Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/VOijcVrbeBHNBI3yGVDeg2c5oCQ.roa
File: VOijcVrbeBHNBI3yGVDeg2c5oCQ.roa (raw, json)
Hash identifier: U1eStFArMP2qUFMUIJCV42o1PuLyukHAHsNP0Q5gxzA=
Subject key identifier: 54:E8:A3:71:5A:DB:78:11:CD:04:8D:F2:19:50:DE:83:67:39:A0:24
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0190DE80C4214FE9E30A4189A3D65EF0C666
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/VOijcVrbeBHNBI3yGVDeg2c5oCQ.roa
Signing time: Tue 23 Jul 2024 07:31:39 +0000
ROA not before: Tue 23 Jul 2024 07:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 2a05:9080::/48 maxlen: 48
2a05:9080:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 03 Aug 2024 04:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:80:c4:21:4f:e9:e3:0a:41:89:a3:d6:5e:f0:c6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 23 07:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54e8a3715adb7811cd048df21950de836739a024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:94:4f:69:34:1c:69:fc:41:99:e6:f0:98:
ea:1e:72:91:08:ed:0f:50:c1:fc:44:9d:b1:d9:04:
13:06:9c:37:d7:e7:49:7e:29:3e:62:5b:18:2b:d5:
79:7c:c0:97:d8:d2:6b:cf:6f:9a:d4:ef:0e:dc:bf:
c0:3d:85:cf:33:9f:c3:f1:3b:95:b2:0a:89:14:29:
0c:d4:8e:09:2e:98:c3:0d:3f:49:87:2e:c5:3b:f3:
ee:06:f0:49:3f:27:ef:4b:2f:dd:8b:e0:a0:56:48:
2a:c9:73:f5:89:47:94:1a:50:d9:db:70:c4:b5:9a:
6a:fe:50:8c:6e:98:4f:9e:f0:bf:be:5d:92:56:2e:
a8:1e:eb:73:58:7a:d0:76:83:0e:cc:0c:cf:03:01:
b4:31:98:13:66:30:75:be:03:ed:60:03:1b:61:81:
58:96:c2:94:74:30:19:74:33:0d:3c:50:a9:b2:28:
c8:9b:5e:55:b5:4f:bb:aa:43:50:ce:e7:17:ce:5f:
45:26:94:4c:2d:8c:32:ad:a1:ed:c0:83:23:45:83:
78:7f:c9:72:13:3b:52:ba:89:e1:7c:79:ec:45:c7:
ec:5f:e2:30:8f:4b:cd:51:2d:10:78:d5:b5:99:58:
e3:c3:1e:13:49:c3:75:fe:b1:7c:e8:ba:0e:5e:23:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:A3:71:5A:DB:78:11:CD:04:8D:F2:19:50:DE:83:67:39:A0:24
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/VOijcVrbeBHNBI3yGVDeg2c5oCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080::/48
2a05:9080:4::/48
Signature Algorithm: sha256WithRSAEncryption
a3:76:1b:55:05:cb:e0:eb:a1:6f:ff:96:55:cd:f9:30:88:42:
a9:1f:6e:1a:0d:8f:f0:36:d4:6a:15:c9:85:70:d8:6c:dc:d6:
f6:dc:73:6b:03:80:58:03:e2:d2:21:1f:95:c0:3e:90:72:e0:
cd:5e:63:fe:a9:a7:c8:d3:bd:9e:22:ff:64:87:21:a6:e0:8b:
d9:30:b5:f5:85:74:47:16:e6:cc:cc:2f:fb:be:25:68:2a:af:
b8:9a:68:cb:c9:8f:f1:57:4f:e8:91:8c:dc:0f:c4:6d:34:6e:
e2:9e:1f:4a:0b:aa:6d:bd:c5:91:46:86:81:21:ac:be:8f:65:
46:f9:6a:07:c5:de:bf:a1:72:20:8f:ba:42:16:09:08:e2:44:
4b:a2:fe:cf:3a:2d:e3:46:32:c4:6b:28:f1:d6:57:dd:eb:90:
a6:c4:bd:f3:c5:58:69:13:1c:19:3f:33:76:02:2c:40:04:44:
a4:fd:2d:05:e5:a9:fb:00:25:c2:fb:43:7e:9b:e9:40:e2:9f:
af:af:62:ae:4d:c1:e0:03:fe:3b:e6:66:14:ac:8c:a2:33:5c:
56:2b:bb:14:8b:9e:15:cd:84:06:46:f4:af:3b:40:46:aa:ed:
b4:b8:62:7e:99:95:15:39:a2:04:0f:88:92:8c:b7:5f:be:ab:
84:79:e6:84
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZDegMQhT+njCkGJo9Ze8MZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwNzIzMDczMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGU4YTM3MTVhZGI3ODExY2QwNDhkZjIxOTUwZGU4MzY3MzlhMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscuUT2k0HGn8QZnm8JjqHnKRCO0P
UMH8RJ2x2QQTBpw31+dJfik+YlsYK9V5fMCX2NJrz2+a1O8O3L/APYXPM5/D8TuV
sgqJFCkM1I4JLpjDDT9Jhy7FO/PuBvBJPyfvSy/di+CgVkgqyXP1iUeUGlDZ23DE
tZpq/lCMbphPnvC/vl2SVi6oHutzWHrQdoMOzAzPAwG0MZgTZjB1vgPtYAMbYYFY
lsKUdDAZdDMNPFCpsijIm15VtU+7qkNQzucXzl9FJpRMLYwyraHtwIMjRYN4f8ly
EztSuonhfHnsRcfsX+Iwj0vNUS0QeNW1mVjjwx4TScN1/rF86LoOXiPZwwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFToo3Fa23gRzQSN8hlQ3oNnOaAkMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvVk9pamNWcmJlQkhOQkkzeUdWRGVnMmM1b0NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWQgAAA
AwcAKgWQgAAEMA0GCSqGSIb3DQEBCwUAA4IBAQCjdhtVBcvg66Fv/5ZVzfkwiEKp
H24aDY/wNtRqFcmFcNhs3Nb23HNrA4BYA+LSIR+VwD6QcuDNXmP+qafI072eIv9k
hyGm4IvZMLX1hXRHFubMzC/7viVoKq+4mmjLyY/xV0/okYzcD8RtNG7inh9KC6pt
vcWRRoaBIay+j2VG+WoHxd6/oXIgj7pCFgkI4kRLov7POi3jRjLEayjx1lfd65Cm
xL3zxVhpExwZPzN2AixABESk/S0F5an7ACXC+0N+m+lA4p+vr2KuTcHgA/475mYU
rIyiM1xWK7sUi54VzYQGRvSvO0BGqu20uGJ+mZUVOaIED4iSjLdfvquEeeaE
-----END CERTIFICATE-----
Generated at Sat Aug 3 07:47:30 2024 by rpki-client on console-ams.rpki-client.org