Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/2vJDurWf3PkdGRdswQXVvqKm7Iw.roa
File: 2vJDurWf3PkdGRdswQXVvqKm7Iw.roa (raw, json)
Hash identifier: qA56PJqrpPuuhgh69gu1gBZ2SgKdE6v2QpvAx2E6vuE=
Subject key identifier: DA:F2:43:BA:B5:9F:DC:F9:1D:19:17:6C:C1:05:D5:BE:A2:A6:EC:8C
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 018F3D88F4D10CD8EED3EF3DB34A9CD3A8CE
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/2vJDurWf3PkdGRdswQXVvqKm7Iw.roa
Signing time: Fri 03 May 2024 08:18:56 +0000
ROA not before: Fri 03 May 2024 08:18:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214977
IP address blocks: 2a14:4800::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 22 May 2024 13:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3d:88:f4:d1:0c:d8:ee:d3:ef:3d:b3:4a:9c:d3:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: May 3 08:18:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daf243bab59fdcf91d19176cc105d5bea2a6ec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:7c:db:8c:c9:96:01:86:bb:0a:76:b2:87:
da:c0:ea:bd:a8:63:9b:cb:68:5e:20:6c:64:a6:3f:
ea:e2:7e:7f:c1:bd:67:9d:f1:26:a8:06:71:55:e5:
8a:19:d9:ed:1d:4d:b0:2a:44:d3:81:99:18:fb:5b:
14:91:e2:4b:1d:16:6e:f6:3c:f5:2c:57:63:af:ba:
b6:5f:d0:f3:05:8e:43:c8:75:cb:50:b4:e7:44:49:
c2:4e:8c:23:00:fe:fe:a6:a0:c8:04:78:fc:93:10:
92:1d:8f:95:0e:e2:81:f3:ef:59:45:a3:75:3e:cb:
da:7d:5d:c4:2d:f1:0a:c8:02:ae:5f:bc:df:b9:cf:
1d:0a:3b:65:e7:8a:f0:c9:79:71:ff:6f:cf:50:c9:
25:88:99:53:fd:6f:94:1f:ca:42:b8:b6:5a:29:52:
26:78:ed:f9:9a:43:e5:e3:0f:1c:35:2c:df:d1:a2:
23:cd:fb:be:8e:bc:93:e7:7d:71:83:a7:70:49:06:
11:30:43:03:71:2b:e4:6e:e6:97:6d:1e:aa:74:7b:
33:bc:b9:8e:75:5a:63:c8:f2:ab:16:5d:1b:1f:9d:
11:83:00:ce:56:7b:0b:ea:9a:ed:28:a9:7c:4c:d7:
6c:79:0a:0c:df:d7:76:cf:10:70:ff:e3:15:8c:22:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:43:BA:B5:9F:DC:F9:1D:19:17:6C:C1:05:D5:BE:A2:A6:EC:8C
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/2vJDurWf3PkdGRdswQXVvqKm7Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4800::/29
Signature Algorithm: sha256WithRSAEncryption
ca:45:9d:7a:37:c0:58:d9:86:3a:54:01:9f:76:34:a0:ba:96:
b7:b2:ad:d0:19:d3:c4:5d:ac:3a:c3:7f:54:39:3e:83:a5:50:
5c:67:42:57:08:0c:69:68:9d:10:a9:35:c0:55:68:f0:e4:cb:
45:45:db:c0:22:b8:b3:0a:df:85:2d:0a:7a:a4:ca:b0:c2:37:
d0:a4:a1:77:e2:eb:61:bb:b2:a6:61:9f:26:e7:c3:93:d1:a2:
9a:45:ef:8f:c6:04:c8:aa:1f:72:40:34:f5:66:6e:85:8d:ea:
59:b3:f1:5b:00:7e:f1:e6:f9:05:99:55:de:90:54:c1:47:83:
17:4d:07:21:12:f3:fb:f1:c7:ff:fd:7d:24:14:44:e2:34:03:
aa:b7:0c:8c:a8:d4:a2:3d:36:eb:88:97:88:e1:8f:c3:b7:f7:
23:61:d3:71:a0:b6:8e:25:42:47:19:91:69:4c:a2:fe:87:56:
ca:56:25:b6:01:30:2b:3f:6b:bb:89:e8:18:66:d7:9e:1a:8b:
3f:62:d4:e4:f1:19:6c:08:87:f5:6b:98:2f:f6:70:2d:39:3e:
30:51:4b:45:53:ab:85:8a:c7:8c:60:d7:b9:4c:07:ea:13:81:
93:ad:c6:48:92:9a:f2:14:4d:04:72:23:0a:ab:73:84:88:c6:
96:da:dc:57
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY89iPTRDNju0+89s0qc06jOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx
N2FiYjQwHhcNMjQwNTAzMDgxODU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWYyNDNiYWI1OWZkY2Y5MWQxOTE3NmNjMTA1ZDViZWEyYTZlYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vt824zJlgGGuwp2sofawOq9qGOb
y2heIGxkpj/q4n5/wb1nnfEmqAZxVeWKGdntHU2wKkTTgZkY+1sUkeJLHRZu9jz1
LFdjr7q2X9DzBY5DyHXLULTnREnCTowjAP7+pqDIBHj8kxCSHY+VDuKB8+9ZRaN1
PsvafV3ELfEKyAKuX7zfuc8dCjtl54rwyXlx/2/PUMkliJlT/W+UH8pCuLZaKVIm
eO35mkPl4w8cNSzf0aIjzfu+jryT531xg6dwSQYRMEMDcSvkbuaXbR6qdHszvLmO
dVpjyPKrFl0bH50RgwDOVnsL6prtKKl8TNdseQoM39d2zxBw/+MVjCIxqQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNryQ7q1n9z5HRkXbMEF1b6ipuyMMB8GA1UdIwQY
MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt
YjdiYmY1YTFhYzczLzEvMnZKRHVyV2YzUGtkR1Jkc3dRWFZ2cUttN0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz
LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRIADAN
BgkqhkiG9w0BAQsFAAOCAQEAykWdejfAWNmGOlQBn3Y0oLqWt7Kt0BnTxF2sOsN/
VDk+g6VQXGdCVwgMaWidEKk1wFVo8OTLRUXbwCK4swrfhS0KeqTKsMI30KShd+Lr
YbuypmGfJufDk9GimkXvj8YEyKofckA09WZuhY3qWbPxWwB+8eb5BZlV3pBUwUeD
F00HIRLz+/HH//19JBRE4jQDqrcMjKjUoj0264iXiOGPw7f3I2HTcaC2jiVCRxmR
aUyi/odWylYltgEwKz9ru4noGGbXnhqLP2LU5PEZbAiH9WuYL/ZwLTk+MFFLRVOr
hYrHjGDXuUwH6hOBk63GSJKa8hRNBHIjCqtzhIjGltrcVw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:20 2025 by rpki-client