Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/eRk4G0Ok4GmnLXAmo_g17xwZ15M.roa
File: eRk4G0Ok4GmnLXAmo_g17xwZ15M.roa (raw, json)
Hash identifier: MLLgOW3lLDMC5Vo2Wgt9cNTJV5Oqn/XAPBQX3CzUnx8=
Subject key identifier: 79:19:38:1B:43:A4:E0:69:A7:2D:70:26:A3:F8:35:EF:1C:19:D7:93
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 01856BDC73DE39A9028B208463713D395292
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/eRk4G0Ok4GmnLXAmo_g17xwZ15M.roa
Signing time: Sun 01 Jan 2023 05:44:47 +0000
ROA not before: Sun 01 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212057
IP address blocks: 2a0f:607:1056::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:73:de:39:a9:02:8b:20:84:63:71:3d:39:52:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7919381b43a4e069a72d7026a3f835ef1c19d793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:ac:fa:01:68:79:25:87:3d:cb:6f:b7:af:
70:38:d2:5c:2b:c1:8b:41:5f:60:fe:54:ae:5a:d9:
83:7e:1b:6a:37:0f:88:a8:95:60:5a:c1:96:00:68:
c6:9f:72:8e:41:f2:b4:52:a4:b2:10:9a:6c:3a:17:
b3:f6:87:5a:4b:fa:fb:b6:38:2d:91:d3:18:1c:bf:
ec:52:89:f7:e8:67:9e:5b:0d:49:40:8c:ff:71:90:
f5:55:13:c0:b0:03:1c:75:b9:cd:a8:36:5b:4c:ff:
f3:11:a2:d7:7f:a0:3d:d2:f1:a4:f0:7d:71:c0:5c:
a7:47:f5:34:2a:15:d1:af:40:5b:88:a7:09:69:43:
d2:5e:1f:a7:da:c7:cd:db:6b:d0:9c:fb:27:21:68:
92:f2:1e:3a:98:27:e1:68:a5:70:73:16:b9:62:ff:
49:8e:fc:65:84:95:7c:fc:a6:1c:43:5c:e7:c2:17:
47:3a:32:c7:fd:4a:ce:55:39:40:45:a2:be:e0:db:
f6:c9:3b:fb:ed:87:3f:77:62:32:6b:d0:49:39:8c:
d9:e5:5c:79:9e:27:e3:ec:7f:1b:05:23:c3:b5:86:
21:0f:4c:99:38:14:2e:3d:b6:41:f7:af:38:4f:bb:
8f:08:15:a3:ce:fb:58:de:2d:35:7b:13:3c:bb:e2:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:38:1B:43:A4:E0:69:A7:2D:70:26:A3:F8:35:EF:1C:19:D7:93
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/eRk4G0Ok4GmnLXAmo_g17xwZ15M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1056::/48
Signature Algorithm: sha256WithRSAEncryption
b2:24:a1:4a:d8:bc:ad:15:ac:bd:dc:1f:c9:86:af:ba:e8:52:
fa:03:76:0e:30:94:87:62:4f:85:5f:a2:55:e8:46:b1:d5:3e:
ae:16:db:73:a7:c0:33:d1:39:e3:18:9b:47:82:40:a7:08:af:
f7:a0:fc:fd:ee:4c:74:2f:b6:6a:e0:5f:ae:21:2f:e9:9e:ba:
3c:dd:c2:cb:50:f5:3f:3e:da:37:a4:88:ce:b2:08:69:8a:e0:
e6:fb:0a:11:8e:83:96:bb:36:9c:48:c9:49:4e:54:43:42:f5:
47:64:2d:f5:7a:56:a4:8b:6e:3d:52:ed:44:66:05:2c:4c:f1:
aa:8c:a4:21:b1:38:4f:38:b4:86:58:aa:86:81:67:f3:37:39:
5c:15:5a:37:f7:20:44:01:d4:84:aa:d8:11:04:b5:fc:56:b8:
02:5a:85:99:33:20:b1:24:81:75:a6:e2:9f:77:c1:9b:c5:23:
c1:42:94:16:d6:c6:39:52:55:0a:9f:ca:01:72:e9:47:29:6a:
c7:8b:db:ae:1e:32:32:16:af:94:e5:ba:20:88:df:86:84:55:
f1:eb:af:d7:77:61:ee:d1:e9:2a:ac:41:2f:4f:c2:d0:db:f9:
3f:c3:cf:86:af:1b:7d:de:0b:29:cd:32:3c:fc:95:e1:2a:13:
22:ee:d0:48
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVr3HPeOakCiyCEY3E9OVKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5
NWRmYzYwHhcNMjMwMTAxMDU0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTE5MzgxYjQzYTRlMDY5YTcyZDcwMjZhM2Y4MzVlZjFjMTlkNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttas+gFoeSWHPctvt69wONJcK8GL
QV9g/lSuWtmDfhtqNw+IqJVgWsGWAGjGn3KOQfK0UqSyEJpsOhez9odaS/r7tjgt
kdMYHL/sUon36GeeWw1JQIz/cZD1VRPAsAMcdbnNqDZbTP/zEaLXf6A90vGk8H1x
wFynR/U0KhXRr0BbiKcJaUPSXh+n2sfN22vQnPsnIWiS8h46mCfhaKVwcxa5Yv9J
jvxlhJV8/KYcQ1znwhdHOjLH/UrOVTlARaK+4Nv2yTv77Yc/d2Iya9BJOYzZ5Vx5
nifj7H8bBSPDtYYhD0yZOBQuPbZB9684T7uPCBWjzvtY3i01exM8u+IgeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHkZOBtDpOBppy1wJqP4Ne8cGdeTMB8GA1UdIwQY
MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut
YTM0NzU2NDE1OGY4LzEvZVJrNEcwT2s0R21uTFhBbW9fZzE3eHdaMTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4
LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBW
MA0GCSqGSIb3DQEBCwUAA4IBAQCyJKFK2LytFay93B/Jhq+66FL6A3YOMJSHYk+F
X6JV6Eax1T6uFttzp8Az0TnjGJtHgkCnCK/3oPz97kx0L7Zq4F+uIS/pnro83cLL
UPU/Pto3pIjOsghpiuDm+woRjoOWuzacSMlJTlRDQvVHZC31elaki249Uu1EZgUs
TPGqjKQhsThPOLSGWKqGgWfzNzlcFVo39yBEAdSEqtgRBLX8VrgCWoWZMyCxJIF1
puKfd8GbxSPBQpQW1sY5UlUKn8oBculHKWrHi9uuHjIyFq+U5bogiN+GhFXx66/X
d2Hu0ekqrEEvT8LQ2/k/w8+Grxt93gspzTI8/JXhKhMi7tBI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org