Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/e6zcq0v1FNxOHdUawmme8ECp7Ng.roa
File: e6zcq0v1FNxOHdUawmme8ECp7Ng.roa (raw, json)
Hash identifier: SIOXIjX86YR8pNSvD2N0iVET2og7f/a0hpDly2BKRkk=
Subject key identifier: 7B:AC:DC:AB:4B:F5:14:DC:4E:1D:D5:1A:C2:69:9E:F0:40:A9:EC:D8
Certificate issuer: /CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Certificate serial: 018B1432AB805AAFB20374BE6863A5970464
Authority key identifier: 33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/e6zcq0v1FNxOHdUawmme8ECp7Ng.roa
Signing time: Mon 09 Oct 2023 11:29:06 +0000
ROA not before: Mon 09 Oct 2023 11:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28022
IP address blocks: 2a06:a780::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:32:ab:80:5a:af:b2:03:74:be:68:63:a5:97:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Validity
Not Before: Oct 9 11:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bacdcab4bf514dc4e1dd51ac2699ef040a9ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:17:5e:11:2d:40:fa:f6:24:48:ab:e8:d6:
a3:5f:e7:66:93:8c:81:1d:17:c8:ee:3a:82:fd:15:
a5:a4:c5:10:5f:f9:b8:8c:d5:df:f6:0a:9b:cb:ad:
1b:f4:5e:0f:5d:65:b9:81:41:8a:51:03:14:e6:fc:
e5:6b:ee:75:d8:50:45:c5:4a:1f:42:b6:6b:f0:f0:
8d:05:9b:70:8e:7f:6c:46:51:ad:71:07:1f:af:96:
f9:a3:05:c7:02:8a:68:75:bf:94:d4:58:bb:bd:6d:
e3:d7:32:3d:d4:b8:aa:fb:a3:84:ad:be:77:4c:c2:
16:b8:c2:f7:d3:cd:76:41:bb:cf:4b:17:a5:b1:b8:
44:41:d1:62:6e:a7:4e:e9:ff:d8:ef:85:bc:24:5c:
3c:60:0a:b2:a4:1d:c6:3a:0c:75:e6:d2:10:f6:f8:
ec:88:76:2f:95:1c:90:a4:35:56:cc:84:cb:41:7d:
2c:63:7d:d7:2b:40:a9:2f:65:59:f8:a6:cf:2f:e6:
9a:ea:27:c5:a5:b6:1f:64:7c:b3:35:75:6c:7a:62:
a2:87:a5:db:ab:5b:8a:df:27:3d:e6:b3:6b:18:e8:
ef:c1:2e:ad:26:a9:31:d3:c7:2e:c6:21:e6:42:1a:
37:74:ac:93:d2:98:e4:73:6a:46:a8:66:8e:05:6d:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:DC:AB:4B:F5:14:DC:4E:1D:D5:1A:C2:69:9E:F0:40:A9:EC:D8
X509v3 Authority Key Identifier:
keyid:33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/e6zcq0v1FNxOHdUawmme8ECp7Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a780::/29
Signature Algorithm: sha256WithRSAEncryption
02:31:1e:5f:a8:3c:27:a0:fe:73:65:db:2c:d6:7e:9f:9b:89:
ea:c3:04:41:e8:51:d4:d7:59:18:92:f7:a7:83:6f:fd:47:f4:
d7:d7:f3:24:3b:2c:07:18:93:96:cc:fa:d6:74:00:53:9d:2f:
24:fe:f8:d5:4c:e0:08:43:10:cc:a5:a0:e5:d0:99:69:c3:c8:
0a:95:6a:df:09:82:8c:2f:c5:a7:3e:06:a6:dd:c5:d5:15:69:
ce:58:fd:53:b0:36:a2:bb:01:85:f5:bd:c1:1e:a5:e4:fc:a7:
f2:62:0f:7b:4c:eb:56:10:41:75:e8:7f:8b:a7:bf:00:d5:10:
b1:34:10:39:4e:09:7f:da:9a:ea:2d:f3:a8:ca:b4:a5:5d:73:
70:22:c0:c6:5a:80:d3:39:d8:c5:18:51:33:01:7c:06:94:54:
b3:e3:f6:dd:a1:78:d7:bf:51:37:f9:f8:6c:4e:fa:ba:8c:dd:
dc:9c:c3:ff:14:58:f3:66:f8:53:19:2e:63:a9:b3:03:0c:a4:
97:af:1d:99:3b:fe:00:01:52:ea:c3:e1:2d:0c:35:6e:ce:bb:
90:10:a0:b6:f9:3d:6e:b1:2f:dd:d4:ae:4c:c6:64:c5:9e:8c:
c9:1a:98:00:b7:0f:2b:e0:05:82:ab:db:a5:4d:cc:2c:45:8d:
e7:f1:7f:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYsUMquAWq+yA3S+aGOllwRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmI2OWUyZGQyOWJiZTQ4OTQ2YzRkNThhYzYwZWIyM2Rm
Zjk1YzUwHhcNMjMxMDA5MTEyOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmFjZGNhYjRiZjUxNGRjNGUxZGQ1MWFjMjY5OWVmMDQwYTllY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnQXXhEtQPr2JEir6NajX+dmk4yB
HRfI7jqC/RWlpMUQX/m4jNXf9gqby60b9F4PXWW5gUGKUQMU5vzla+512FBFxUof
QrZr8PCNBZtwjn9sRlGtcQcfr5b5owXHAopodb+U1Fi7vW3j1zI91Liq+6OErb53
TMIWuML30812QbvPSxelsbhEQdFibqdO6f/Y74W8JFw8YAqypB3GOgx15tIQ9vjs
iHYvlRyQpDVWzITLQX0sY33XK0CpL2VZ+KbPL+aa6ifFpbYfZHyzNXVsemKih6Xb
q1uK3yc95rNrGOjvwS6tJqkx08cuxiHmQho3dKyT0pjkc2pGqGaOBW2m2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHus3KtL9RTcTh3VGsJpnvBAqezYMB8GA1UdIwQY
MBaAFDNraeLdKbvkiUbE1YrGDrI9/5XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJ0cDR0MHB1LVNKUnNUVmlzWU9zajNfbGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZjQxZjEtMDVhYS00Y2FlLWIwOTEt
MmIxNTZmZGY3MjQzLzEvZTZ6Y3EwdjFGTnhPSGRVYXdtbWU4RUNwN05nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ZjQxZjEtMDVhYS00Y2FlLWIwOTEtMmIxNTZmZGY3MjQz
LzEvTTJ0cDR0MHB1LVNKUnNUVmlzWU9zajNfbGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgangDAN
BgkqhkiG9w0BAQsFAAOCAQEAAjEeX6g8J6D+c2XbLNZ+n5uJ6sMEQehR1NdZGJL3
p4Nv/Uf019fzJDssBxiTlsz61nQAU50vJP741UzgCEMQzKWg5dCZacPICpVq3wmC
jC/Fpz4Gpt3F1RVpzlj9U7A2orsBhfW9wR6l5Pyn8mIPe0zrVhBBdeh/i6e/ANUQ
sTQQOU4Jf9qa6i3zqMq0pV1zcCLAxlqA0znYxRhRMwF8BpRUs+P23aF4179RN/n4
bE76uozd3JzD/xRY82b4UxkuY6mzAwykl68dmTv+AAFS6sPhLQw1bs67kBCgtvk9
brEv3dSuTMZkxZ6MyRqYALcPK+AFgqvbpU3MLEWN5/F/Yg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:02 2023 by rpki-client on console.sobornost.net