Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ir8yaSHFADrlbBZyRjA5MDRniqU.roa
File: Ir8yaSHFADrlbBZyRjA5MDRniqU.roa (raw, json)
Hash identifier: XxT2jlPYW7VwNEFGnOJxzsvfVoMhOoURCAP7FnazdTE=
Subject key identifier: 22:BF:32:69:21:C5:00:3A:E5:6C:16:72:46:30:39:30:34:67:8A:A5
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 01856FCBBDE43B90CA13406885C303DE53AD
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ir8yaSHFADrlbBZyRjA5MDRniqU.roa
Signing time: Mon 02 Jan 2023 00:05:01 +0000
ROA not before: Mon 02 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210851
IP address blocks: 2a0e:e704:46::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:bd:e4:3b:90:ca:13:40:68:85:c3:03:de:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 2 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22bf326921c5003ae56c16724630393034678aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:eb:b7:69:ee:5d:a8:a0:f0:15:47:50:89:
fa:ec:e8:3b:7e:81:66:90:ed:fe:9b:f5:61:a3:0e:
26:6c:25:54:47:06:1b:d4:fc:12:ed:ec:a0:60:f8:
2c:0c:b4:79:db:2f:d0:87:bc:ce:5a:eb:b0:09:2f:
8e:80:48:38:cb:a0:e0:b7:b5:cb:39:05:ca:24:27:
31:c5:6f:e1:ba:59:08:74:6f:f0:5a:56:3c:ad:d2:
3d:91:9f:51:04:c8:4d:d0:5a:22:d8:39:9b:36:10:
e1:5b:b6:d5:9d:e6:0e:d2:16:c8:c5:0c:6c:32:3b:
f5:f3:02:04:23:a9:b6:40:76:46:d5:2f:e0:9f:97:
59:f5:38:26:b6:70:8a:4e:37:25:29:91:64:bf:af:
83:10:44:7e:d9:bd:78:46:f6:f3:75:5d:79:6f:40:
8c:23:03:ea:4f:46:8f:93:bc:4f:05:ff:15:af:aa:
2e:1a:e1:92:50:b2:b7:37:90:ae:01:2f:14:c2:49:
5b:ce:46:05:80:10:b3:e0:ca:3d:82:ac:2d:12:3d:
89:37:0e:10:95:da:a3:5e:9d:be:84:58:52:3c:e6:
03:1b:83:07:93:7d:9e:1e:e0:b3:b4:0d:65:84:d2:
d0:09:ea:e8:d9:f5:54:48:d5:4a:bd:cc:46:b0:c1:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:32:69:21:C5:00:3A:E5:6C:16:72:46:30:39:30:34:67:8A:A5
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ir8yaSHFADrlbBZyRjA5MDRniqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:46::/48
Signature Algorithm: sha256WithRSAEncryption
19:ef:b0:4d:43:fc:f5:db:94:cf:95:e5:36:22:1b:44:14:4c:
33:70:49:78:ce:20:82:35:a2:8f:b4:d4:8e:25:00:da:4b:90:
19:01:50:5b:e2:ce:5a:bb:b2:0e:a3:f8:02:d0:f8:d1:c7:f5:
fa:95:53:82:f1:c0:f4:02:e1:7a:32:5a:55:0f:f5:55:d0:7b:
5f:1d:b1:99:bd:b3:c4:8c:33:08:c6:e2:87:16:41:3e:8a:d1:
f1:82:b0:8b:a6:0e:25:47:d2:ff:e3:1e:55:07:63:b8:4e:d5:
92:ae:6c:79:e7:57:27:98:fd:8b:84:87:49:dc:be:d5:a7:32:
b6:86:ec:34:df:3e:25:e2:70:50:4d:ee:04:af:4a:a4:65:86:
ae:78:cf:d4:7f:91:dc:b4:29:55:14:c3:a7:25:55:fd:2c:1b:
e2:a1:54:4e:bc:bf:2c:26:d0:d2:08:44:72:f1:fb:cc:6e:a0:
8a:6a:ac:83:ba:6b:e8:6d:9f:6a:5d:ed:5e:a1:3d:49:8d:a5:
97:a3:44:53:21:e5:89:98:2b:aa:0d:8f:ae:b9:40:4b:2e:15:
7f:61:9a:39:ea:28:f1:d6:3f:29:fa:93:f9:65:b0:47:38:93:
4b:2f:88:f4:88:87:67:18:5c:2e:a1:4e:fc:eb:6d:64:92:b2:
16:e2:9e:5d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvy73kO5DKE0BohcMD3lOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3
N2E2ZWYwHhcNMjMwMTAyMDAwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmJmMzI2OTIxYzUwMDNhZTU2YzE2NzI0NjMwMzkzMDM0Njc4YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mPrt2nuXaig8BVHUIn67Og7foFm
kO3+m/Vhow4mbCVURwYb1PwS7eygYPgsDLR52y/Qh7zOWuuwCS+OgEg4y6Dgt7XL
OQXKJCcxxW/hulkIdG/wWlY8rdI9kZ9RBMhN0Foi2DmbNhDhW7bVneYO0hbIxQxs
Mjv18wIEI6m2QHZG1S/gn5dZ9TgmtnCKTjclKZFkv6+DEER+2b14RvbzdV15b0CM
IwPqT0aPk7xPBf8Vr6ouGuGSULK3N5CuAS8UwklbzkYFgBCz4Mo9gqwtEj2JNw4Q
ldqjXp2+hFhSPOYDG4MHk32eHuCztA1lhNLQCero2fVUSNVKvcxGsMGNSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCK/MmkhxQA65WwWckYwOTA0Z4qlMB8GA1UdIwQY
MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt
YTk1NGQwNTM5OTRhLzEvSXI4eWFTSEZBRHJsYkJaeVJqQTVNRFJuaXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh
LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABG
MA0GCSqGSIb3DQEBCwUAA4IBAQAZ77BNQ/z125TPleU2IhtEFEwzcEl4ziCCNaKP
tNSOJQDaS5AZAVBb4s5au7IOo/gC0PjRx/X6lVOC8cD0AuF6MlpVD/VV0HtfHbGZ
vbPEjDMIxuKHFkE+itHxgrCLpg4lR9L/4x5VB2O4TtWSrmx551cnmP2LhIdJ3L7V
pzK2huw03z4l4nBQTe4Er0qkZYaueM/Uf5HctClVFMOnJVX9LBvioVROvL8sJtDS
CERy8fvMbqCKaqyDumvobZ9qXe1eoT1JjaWXo0RTIeWJmCuqDY+uuUBLLhV/YZo5
6ijx1j8p+pP5ZbBHOJNLL4j0iIdnGFwuoU78621kkrIW4p5d
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:19 2024 by rpki-client on console-ams.rpki-client.org