Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JEokGXJYcsgd-bcCAWjnZ1M-l40.roa
File: JEokGXJYcsgd-bcCAWjnZ1M-l40.roa (raw, json)
Hash identifier: pbVcnXQIGk6TuD2gGYlV+eT9US57pPRSDLCHAX34Gfk=
Subject key identifier: 24:4A:24:19:72:58:72:C8:1D:F9:B7:02:01:68:E7:67:53:3E:97:8D
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 01856CA5D0A16A45AE05B2E2E3CCD8A4FF50
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JEokGXJYcsgd-bcCAWjnZ1M-l40.roa
Signing time: Sun 01 Jan 2023 09:24:43 +0000
ROA not before: Sun 01 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210374
IP address blocks: 2a05:9f04::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Feb 2023 01:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:a5:d0:a1:6a:45:ae:05:b2:e2:e3:cc:d8:a4:ff:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=244a2419725872c81df9b7020168e767533e978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:4a:8b:07:53:3e:40:21:d9:58:2b:7d:b6:
6a:e8:a6:4f:2e:33:7d:9d:7f:5b:3a:24:ec:49:ef:
77:42:1b:1d:ea:be:72:6b:7c:8f:72:23:40:a6:b9:
69:ff:61:8d:01:53:66:00:aa:a3:d0:9d:24:27:74:
60:76:44:be:82:06:c3:99:0f:68:ca:67:cb:8a:20:
60:16:5f:ea:15:76:40:ce:ae:86:c3:8d:88:2a:91:
e3:21:46:db:8b:ed:dc:50:fd:0e:fb:60:28:23:79:
d3:36:dd:2d:73:05:28:34:4d:b1:14:05:93:59:19:
02:4c:9e:a6:1e:0a:b6:ce:20:9c:27:2a:99:aa:73:
c9:38:1c:92:a3:87:a8:96:0f:28:7f:0a:fe:49:21:
ed:f0:59:ef:49:14:86:28:1e:62:fb:72:57:a1:7c:
28:32:61:c1:9e:16:c2:17:e6:15:aa:23:d4:6a:ea:
4c:e4:b0:a1:d8:f2:f4:a2:de:0b:40:a4:6e:7d:1a:
3a:78:94:28:5d:ac:61:1f:b1:39:26:c0:d9:ce:a8:
77:e8:42:b2:af:ce:39:aa:37:cf:c9:28:56:09:6d:
43:cc:01:b2:2d:7a:04:1a:95:e5:ec:f3:47:d3:77:
23:f7:54:81:fc:46:5b:47:39:f8:67:45:82:74:d3:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:24:19:72:58:72:C8:1D:F9:B7:02:01:68:E7:67:53:3E:97:8D
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JEokGXJYcsgd-bcCAWjnZ1M-l40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9f04::/40
Signature Algorithm: sha256WithRSAEncryption
98:a0:50:ff:76:a8:20:45:86:cd:45:49:ba:6f:95:df:ac:fc:
9f:e0:52:11:4d:fe:d7:a0:d0:41:8e:be:5b:39:5e:5c:0f:72:
aa:99:72:e2:93:08:ba:a2:d5:a0:3b:fa:63:8f:a7:44:72:bc:
dc:c5:db:c3:35:cd:a9:c9:33:93:8c:11:86:2c:ba:30:b9:0e:
17:1b:9f:3d:ea:2f:8c:36:a9:0a:21:46:f3:c3:b7:72:fe:69:
ea:8b:f6:b9:b4:c3:bd:fa:2a:d7:d1:25:d7:8e:ee:ff:ad:f8:
b9:49:09:27:6b:42:ac:7c:e0:1b:dd:2b:8a:4d:32:ad:bd:66:
c6:f5:e9:d5:45:fd:5d:1d:ad:fd:3e:7f:70:f1:ef:1b:e3:b9:
0e:c1:f5:0e:9f:be:72:eb:68:5c:c3:78:a3:41:13:5b:31:39:
ee:e4:06:86:1a:2d:e6:f0:07:4c:34:82:d6:b0:e1:b3:5b:c3:
7b:ff:d1:dd:88:15:2f:f0:47:d1:98:1f:90:cc:64:b3:2c:36:
a1:a3:21:65:d7:1b:73:2a:ab:b5:87:a1:e2:28:4e:81:a2:6a:
3c:9e:23:82:79:13:a8:99:f7:f7:59:6f:78:4d:1c:0f:9f:54:
b7:e6:f9:17:a5:d4:25:8b:f3:25:7d:02:d1:c3:e5:ec:3c:67:
93:69:a5:ff
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVspdChakWuBbLi48zYpP9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4
NmQzY2EwHhcNMjMwMTAxMDkyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDRhMjQxOTcyNTg3MmM4MWRmOWI3MDIwMTY4ZTc2NzUzM2U5NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDhKiwdTPkAh2VgrfbZq6KZPLjN9
nX9bOiTsSe93Qhsd6r5ya3yPciNAprlp/2GNAVNmAKqj0J0kJ3RgdkS+ggbDmQ9o
ymfLiiBgFl/qFXZAzq6Gw42IKpHjIUbbi+3cUP0O+2AoI3nTNt0tcwUoNE2xFAWT
WRkCTJ6mHgq2ziCcJyqZqnPJOBySo4eolg8ofwr+SSHt8FnvSRSGKB5i+3JXoXwo
MmHBnhbCF+YVqiPUaupM5LCh2PL0ot4LQKRufRo6eJQoXaxhH7E5JsDZzqh36EKy
r845qjfPyShWCW1DzAGyLXoEGpXl7PNH03cj91SB/EZbRzn4Z0WCdNOoPQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCRKJBlyWHLIHfm3AgFo52dTPpeNMB8GA1UdIwQY
MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt
MDU4NWRlNGQ0ZWU3LzEvSkVva0dYSlljc2dkLWJjQ0FXam5aMU0tbDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3
LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgWfBAAw
DQYJKoZIhvcNAQELBQADggEBAJigUP92qCBFhs1FSbpvld+s/J/gUhFN/teg0EGO
vls5XlwPcqqZcuKTCLqi1aA7+mOPp0RyvNzF28M1zanJM5OMEYYsujC5Dhcbnz3q
L4w2qQohRvPDt3L+aeqL9rm0w736KtfRJdeO7v+t+LlJCSdrQqx84BvdK4pNMq29
Zsb16dVF/V0drf0+f3Dx7xvjuQ7B9Q6fvnLraFzDeKNBE1sxOe7kBoYaLebwB0w0
gtaw4bNbw3v/0d2IFS/wR9GYH5DMZLMsNqGjIWXXG3Mqq7WHoeIoToGiajyeI4J5
E6iZ9/dZb3hNHA+fVLfm+Rel1CWL8yV9AtHD5ew8Z5Nppf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org