Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/eN4J15dYUaL1DujzpjxsM-PpA5o.roa
File: eN4J15dYUaL1DujzpjxsM-PpA5o.roa (raw, json)
Hash identifier: Yyjm2EWf/2LpumX6T9NbajLQgNIsDka64KjD6o3RKbE=
Subject key identifier: 78:DE:09:D7:97:58:51:A2:F5:0E:E8:F3:A6:3C:6C:33:E3:E9:03:9A
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01856FB11E8927879E441C8FB08DC4181D88
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/eN4J15dYUaL1DujzpjxsM-PpA5o.roa
Signing time: Sun 01 Jan 2023 23:35:56 +0000
ROA not before: Sun 01 Jan 2023 23:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199438
IP address blocks: 2a0c:4445::/48 maxlen: 48
2a0c:4444::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:1e:89:27:87:9e:44:1c:8f:b0:8d:c4:18:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 23:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78de09d7975851a2f50ee8f3a63c6c33e3e9039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:ff:9f:61:1a:9b:42:da:e1:ec:fc:c4:52:
a1:bf:6c:1b:e1:6d:e7:a3:62:8b:79:81:39:2c:2b:
f9:c3:5e:68:40:51:ad:21:7c:3c:96:6f:8c:a0:0c:
73:e6:6f:03:3e:8a:e1:a3:78:54:54:4c:6a:2c:7c:
3f:87:21:b6:a3:77:e3:c9:0f:5c:dd:f7:89:1f:0b:
be:01:ea:ee:d1:4c:a6:29:75:45:21:79:b8:46:84:
13:3b:d6:f5:8c:5f:40:0f:66:b8:1d:d6:4b:5e:b2:
02:ff:a2:8b:fe:46:39:86:61:d4:48:99:02:59:12:
18:a9:f1:5f:b7:10:cf:c0:6b:d3:31:d2:43:f9:04:
aa:fa:7d:41:2f:fb:1b:ed:78:10:4e:cb:70:df:05:
cc:b3:78:c0:d8:0e:9c:17:40:8f:0f:2a:22:ed:32:
84:28:75:e4:ed:d5:88:17:3e:81:e5:fc:19:ae:94:
2a:d2:46:d4:43:b0:35:8f:01:75:2a:77:ee:d4:f6:
c1:bf:af:f2:11:62:98:89:fd:d8:5b:13:4f:29:ee:
e0:b0:10:2c:b4:bb:aa:eb:9c:08:41:b6:56:c0:a7:
e1:4d:cf:4f:47:e6:e5:a7:81:31:71:71:36:2c:97:
f9:29:be:7e:50:e9:7d:84:b6:86:f9:f1:72:8f:bf:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:09:D7:97:58:51:A2:F5:0E:E8:F3:A6:3C:6C:33:E3:E9:03:9A
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/eN4J15dYUaL1DujzpjxsM-PpA5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4444::/48
2a0c:4445::/48
Signature Algorithm: sha256WithRSAEncryption
c7:e4:3d:35:b5:31:bd:58:bc:ee:b9:33:3a:85:d6:7b:72:d5:
12:46:dc:2e:65:f6:56:2f:4f:4c:25:e6:ea:06:58:a2:92:76:
f7:ee:d7:95:d2:e6:b3:3e:b1:e0:39:33:48:96:f0:c7:86:c0:
f2:13:d0:fc:93:03:e6:c3:1b:08:1f:75:9c:a7:87:bb:a3:e6:
24:ac:38:6b:c8:f4:d4:d1:0f:3f:3b:fa:02:49:a7:01:cd:18:
c3:e9:e5:bb:6f:d9:71:48:48:06:e0:a1:1a:d6:4d:e6:a3:1b:
65:30:8b:02:19:a1:cd:4e:a7:9c:03:a4:10:ea:49:bf:cc:63:
35:89:6f:2e:11:fb:70:32:91:59:ad:c8:54:2e:1d:73:53:92:
75:02:0e:44:34:64:c0:0e:15:9f:dd:38:56:85:97:71:cc:82:
0e:1a:71:21:a1:ca:ec:2b:d4:e3:e2:75:df:22:3b:67:7f:0e:
35:a1:8e:54:c2:98:f5:2e:62:5a:03:92:e7:42:78:8b:ba:d4:
92:21:51:07:a2:a8:19:da:79:71:43:ed:9c:b3:0c:9e:30:c3:
a5:a9:17:c3:89:a8:9c:3d:06:e3:7d:80:e4:d3:37:dc:cd:ea:
f1:60:6c:ff:6a:8f:01:5c:0d:4d:62:ed:47:d9:cb:9a:60:ff:
1a:68:9b:01
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvsR6JJ4eeRByPsI3EGB2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjMwMTAxMjMzNTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGRlMDlkNzk3NTg1MWEyZjUwZWU4ZjNhNjNjNmMzM2UzZTkwMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/T/n2Eam0La4ez8xFKhv2wb4W3n
o2KLeYE5LCv5w15oQFGtIXw8lm+MoAxz5m8DPorho3hUVExqLHw/hyG2o3fjyQ9c
3feJHwu+Aeru0UymKXVFIXm4RoQTO9b1jF9AD2a4HdZLXrIC/6KL/kY5hmHUSJkC
WRIYqfFftxDPwGvTMdJD+QSq+n1BL/sb7XgQTstw3wXMs3jA2A6cF0CPDyoi7TKE
KHXk7dWIFz6B5fwZrpQq0kbUQ7A1jwF1Knfu1PbBv6/yEWKYif3YWxNPKe7gsBAs
tLuq65wIQbZWwKfhTc9PR+blp4ExcXE2LJf5Kb5+UOl9hLaG+fFyj79uwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHjeCdeXWFGi9Q7o86Y8bDPj6QOaMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvZU40SjE1ZFlVYUwxRHVqenBqeHNNLVBwQTVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgxERAAA
AwcAKgxERQAAMA0GCSqGSIb3DQEBCwUAA4IBAQDH5D01tTG9WLzuuTM6hdZ7ctUS
RtwuZfZWL09MJebqBliiknb37teV0uazPrHgOTNIlvDHhsDyE9D8kwPmwxsIH3Wc
p4e7o+YkrDhryPTU0Q8/O/oCSacBzRjD6eW7b9lxSEgG4KEa1k3moxtlMIsCGaHN
TqecA6QQ6km/zGM1iW8uEftwMpFZrchULh1zU5J1Ag5ENGTADhWf3ThWhZdxzIIO
GnEhocrsK9Tj4nXfIjtnfw41oY5Uwpj1LmJaA5LnQniLutSSIVEHoqgZ2nlxQ+2c
swyeMMOlqRfDiaicPQbjfYDk0zfczerxYGz/ao8BXA1NYu1H2cuaYP8aaJsB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org