Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OR9qiGmEBML9KshS9rq9q6VgCkQ.roa
File: OR9qiGmEBML9KshS9rq9q6VgCkQ.roa (raw, json)
Hash identifier: RUpwxEbYxGkz2Id/TuqMMPs9moY214/RuZpmsBfUbQg=
Subject key identifier: 39:1F:6A:88:69:84:04:C2:FD:2A:C8:52:F6:BA:BD:AB:A5:60:0A:44
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0186BF76358800C0E6390046E673BE0D5E8C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OR9qiGmEBML9KshS9rq9q6VgCkQ.roa
Signing time: Wed 08 Mar 2023 04:24:00 +0000
ROA not before: Wed 08 Mar 2023 04:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 2a13:2980::/30 maxlen: 30
2a13:2984::/30 maxlen: 30
Validation: Failed, certificate revoked on Wed 05 Apr 2023 11:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:76:35:88:00:c0:e6:39:00:46:e6:73:be:0d:5e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 8 04:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=391f6a88698404c2fd2ac852f6babdaba5600a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:35:59:f3:87:9b:c7:8c:f0:5f:89:69:eb:
7e:7b:8f:f1:89:02:d9:84:54:61:91:e0:f5:c1:48:
38:29:23:07:c6:8f:fb:c7:4c:d7:ef:77:7d:f2:12:
4f:f9:8d:12:d6:78:06:cb:23:05:6a:a3:96:dd:71:
cd:b0:57:4f:b5:6a:ba:4e:70:4a:92:c6:6d:68:24:
cd:f4:60:7a:98:66:f4:9e:88:e8:18:18:30:3b:cb:
71:4d:d6:ec:db:69:eb:cd:87:55:46:e4:8b:01:6a:
62:a0:1c:35:49:46:09:bd:d9:fd:f6:f2:35:19:14:
68:a7:00:61:91:db:56:27:9f:05:99:33:38:a5:3e:
e2:98:19:c9:93:39:c9:a0:68:69:2d:3d:24:fb:8d:
67:32:9a:3c:52:1f:54:ab:5d:33:03:cf:db:e1:e4:
b2:86:c0:93:78:fb:6f:39:d4:88:5b:19:32:49:ae:
5e:aa:07:e8:c6:4d:d5:10:61:3b:43:07:7f:e0:b2:
e5:68:ee:3c:34:51:32:ff:38:f5:03:8e:d6:cc:b2:
cd:6d:4c:ad:cf:7e:c9:51:ca:69:3f:23:ee:3b:f8:
a1:1c:2a:0a:f9:c6:3f:dd:b6:de:26:40:89:6f:d7:
4e:d2:6d:21:97:83:25:26:ac:bc:97:c4:02:db:37:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:6A:88:69:84:04:C2:FD:2A:C8:52:F6:BA:BD:AB:A5:60:0A:44
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OR9qiGmEBML9KshS9rq9q6VgCkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2980::/29
Signature Algorithm: sha256WithRSAEncryption
10:5d:a5:d5:f2:38:98:62:85:95:02:47:80:52:99:7b:1c:70:
52:0f:4b:7d:76:3d:30:94:69:5f:b1:4d:12:ed:ca:15:67:e6:
c1:7c:09:02:92:ef:8a:e7:00:ad:8d:6d:22:28:02:34:52:56:
cd:b8:57:3c:5d:53:2f:c0:c2:69:8e:23:3d:cf:d2:d0:cc:c3:
53:9b:7e:80:88:a3:0c:af:7d:a5:a3:11:98:09:94:b5:e7:53:
93:73:4a:6d:41:c2:87:56:ab:62:87:6a:09:ca:85:55:85:b3:
bb:e5:ec:3c:ed:79:19:df:eb:11:b8:a4:22:2d:6d:db:26:0b:
91:db:66:00:81:e4:c9:4c:8d:7a:35:30:07:2c:53:32:56:ca:
f6:6a:e0:2d:10:1a:c3:7b:25:c8:cd:90:c7:63:fc:a2:2c:88:
a0:33:4e:85:6e:86:11:6d:0b:bf:47:a5:2b:bc:2f:5c:ab:c0:
33:ec:32:1f:2f:9b:c5:40:2b:3e:c7:30:ac:76:7c:bc:7d:bc:
44:a1:e3:75:ca:0d:a1:22:c6:e7:03:99:d0:45:38:17:ef:de:
62:9d:c4:c6:7e:c9:58:dc:ed:c0:71:ec:bc:30:a1:12:3e:c0:
0f:35:50:ce:24:b4:24:bb:da:f8:55:90:df:90:17:62:e3:d3:
29:e2:89:ee
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYa/djWIAMDmOQBG5nO+DV6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwMzA4MDQyNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFmNmE4ODY5ODQwNGMyZmQyYWM4NTJmNmJhYmRhYmE1NjAwYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYI1WfOHm8eM8F+Jaet+e4/xiQLZ
hFRhkeD1wUg4KSMHxo/7x0zX73d98hJP+Y0S1ngGyyMFaqOW3XHNsFdPtWq6TnBK
ksZtaCTN9GB6mGb0nojoGBgwO8txTdbs22nrzYdVRuSLAWpioBw1SUYJvdn99vI1
GRRopwBhkdtWJ58FmTM4pT7imBnJkznJoGhpLT0k+41nMpo8Uh9Uq10zA8/b4eSy
hsCTePtvOdSIWxkySa5eqgfoxk3VEGE7Qwd/4LLlaO48NFEy/zj1A47WzLLNbUyt
z37JUcppPyPuO/ihHCoK+cY/3bbeJkCJb9dO0m0hl4MlJqy8l8QC2zf8aQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDkfaohphATC/SrIUva6vaulYApEMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvT1I5cWlHbUVCTUw5S3NoUzlycTlxNlZnQ2tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMpgDAN
BgkqhkiG9w0BAQsFAAOCAQEAEF2l1fI4mGKFlQJHgFKZexxwUg9LfXY9MJRpX7FN
Eu3KFWfmwXwJApLviucArY1tIigCNFJWzbhXPF1TL8DCaY4jPc/S0MzDU5t+gIij
DK99paMRmAmUtedTk3NKbUHCh1arYodqCcqFVYWzu+XsPO15Gd/rEbikIi1t2yYL
kdtmAIHkyUyNejUwByxTMlbK9mrgLRAaw3slyM2Qx2P8oiyIoDNOhW6GEW0Lv0el
K7wvXKvAM+wyHy+bxUArPscwrHZ8vH28RKHjdcoNoSLG5wOZ0EU4F+/eYp3Exn7J
WNztwHHsvDChEj7ADzVQziS0JLva+FWQ35AXYuPTKeKJ7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org