Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/1-P2GQSp2PVz3CMUAJWaR1pvTNmk.roa
File: 1-P2GQSp2PVz3CMUAJWaR1pvTNmk.roa (raw, json)
Hash identifier: QVMS/v8qtWj9gW5ADXnXj58otOm0ou9nqA+vHP96qAg=
Subject key identifier: F8:FD:86:41:2A:76:3D:5C:F7:08:C5:00:25:66:91:D6:9B:D3:36:69
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 018570D50971E7CFC229C299E593B13C4A2C
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/1-P2GQSp2PVz3CMUAJWaR1pvTNmk.roa
Signing time: Mon 02 Jan 2023 04:54:47 +0000
ROA not before: Mon 02 Jan 2023 04:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206946
IP address blocks: 2001:678:2b8::/48 maxlen: 48
2001:678:2b9::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:09:71:e7:cf:c2:29:c2:99:e5:93:b1:3c:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jan 2 04:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8fd86412a763d5cf708c500256691d69bd33669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:ed:f9:3f:c6:8e:92:f4:cf:df:1f:02:86:
cb:ed:81:22:37:61:22:14:be:c0:fe:04:3b:02:42:
2e:e2:bb:e1:10:5f:80:be:6c:f2:34:33:70:d4:eb:
8c:ee:91:ee:6f:56:60:23:0a:77:96:24:70:d3:53:
db:01:fb:84:ca:12:f6:cb:f1:e6:a1:40:4f:5d:15:
2e:27:43:83:c4:45:f8:ea:27:60:28:b7:79:26:fc:
f4:19:6c:03:c6:78:cb:73:0f:7c:0f:17:26:72:a1:
16:65:c8:3c:11:5b:33:98:a9:f9:5b:e6:42:c8:3e:
89:b4:4d:b3:c6:8a:88:0d:45:f6:74:69:f6:f5:04:
74:2b:7e:94:2c:19:9d:5d:88:a0:b5:a5:be:b2:98:
d6:ec:52:72:82:ae:49:e8:a0:59:81:de:b4:1c:ed:
56:19:b9:3a:1d:30:13:8e:66:a0:3b:af:cc:4c:73:
22:62:a7:f2:a6:d3:12:85:35:7f:4e:6f:bf:92:3a:
77:ed:4c:35:40:47:04:0a:83:52:be:5a:19:53:ff:
55:e8:d5:b2:7d:15:0f:91:12:73:46:77:fa:25:38:
5c:f8:cc:45:c7:a9:b7:5c:1f:13:70:6b:40:f5:ca:
a1:da:47:b8:41:ee:65:5c:28:92:3a:67:56:bd:0b:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:86:41:2A:76:3D:5C:F7:08:C5:00:25:66:91:D6:9B:D3:36:69
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/1-P2GQSp2PVz3CMUAJWaR1pvTNmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2b8::/47
Signature Algorithm: sha256WithRSAEncryption
b4:b0:d4:71:dc:67:c6:62:ec:d4:4f:8a:a2:7e:dd:e6:9a:4a:
2c:6d:7e:8a:24:bc:f9:50:23:31:af:35:dd:0c:63:76:36:a7:
4a:27:31:38:d7:59:0d:3b:6d:46:7c:02:80:7f:2e:46:ea:2f:
39:68:3b:85:98:c3:d6:48:1c:c4:39:e9:98:ec:eb:e1:20:e6:
df:70:ec:fb:7c:d9:05:cf:5f:6b:dd:dd:96:eb:68:34:63:f3:
87:2b:40:4b:53:0a:e1:42:09:b9:6b:e8:f1:15:20:56:d1:18:
da:8b:2a:26:24:2b:69:6c:81:8f:4a:0d:d5:07:39:d4:82:8d:
e6:f3:e1:94:63:a6:05:3e:be:71:04:c2:28:33:e8:81:96:eb:
28:1d:10:72:2b:56:68:b5:73:32:fa:65:3b:f0:62:db:1b:78:
d1:79:69:76:74:a4:6c:cc:fa:fa:68:31:bc:6c:05:6b:98:14:
62:c3:a3:bb:6b:f7:6d:1b:5e:3b:4c:28:8a:08:8d:72:32:b6:
bc:86:ab:dc:39:d7:f6:66:37:c4:77:62:fb:87:91:8b:e8:ab:
e1:c9:8c:eb:72:a8:4e:2c:dd:9a:5c:56:a5:36:62:2e:5d:2e:
47:42:0a:d4:6e:37:31:d2:b0:9d:f0:0d:d3:6a:d7:aa:fa:1e:
98:ce:c6:b6
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYVw1Qlx58/CKcKZ5ZOxPEosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4
NjVmZDMwHhcNMjMwMTAyMDQ1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGZkODY0MTJhNzYzZDVjZjcwOGM1MDAyNTY2OTFkNjliZDMzNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO7t+T/GjpL0z98fAobL7YEiN2Ei
FL7A/gQ7AkIu4rvhEF+AvmzyNDNw1OuM7pHub1ZgIwp3liRw01PbAfuEyhL2y/Hm
oUBPXRUuJ0ODxEX46idgKLd5Jvz0GWwDxnjLcw98DxcmcqEWZcg8EVszmKn5W+ZC
yD6JtE2zxoqIDUX2dGn29QR0K36ULBmdXYigtaW+spjW7FJygq5J6KBZgd60HO1W
Gbk6HTATjmagO6/MTHMiYqfyptMShTV/Tm+/kjp37Uw1QEcECoNSvloZU/9V6NWy
fRUPkRJzRnf6JThc+MxFx6m3XB8TcGtA9cqh2ke4Qe5lXCiSOmdWvQt1lQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPj9hkEqdj1c9wjFACVmkdab0zZpMB8GA1UdIwQY
MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt
MzkyYTc1MjQ2NGIxLzEvMS1QMkdRU3AyUFZ6M0NNVUFKV2FSMXB2VE5tay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDAvNGQ4YTc0LTYwYjgtNDEwZS1hYTM1LTM5MmE3NTI0NjRi
MS8xL2J5d01acmEwWVN5SlNZQVBDU2tjcjZPR1g5TS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASABBngC
uDANBgkqhkiG9w0BAQsFAAOCAQEAtLDUcdxnxmLs1E+Kon7d5ppKLG1+iiS8+VAj
Ma813QxjdjanSicxONdZDTttRnwCgH8uRuovOWg7hZjD1kgcxDnpmOzr4SDm33Ds
+3zZBc9fa93dlutoNGPzhytAS1MK4UIJuWvo8RUgVtEY2osqJiQraWyBj0oN1Qc5
1IKN5vPhlGOmBT6+cQTCKDPogZbrKB0QcitWaLVzMvplO/Bi2xt40XlpdnSkbMz6
+mgxvGwFa5gUYsOju2v3bRteO0woigiNcjK2vIar3DnX9mY3xHdi+4eRi+ir4cmM
63KoTizdmlxWpTZiLl0uR0IK1G43MdKwnfAN02rXqvoemM7Gtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org