Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/WlYBQF4c6NhhRsoaUCTGhCksz_M.roa
File: WlYBQF4c6NhhRsoaUCTGhCksz_M.roa (raw, json)
Hash identifier: RdIrx3CWmO46Sv1ta4pQqVc7uns8Knnj8Jz49rVhf6Y=
Subject key identifier: 5A:56:01:40:5E:1C:E8:D8:61:46:CA:1A:50:24:C6:84:29:2C:CF:F3
Certificate issuer: /CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Certificate serial: 01856F94B606674523A106FF3985615226F3
Authority key identifier: 74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/WlYBQF4c6NhhRsoaUCTGhCksz_M.roa
Signing time: Sun 01 Jan 2023 23:04:54 +0000
ROA not before: Sun 01 Jan 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213343
IP address blocks: 2001:678:d18::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b6:06:67:45:23:a1:06:ff:39:85:61:52:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Validity
Not Before: Jan 1 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a5601405e1ce8d86146ca1a5024c684292ccff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8b:d0:09:df:2f:c2:7e:7a:0c:72:57:45:27:
5b:12:dd:66:a9:bd:9f:5e:ed:4c:39:f0:09:cd:65:
71:0c:3a:0f:74:64:88:cd:4d:5f:7f:e1:eb:9c:9c:
30:c4:4a:16:0d:8c:18:a5:ba:25:d8:b0:2c:1c:fb:
72:1e:3f:9f:13:45:18:0f:52:6c:3c:69:5e:83:90:
00:b7:48:e1:72:c1:4c:2f:20:63:63:cc:f7:71:dc:
79:f7:ec:57:b1:b5:98:cc:03:67:b4:c2:59:d7:5a:
d7:a7:1c:da:f5:61:d2:35:b0:3c:94:65:bb:77:cb:
10:2a:7d:6d:62:a4:37:ca:49:d0:ba:04:aa:20:55:
23:78:e3:18:d1:f0:37:f4:5c:cf:66:4f:f5:6d:29:
b9:46:d8:3c:16:ae:02:bf:c7:5a:af:4a:41:17:23:
b1:7d:17:75:0c:e2:f9:5a:bb:9a:06:71:6d:f0:be:
d4:c6:6f:cb:93:0b:6e:23:29:90:d4:fb:49:81:6a:
37:b0:a6:0c:53:81:70:e5:d7:24:cd:e1:e7:12:5f:
a2:11:7b:06:87:a7:cd:03:ec:c8:4d:b2:82:ad:96:
b8:2b:85:71:52:15:dc:94:33:81:57:db:6f:e3:1a:
d6:55:4d:a2:6d:d8:de:3e:7a:5b:cc:87:5d:71:53:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:01:40:5E:1C:E8:D8:61:46:CA:1A:50:24:C6:84:29:2C:CF:F3
X509v3 Authority Key Identifier:
keyid:74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/WlYBQF4c6NhhRsoaUCTGhCksz_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d18::/48
Signature Algorithm: sha256WithRSAEncryption
5e:dc:20:63:5b:63:d7:14:0b:e0:09:7f:8b:8a:ef:a0:8f:72:
dd:a4:87:1c:82:55:0d:18:8c:2d:c2:a0:3c:d1:57:a2:42:f2:
24:1a:5a:73:fa:cb:53:0c:e1:b4:f9:c5:4e:73:a5:05:23:e7:
91:2a:dd:20:3c:1d:55:56:6b:3b:af:6d:79:7d:62:21:b4:e9:
4f:6b:4c:3e:73:44:91:da:fc:36:e8:9e:cd:db:30:5a:1b:b9:
06:76:41:57:e2:8a:68:bc:da:4d:94:8e:c5:09:b7:a1:f4:7e:
34:fa:b5:03:52:8a:25:9b:18:d6:e2:01:58:40:fd:d6:99:b8:
5d:a4:eb:ca:ef:b5:a4:87:9a:b2:28:7f:9d:13:45:38:5e:36:
e9:dd:e6:84:8e:83:4c:2b:4a:b7:f0:50:2c:a7:0d:63:a7:12:
01:42:50:6d:e4:87:39:ca:b2:c7:c7:a9:47:11:96:c2:93:80:
e3:12:a5:eb:bb:c1:87:4e:f7:dc:a5:63:11:01:ea:cb:fd:fb:
3c:03:92:15:5e:fa:67:56:39:28:cc:f4:71:e5:d2:f8:68:28:
9c:71:46:35:4c:da:e7:49:0b:6f:73:58:e2:28:8c:10:8e:b5:
fb:a8:68:4f:00:3a:c0:ca:51:58:0c:22:7c:4a:55:86:11:a3:
4e:40:10:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvlLYGZ0UjoQb/OYVhUibzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTg3NDMxYmViZjcwM2NjNGU0YTMzMTA2ZjQ2MThhMWEw
MGE5NjkwHhcNMjMwMTAxMjMwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU2MDE0MDVlMWNlOGQ4NjE0NmNhMWE1MDI0YzY4NDI5MmNjZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYvQCd8vwn56DHJXRSdbEt1mqb2f
Xu1MOfAJzWVxDDoPdGSIzU1ff+HrnJwwxEoWDYwYpbol2LAsHPtyHj+fE0UYD1Js
PGleg5AAt0jhcsFMLyBjY8z3cdx59+xXsbWYzANntMJZ11rXpxza9WHSNbA8lGW7
d8sQKn1tYqQ3yknQugSqIFUjeOMY0fA39FzPZk/1bSm5Rtg8Fq4Cv8dar0pBFyOx
fRd1DOL5WruaBnFt8L7Uxm/LkwtuIymQ1PtJgWo3sKYMU4Fw5dckzeHnEl+iEXsG
h6fNA+zITbKCrZa4K4VxUhXclDOBV9tv4xrWVU2ibdjePnpbzIddcVOyNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFpWAUBeHOjYYUbKGlAkxoQpLM/zMB8GA1UdIwQY
MBaAFHTodDG+v3A8xOSjMQb0YYoaAKlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9oME1iNl9jRHpFNUtNeEJ2UmhpaG9BcVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNGY1ZWMtZWZkYy00YjAwLThlYjYt
YTA0OGViOTRkNTViLzEvV2xZQlFGNGM2TmhoUnNvYVVDVEdoQ2tzel9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lNGY1ZWMtZWZkYy00YjAwLThlYjYtYTA0OGViOTRkNTVi
LzEvZE9oME1iNl9jRHpFNUtNeEJ2UmhpaG9BcVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA0Y
MA0GCSqGSIb3DQEBCwUAA4IBAQBe3CBjW2PXFAvgCX+Liu+gj3LdpIccglUNGIwt
wqA80VeiQvIkGlpz+stTDOG0+cVOc6UFI+eRKt0gPB1VVms7r215fWIhtOlPa0w+
c0SR2vw26J7N2zBaG7kGdkFX4opovNpNlI7FCbeh9H40+rUDUoolmxjW4gFYQP3W
mbhdpOvK77Wkh5qyKH+dE0U4Xjbp3eaEjoNMK0q38FAspw1jpxIBQlBt5Ic5yrLH
x6lHEZbCk4DjEqXru8GHTvfcpWMRAerL/fs8A5IVXvpnVjkozPRx5dL4aCiccUY1
TNrnSQtvc1jiKIwQjrX7qGhPADrAylFYDCJ8SlWGEaNOQBAC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:06 2024 by rpki-client on console-fra.rpki-client.org