Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/4AM8_T_YJQCyxRxNQAfi5O1ukK0.roa
File: 4AM8_T_YJQCyxRxNQAfi5O1ukK0.roa (raw, json)
Hash identifier: l88P8urAbiRu6RivurUapw0Fq1+8X7k67L7YWXN16SM=
Subject key identifier: E0:03:3C:FD:3F:D8:25:00:B2:C5:1C:4D:40:07:E2:E4:ED:6E:90:AD
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 018570D5076995E88CB1C23C29C3F98996DF
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/4AM8_T_YJQCyxRxNQAfi5O1ukK0.roa
Signing time: Mon 02 Jan 2023 04:54:47 +0000
ROA not before: Mon 02 Jan 2023 04:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49745
IP address blocks: 2001:678:2b8::/48 maxlen: 48
2001:678:2b9::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:07:69:95:e8:8c:b1:c2:3c:29:c3:f9:89:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jan 2 04:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0033cfd3fd82500b2c51c4d4007e2e4ed6e90ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:54:68:24:ba:ff:26:95:36:6e:7b:15:f5:
5c:24:aa:5c:ec:50:f7:0a:0c:16:d5:c7:00:5f:9c:
8b:d7:0a:24:6f:7e:cf:4f:50:3c:54:18:24:6b:80:
9f:9e:84:a1:c2:bf:ab:30:13:2a:a0:d7:65:d0:90:
da:81:a4:e8:79:70:7d:a0:4f:53:36:72:3a:bb:7c:
35:cc:58:d5:62:6d:5e:b9:0e:32:d9:22:0f:d0:b8:
ff:a8:ea:b3:63:9d:e0:50:ff:fb:89:ed:f1:22:09:
b8:00:1a:e4:fd:e0:78:a9:22:14:9e:a4:c2:bb:11:
71:65:b2:47:a7:51:12:69:25:41:a3:84:19:0f:fb:
39:26:f0:c3:7c:3f:2c:a9:52:95:1f:8b:49:f9:59:
02:79:41:20:f2:f1:79:8a:ca:de:71:29:22:19:87:
da:2e:fb:cc:77:10:16:1b:96:c9:b1:d6:cc:71:b6:
1c:9e:7b:a8:b3:ba:cf:ba:85:d3:6f:73:8c:1d:bb:
b5:f3:d0:52:5c:5d:4e:de:50:56:67:8a:7e:3a:5d:
2b:f3:76:c0:6b:9c:8f:5e:eb:e2:8e:61:ec:a4:fa:
5c:27:fe:f3:2c:6f:17:7f:4c:47:3d:f0:2c:eb:e4:
4a:f6:da:e4:da:ae:ef:70:9c:2e:9d:0f:fc:5c:2e:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:3C:FD:3F:D8:25:00:B2:C5:1C:4D:40:07:E2:E4:ED:6E:90:AD
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/4AM8_T_YJQCyxRxNQAfi5O1ukK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2b8::/47
Signature Algorithm: sha256WithRSAEncryption
ca:b2:d5:6e:c5:24:eb:e4:5e:92:ce:47:a8:5d:12:4d:91:f9:
1c:23:c0:de:c1:46:b9:dc:a5:0c:ef:26:6f:21:5b:ee:28:2f:
22:70:ce:66:86:4a:2d:70:fa:f9:6c:9a:a7:6e:79:90:04:8b:
b0:3f:80:e6:eb:b7:e6:35:07:f5:91:51:4e:d4:12:c5:3a:3c:
57:52:35:42:24:94:01:e7:2e:b0:0d:5e:c9:ba:d6:31:6e:a5:
2f:89:81:3c:5e:36:0e:c6:0b:5d:06:37:1a:06:36:fd:18:ed:
7e:67:a1:d9:04:c2:bc:e9:b4:5f:83:33:71:70:19:5d:3f:27:
f7:3d:17:47:9a:2d:1b:bb:cc:a5:62:a0:a0:1c:fb:f0:a7:0d:
24:f7:2f:c3:cd:1a:d3:a2:3b:6e:19:6d:8b:19:a9:be:ce:3c:
dc:8b:58:16:87:cc:d2:19:33:e5:a0:da:13:26:bc:1c:2d:00:
6b:17:5b:e8:c5:7d:62:a9:1a:46:3f:51:c0:53:e0:36:ed:70:
30:55:93:83:58:1f:e9:81:e7:e8:fd:f6:8b:a3:f6:b6:89:5a:
03:b4:08:c3:71:0e:46:36:7f:26:03:fb:e0:4a:61:6c:6c:b0:
4b:96:13:79:d2:c3:fd:10:53:01:e1:80:fb:cd:cc:4f:56:45:
ea:07:fe:bf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw1QdpleiMscI8KcP5iZbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMmMwYzY2YjZiNDYxMmM4OTQ5ODAwZjA5MjkxY2FmYTM4
NjVmZDMwHhcNMjMwMTAyMDQ1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDAzM2NmZDNmZDgyNTAwYjJjNTFjNGQ0MDA3ZTJlNGVkNmU5MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucBUaCS6/yaVNm57FfVcJKpc7FD3
CgwW1ccAX5yL1wokb37PT1A8VBgka4CfnoShwr+rMBMqoNdl0JDagaToeXB9oE9T
NnI6u3w1zFjVYm1euQ4y2SIP0Lj/qOqzY53gUP/7ie3xIgm4ABrk/eB4qSIUnqTC
uxFxZbJHp1ESaSVBo4QZD/s5JvDDfD8sqVKVH4tJ+VkCeUEg8vF5isrecSkiGYfa
LvvMdxAWG5bJsdbMcbYcnnuos7rPuoXTb3OMHbu189BSXF1O3lBWZ4p+Ol0r83bA
a5yPXuvijmHspPpcJ/7zLG8Xf0xHPfAs6+RK9trk2q7vcJwunQ/8XC7XnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOADPP0/2CUAssUcTUAH4uTtbpCtMB8GA1UdIwQY
MBaAFG8sDGa2tGEsiUmADwkpHK+jhl/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUt
MzkyYTc1MjQ2NGIxLzEvNEFNOF9UX1lKUUN5eFJ4TlFBZmk1TzF1a0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80ZDhhNzQtNjBiOC00MTBlLWFhMzUtMzkyYTc1MjQ2NGIx
LzEvYnl3TVpyYTBZU3lKU1lBUENTa2NyNk9HWDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEGeAK4
MA0GCSqGSIb3DQEBCwUAA4IBAQDKstVuxSTr5F6SzkeoXRJNkfkcI8DewUa53KUM
7yZvIVvuKC8icM5mhkotcPr5bJqnbnmQBIuwP4Dm67fmNQf1kVFO1BLFOjxXUjVC
JJQB5y6wDV7JutYxbqUviYE8XjYOxgtdBjcaBjb9GO1+Z6HZBMK86bRfgzNxcBld
Pyf3PRdHmi0bu8ylYqCgHPvwpw0k9y/DzRrTojtuGW2LGam+zjzci1gWh8zSGTPl
oNoTJrwcLQBrF1voxX1iqRpGP1HAU+A27XAwVZODWB/pgefo/faLo/a2iVoDtAjD
cQ5GNn8mA/vgSmFsbLBLlhN50sP9EFMB4YD7zcxPVkXqB/6/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:54 2024 by rpki-client on console-ams.rpki-client.org