDkwZjEwMTRhZmYxNTljZjJmMjVhNDliZmRlNjU0NjU3MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg87AKBdI903jHQb8xkVPUlWpb6VX
9IALIUZNKPUlaD9OIUDGd4zAsSIgVpzhD9hUJ13c1GHWRTq8AbNd350VEsIBcEzE
lDpgeBJgkYQh/cTluQIPISaPw8r+jgOx4FEb4Oz4NoE60pTOfXrxNp1Q4pXTeElq
CXKradtJ4JuMeFqEi7hTB5spE5JhMCwvm+AWa6sXGa1J6JDSrOr4yy75BeFg6sJH
zF0aZJ+nBR3z9s06hx+bPm/EWkwCxMlfB5eGwAsSeb1sgqx+iUTTOtzB/kBMmXOX
eHmtLsbrpGPNJW42eeCvCkEoLld7Hl1t846+06fqtf4XvDEWif7IMmamTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMKkSQ8QFK/xWc8vJaSb/eZUZXBPMB8GA1UdIwQY
MBaAFOVhn7mGjI8Pv14+uc5ytIX3oAXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdHZnVZYU1qdy1fWGo2NXpuSzBoZmVnQmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83MDBjYjMtNDM4My00Y2JmLWJiMjUt
ODhjMTczZWQyZTM0LzEvd3FSSkR4QVVyX0Zaenk4bHBKdjk1bFJsY0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83MDBjYjMtNDM4My00Y2JmLWJiMjUtODhjMTczZWQyZTM0
LzEvNVdHZnVZYU1qdy1fWGo2NXpuSzBoZmVnQmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgZNADAN
BgkqhkiG9w0BAQsFAAOCAQEAbG+BC/G4dX+3Pz2ZRkZgT2EhWnVDO0sQvtQjVaPD
4J6nT1ZsrCW9paO69NQUAPx10PHkfmTbit+0MKNrhV2ZHLZF7jogFJesZ+8v5mAU
eyX+CcCkwrpyJTGP6+ReuQvJoa2QhXH0QjZ7SDGF0Rg7DBQm/QXoUbBguKTh7/ea
jQBS351mjlX9PQQI1lKNzxjMprL2hjy3yp6uw4o1dppEQJgmUpdNfKjd4T9xOQ6G
FlBnb6oqwJeoaaoIq1TKYkKQ9CmjInmvoAmk4RO8/XquTM1dUQhPOUC0+h2KAsfT
7GjimQaOoY4/GnkzOhPGEtsi5cPd38Qov5wrZYPLrN4/yA==
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:51 2024 by rpki-client on console-ams.rpki-client.org