Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RSobZPHHMrmCb0yUeqH3JfMLn1Q.roa
File: RSobZPHHMrmCb0yUeqH3JfMLn1Q.roa (raw, json)
Hash identifier: Xqg74351XNaczFxBTB1gM2yjNeY8ToRS9ZixjoBC0cs=
Subject key identifier: 45:2A:1B:64:F1:C7:32:B9:82:6F:4C:94:7A:A1:F7:25:F3:0B:9F:54
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 018E2DF74AE2A0C351E1A0CB31CAF1A4D247
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RSobZPHHMrmCb0yUeqH3JfMLn1Q.roa
Signing time: Mon 11 Mar 2024 14:42:45 +0000
ROA not before: Mon 11 Mar 2024 14:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:6980::/29 maxlen: 29
2a0c:f642::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 12 Mar 2024 11:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:f7:4a:e2:a0:c3:51:e1:a0:cb:31:ca:f1:a4:d2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 11 14:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452a1b64f1c732b9826f4c947aa1f725f30b9f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:92:6d:77:1e:16:c8:a7:78:bb:d4:cb:92:
2f:63:f5:80:45:1e:57:ed:53:5c:4c:1e:52:2d:1b:
ad:25:b0:7c:89:d6:c4:e6:4c:d9:49:66:bf:22:5d:
d5:0a:ef:04:6b:a6:53:aa:fb:bd:6d:84:87:f7:e7:
e3:60:3d:e4:8c:62:1e:0d:82:3b:16:6f:be:61:31:
ac:47:97:45:ea:21:5f:fd:4b:14:70:cf:c3:f0:28:
46:a2:81:de:12:0e:ee:03:20:76:fd:f2:69:61:58:
21:05:83:7a:14:ed:cc:26:9c:c8:97:2d:bd:cc:d4:
d9:fd:05:41:19:5f:43:1d:73:59:38:f4:af:8e:07:
57:68:8e:70:23:ce:5a:7a:d4:7d:9e:47:b9:4f:f2:
88:6d:78:bd:46:26:a8:40:21:f4:1b:f7:bc:b3:25:
b6:a1:bb:23:c4:3b:4f:5f:7f:67:0b:23:a8:2d:9b:
12:f9:27:3f:63:d3:2e:bf:fc:5c:f8:1e:08:94:bc:
68:9f:2d:2e:14:1a:e5:2c:3a:45:b9:a4:ce:d4:a4:
48:df:1e:9d:05:d9:99:ce:ef:17:b2:f2:12:49:55:
68:bf:ac:8d:3a:30:1d:a1:19:f0:d6:13:08:59:37:
72:e9:53:3e:0e:ee:66:a3:16:2c:c8:22:32:8b:eb:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:1B:64:F1:C7:32:B9:82:6F:4C:94:7A:A1:F7:25:F3:0B:9F:54
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RSobZPHHMrmCb0yUeqH3JfMLn1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6980::/29
2a0c:f642::/32
Signature Algorithm: sha256WithRSAEncryption
24:f9:d3:cc:4f:9f:79:c3:72:cd:6a:a9:0d:85:f3:ce:25:cd:
85:50:71:1d:14:39:2c:2c:82:03:dc:a0:ce:be:12:91:5b:aa:
92:74:67:42:ea:10:c9:2a:e7:e5:54:f5:87:53:c4:c7:35:5b:
86:c6:2d:97:d1:2e:81:96:cf:28:2b:b8:3a:a5:20:8f:f1:7f:
e0:b9:a1:26:c5:53:c3:99:e6:cb:a2:eb:0a:15:05:8b:08:6a:
ec:60:5c:76:f0:4b:f8:3e:4f:82:a9:6f:8a:78:55:23:e2:9f:
13:89:05:1a:75:82:0c:9e:d0:7b:56:a1:a8:71:2c:09:ed:a7:
08:50:c7:cc:a9:8c:2b:08:69:79:8a:5d:ab:d0:01:79:4b:71:
b6:69:66:50:31:7b:96:29:88:58:1b:ed:82:37:30:be:51:4a:
c6:27:b6:a6:d8:0d:e7:9f:9b:09:f9:e2:09:92:dc:4d:42:d3:
91:61:47:b3:f1:51:db:4a:d7:b0:ec:88:2c:74:75:63:8e:44:
ce:47:c6:33:91:65:32:b6:aa:b9:84:9b:57:58:6f:85:b3:9a:
1f:bd:5a:30:21:58:75:0b:da:4b:25:76:aa:7b:29:4c:74:8d:
a7:7c:31:36:d2:8d:4e:41:2c:ec:2a:01:38:ea:d4:cc:91:bf:
02:0f:31:95
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY4t90rioMNR4aDLMcrxpNJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQwMzExMTQ0MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTJhMWI2NGYxYzczMmI5ODI2ZjRjOTQ3YWExZjcyNWYzMGI5ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCCSbXceFsineLvUy5IvY/WARR5X
7VNcTB5SLRutJbB8idbE5kzZSWa/Il3VCu8Ea6ZTqvu9bYSH9+fjYD3kjGIeDYI7
Fm++YTGsR5dF6iFf/UsUcM/D8ChGooHeEg7uAyB2/fJpYVghBYN6FO3MJpzIly29
zNTZ/QVBGV9DHXNZOPSvjgdXaI5wI85aetR9nke5T/KIbXi9RiaoQCH0G/e8syW2
obsjxDtPX39nCyOoLZsS+Sc/Y9Muv/xc+B4IlLxony0uFBrlLDpFuaTO1KRI3x6d
BdmZzu8XsvISSVVov6yNOjAdoRnw1hMIWTdy6VM+Du5moxYsyCIyi+v1wQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEUqG2TxxzK5gm9MlHqh9yXzC59UMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvUlNvYlpQSEhNcm1DYjB5VWVxSDNKZk1MbjFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgxpgAMF
ACoM9kIwDQYJKoZIhvcNAQELBQADggEBACT508xPn3nDcs1qqQ2F884lzYVQcR0U
OSwsggPcoM6+EpFbqpJ0Z0LqEMkq5+VU9YdTxMc1W4bGLZfRLoGWzygruDqlII/x
f+C5oSbFU8OZ5sui6woVBYsIauxgXHbwS/g+T4Kpb4p4VSPinxOJBRp1ggye0HtW
oahxLAntpwhQx8ypjCsIaXmKXavQAXlLcbZpZlAxe5YpiFgb7YI3ML5RSsYntqbY
Deefmwn54gmS3E1C05FhR7PxUdtK17DsiCx0dWOORM5HxjORZTK2qrmEm1dYb4Wz
mh+9WjAhWHUL2ksldqp7KUx0jad8MTbSjU5BLOwqATjq1MyRvwIPMZU=
-----END CERTIFICATE-----
Generated at Tue Mar 12 17:24:43 2024 by rpki-client on console-fra.rpki-client.org