Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLokagtWsMbpG5h7Zc8lsI8E250.roa
File: jLokagtWsMbpG5h7Zc8lsI8E250.roa (raw, json)
Hash identifier: tkB7WtSyUeLe0LnV11pcKaY0SX3Atd1yXLc6/ZEI3d0=
Subject key identifier: 8C:BA:24:6A:0B:56:B0:C6:E9:1B:98:7B:65:CF:25:B0:8F:04:DB:9D
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 01856ED4CE0074E1A47183C4872BB5A58330
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLokagtWsMbpG5h7Zc8lsI8E250.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202410
IP address blocks: 2a0c:3800:400::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ce:00:74:e1:a4:71:83:c4:87:2b:b5:a5:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cba246a0b56b0c6e91b987b65cf25b08f04db9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:c6:40:88:80:12:0c:67:98:19:e1:fa:c4:
c1:f3:32:a1:ce:25:ec:40:cd:c3:f5:bc:b0:13:db:
6f:f3:5f:87:5a:4b:b3:79:89:74:7e:5a:5e:b3:87:
5a:dd:f2:86:4e:37:81:1b:f2:1c:19:76:5b:68:21:
63:fb:b7:b5:36:a7:16:9f:c9:46:a3:5b:8d:29:df:
7f:96:11:d2:2d:30:3b:b6:29:7a:ca:0e:6d:a0:37:
7d:ea:a8:1f:7f:63:77:c6:0d:39:28:fc:17:c9:a4:
08:68:dd:50:3a:ec:8e:52:57:f4:f9:d6:b6:1b:38:
82:18:ae:25:bb:08:30:7a:97:91:1d:79:13:57:10:
fc:e0:05:6c:84:dc:02:96:69:3f:67:f6:25:3a:ff:
59:f7:65:12:5b:13:cb:d8:6a:01:12:d5:b7:52:4f:
33:13:9c:a0:88:de:74:de:7b:18:2e:6c:11:b5:ef:
27:72:c2:fb:ec:09:b2:77:a6:39:06:c4:02:17:b2:
50:30:7c:61:2f:b0:c0:b7:3f:b4:a0:ff:61:e5:30:
2c:22:aa:7d:c5:86:1a:d0:80:9e:fe:83:da:22:ef:
a7:fe:31:97:7e:be:da:ba:7e:2c:fa:3b:d0:9d:8a:
dc:e4:9e:d0:82:ef:10:eb:98:fe:66:f1:7c:11:65:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BA:24:6A:0B:56:B0:C6:E9:1B:98:7B:65:CF:25:B0:8F:04:DB:9D
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/jLokagtWsMbpG5h7Zc8lsI8E250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3800:400::/48
Signature Algorithm: sha256WithRSAEncryption
82:f6:52:76:cd:df:21:cd:59:be:39:16:12:ad:8b:51:1f:ed:
f1:49:c7:52:bc:f2:af:98:95:ff:ff:e3:f8:cf:75:0e:16:8c:
1a:15:a3:fd:a4:7d:57:c3:41:aa:cf:84:c2:0a:24:68:e2:ee:
af:69:fd:c9:4f:d7:7f:c4:29:89:4a:cb:8a:5a:ac:2a:3d:38:
73:55:c5:8d:8d:1f:8c:68:65:e1:e7:51:f7:c8:6f:3f:db:65:
b3:a2:99:df:8a:e7:7f:9b:e5:5e:03:23:ce:2a:20:81:73:a4:
13:0c:c2:04:19:e2:cc:92:f6:ab:14:b9:ba:70:d3:dc:c3:58:
f2:8f:64:8c:a8:e1:f6:47:94:b5:a9:8d:60:32:07:4d:7b:7f:
37:d5:12:f2:7c:1c:20:59:33:78:01:e6:21:4b:b5:fa:f9:e6:
60:86:66:d4:35:7d:6a:51:65:c3:f3:f4:a9:c3:2a:2a:ff:d5:
31:df:50:97:78:21:41:90:f4:fd:aa:9e:be:df:16:e2:2e:39:
e2:3a:34:b9:bc:83:d6:a5:49:ee:99:03:b3:15:76:19:02:b8:
6e:3d:91:00:2d:38:96:a0:51:90:1d:cf:4e:f7:c1:36:5e:fc:
4a:08:b1:c3:84:a3:a1:6e:de:05:7b:76:fc:79:66:90:03:ae:
5a:91:3e:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVu1M4AdOGkcYPEhyu1pYMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy
NmJhMGYwHhcNMjMwMTAxMTkzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2JhMjQ2YTBiNTZiMGM2ZTkxYjk4N2I2NWNmMjViMDhmMDRkYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGvGQIiAEgxnmBnh+sTB8zKhziXs
QM3D9bywE9tv81+HWkuzeYl0flpes4da3fKGTjeBG/IcGXZbaCFj+7e1NqcWn8lG
o1uNKd9/lhHSLTA7til6yg5toDd96qgff2N3xg05KPwXyaQIaN1QOuyOUlf0+da2
GziCGK4luwgwepeRHXkTVxD84AVshNwClmk/Z/YlOv9Z92USWxPL2GoBEtW3Uk8z
E5ygiN503nsYLmwRte8ncsL77Amyd6Y5BsQCF7JQMHxhL7DAtz+0oP9h5TAsIqp9
xYYa0ICe/oPaIu+n/jGXfr7aun4s+jvQnYrc5J7Qgu8Q65j+ZvF8EWWuCQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIy6JGoLVrDG6RuYe2XPJbCPBNudMB8GA1UdIwQY
MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEvakxva2FndFdzTWJwRzVoN1pjOGxzSThFMjUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgw4AAQA
MA0GCSqGSIb3DQEBCwUAA4IBAQCC9lJ2zd8hzVm+ORYSrYtRH+3xScdSvPKvmJX/
/+P4z3UOFowaFaP9pH1Xw0Gqz4TCCiRo4u6vaf3JT9d/xCmJSsuKWqwqPThzVcWN
jR+MaGXh51H3yG8/22Wzopnfiud/m+VeAyPOKiCBc6QTDMIEGeLMkvarFLm6cNPc
w1jyj2SMqOH2R5S1qY1gMgdNe3831RLyfBwgWTN4AeYhS7X6+eZghmbUNX1qUWXD
8/Spwyoq/9Ux31CXeCFBkPT9qp6+3xbiLjniOjS5vIPWpUnumQOzFXYZArhuPZEA
LTiWoFGQHc9O98E2XvxKCLHDhKOhbt4Fe3b8eWaQA65akT6n
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:46 2024 by rpki-client on console-ams.rpki-client.org