Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/_1QPiisfWIbIv070-liSnpY5pbM.roa
File: _1QPiisfWIbIv070-liSnpY5pbM.roa (raw, json)
Hash identifier: wOTmaz7CNXHP0EHN0+RV1sjeNzO3ERuVQbEPv1YDIfs=
Subject key identifier: FF:54:0F:8A:2B:1F:58:86:C8:BF:4E:F4:FA:58:92:9E:96:39:A5:B3
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01888C0D26663FF45C168579E6A409FA667A
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/_1QPiisfWIbIv070-liSnpY5pbM.roa
Signing time: Mon 05 Jun 2023 14:54:12 +0000
ROA not before: Mon 05 Jun 2023 14:54:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198469
IP address blocks: 2a0e:6a81:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:0d:26:66:3f:f4:5c:16:85:79:e6:a4:09:fa:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Jun 5 14:54:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff540f8a2b1f5886c8bf4ef4fa58929e9639a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:15:6d:88:04:6c:fe:82:d8:57:94:61:2e:
a6:60:6d:11:0a:1b:88:99:2c:8e:97:97:d0:85:05:
97:a1:60:f1:fe:eb:48:a4:38:a3:c8:c7:20:66:9d:
05:13:29:7b:54:6e:e2:9a:cc:b9:ac:5c:bc:4b:d2:
c8:ad:f7:c6:7c:bb:5e:18:d9:6a:8c:3a:5b:38:3c:
88:11:a7:ad:56:77:60:8f:e5:3e:63:6d:71:57:32:
c7:5a:30:a9:2e:5e:37:2d:2a:0a:a8:dd:c1:7d:b7:
5a:1f:93:2b:71:d1:3e:31:29:9c:2b:59:f9:3f:96:
3e:80:8d:b2:f8:9d:a4:00:41:be:fa:36:95:20:5c:
a5:31:7d:14:d4:0f:c7:7d:bd:01:e1:24:a1:e0:e8:
9e:d5:e9:6e:6b:2c:41:b0:15:64:32:01:04:1f:19:
48:d5:aa:83:8f:2b:50:ad:50:bb:68:2e:9e:6e:1f:
c9:f0:79:8b:3e:a8:b5:0d:08:e6:78:b5:12:19:38:
15:c9:a4:fc:ea:f8:16:49:77:b4:2d:96:70:b8:db:
08:15:19:c3:38:cd:3b:65:ea:9d:5a:c1:50:26:39:
26:6c:a7:18:a9:83:e8:5e:d1:41:b4:91:1f:43:77:
f7:0e:36:0b:7d:7d:87:70:91:fd:87:ed:bc:dc:c7:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:0F:8A:2B:1F:58:86:C8:BF:4E:F4:FA:58:92:9E:96:39:A5:B3
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/_1QPiisfWIbIv070-liSnpY5pbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6a81:d::/48
Signature Algorithm: sha256WithRSAEncryption
b2:17:e7:b1:4c:56:28:34:56:a5:a2:ab:60:4b:22:2a:d3:8f:
02:32:1d:bf:87:b0:7d:c0:f7:ac:d9:64:e2:d7:48:47:20:67:
01:ab:89:fc:c2:2f:20:b1:81:33:61:1d:73:5c:2a:c2:86:e2:
44:c4:ac:f8:10:24:6d:f0:fa:89:ff:3c:0f:b2:5b:33:04:c6:
90:70:e3:ac:b1:39:0b:43:9c:ea:3e:ec:c4:0b:ae:99:e9:06:
70:33:8d:87:1d:58:e6:7d:f1:53:f4:c1:72:e4:33:ae:43:0b:
9f:b2:af:b6:14:ae:1f:03:82:01:2c:7b:76:1b:ad:32:0c:55:
66:d9:bc:b2:bb:f6:16:be:08:66:ff:c4:32:a9:db:57:d2:c9:
06:8c:42:9f:52:80:a1:6b:d3:f0:51:a0:1a:9c:4b:40:e6:71:
82:34:3a:18:ce:a5:61:8d:8f:ff:ef:c2:20:39:f9:b9:30:1b:
a1:71:02:38:3c:99:0e:cb:76:5e:02:cf:69:d4:69:bb:c9:52:
a8:4f:0e:17:c0:17:4a:4f:a8:b5:12:78:14:03:95:47:04:8c:
8b:cd:f7:55:f0:67:41:27:7e:33:f2:14:99:93:50:45:a5:4a:
48:49:1d:b2:55:83:56:10:8a:36:5e:aa:2d:86:be:5f:2b:ed:
54:99:8c:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYiMDSZmP/RcFoV55qQJ+mZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3
NGZlYmIwHhcNMjMwNjA1MTQ1NDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjU0MGY4YTJiMWY1ODg2YzhiZjRlZjRmYTU4OTI5ZTk2MzlhNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA4VbYgEbP6C2FeUYS6mYG0RChuI
mSyOl5fQhQWXoWDx/utIpDijyMcgZp0FEyl7VG7imsy5rFy8S9LIrffGfLteGNlq
jDpbODyIEaetVndgj+U+Y21xVzLHWjCpLl43LSoKqN3BfbdaH5MrcdE+MSmcK1n5
P5Y+gI2y+J2kAEG++jaVIFylMX0U1A/Hfb0B4SSh4Oie1eluayxBsBVkMgEEHxlI
1aqDjytQrVC7aC6ebh/J8HmLPqi1DQjmeLUSGTgVyaT86vgWSXe0LZZwuNsIFRnD
OM07ZeqdWsFQJjkmbKcYqYPoXtFBtJEfQ3f3DjYLfX2HcJH9h+283MeF1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP9UD4orH1iGyL9O9PpYkp6WOaWzMB8GA1UdIwQY
MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt
MTYyZWQ2MjRlMjgyLzEvXzFRUGlpc2ZXSWJJdjA3MC1saVNucFk1cGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy
LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5qgQAN
MA0GCSqGSIb3DQEBCwUAA4IBAQCyF+exTFYoNFaloqtgSyIq048CMh2/h7B9wPes
2WTi10hHIGcBq4n8wi8gsYEzYR1zXCrChuJExKz4ECRt8PqJ/zwPslszBMaQcOOs
sTkLQ5zqPuzEC66Z6QZwM42HHVjmffFT9MFy5DOuQwufsq+2FK4fA4IBLHt2G60y
DFVm2byyu/YWvghm/8QyqdtX0skGjEKfUoCha9PwUaAanEtA5nGCNDoYzqVhjY//
78IgOfm5MBuhcQI4PJkOy3ZeAs9p1Gm7yVKoTw4XwBdKT6i1EngUA5VHBIyLzfdV
8GdBJ34z8hSZk1BFpUpISR2yVYNWEIo2Xqothr5fK+1UmYzq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org