Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/ndCfIXg-A_mUg6uGqAXaMsf647o.roa
File: ndCfIXg-A_mUg6uGqAXaMsf647o.roa (raw, json)
Hash identifier: iOWWR5diR7juWuO2fHmMUyJjxxD6J+KRZ71bEdqFiRY=
Subject key identifier: 9D:D0:9F:21:78:3E:03:F9:94:83:AB:86:A8:05:DA:32:C7:FA:E3:BA
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 01856D53F7190D670324ADC17749F83EA378
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/ndCfIXg-A_mUg6uGqAXaMsf647o.roa
Signing time: Sun 01 Jan 2023 12:34:57 +0000
ROA not before: Sun 01 Jan 2023 12:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202928
IP address blocks: 2001:678:18c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:f7:19:0d:67:03:24:ad:c1:77:49:f8:3e:a3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jan 1 12:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd09f21783e03f99483ab86a805da32c7fae3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:a8:4f:ce:8d:48:fa:ad:f7:0b:ce:3d:ee:
a6:e5:0c:52:31:60:2f:74:9e:6d:90:6b:e3:4e:cb:
c7:e9:a7:6f:65:93:1f:d5:ca:e9:c0:72:2f:1d:73:
09:fb:22:0a:3d:b2:ea:59:c5:e4:e5:ba:c9:04:cb:
f5:be:82:da:43:b1:ae:de:29:99:f5:ef:b8:d0:2e:
6a:b7:8c:f9:6b:e3:cd:fd:23:a0:ec:d8:9a:6d:72:
1a:cd:6e:1c:50:ac:c4:66:a1:46:b4:b2:ea:39:fb:
f1:81:8b:cd:53:34:bb:2d:0a:85:5f:44:09:bb:ba:
04:9a:58:1d:1f:6f:b8:8b:c9:e4:2d:d8:1b:12:49:
23:e6:7e:83:ef:ff:63:84:19:36:26:b8:87:a4:c4:
9a:55:10:0c:05:69:65:c9:e1:83:0e:77:5f:07:bb:
dd:f5:97:30:04:f2:0f:75:ac:dc:77:35:dc:92:60:
19:b9:86:3e:a8:d8:9e:b2:9b:02:28:ed:89:bf:bc:
5a:61:3b:32:a4:a5:9a:6e:b3:e1:2c:76:85:ae:c6:
06:5f:25:85:0c:d4:40:11:bb:08:4f:b7:40:08:9b:
9e:a4:e4:7c:46:b4:26:2b:91:a8:d6:02:bb:c3:77:
b9:e1:ee:14:24:85:d9:6f:f5:99:76:d7:95:77:b1:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D0:9F:21:78:3E:03:F9:94:83:AB:86:A8:05:DA:32:C7:FA:E3:BA
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/ndCfIXg-A_mUg6uGqAXaMsf647o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:18c::/48
Signature Algorithm: sha256WithRSAEncryption
a6:e8:13:51:4d:07:2d:df:83:d9:93:d6:fb:2e:2f:5c:e5:84:
01:3d:72:3d:6a:29:0e:72:6a:0c:ac:c5:0d:1d:a0:1e:60:df:
8d:de:b2:a7:d1:eb:27:e7:43:50:fd:e7:17:66:c5:6a:dc:b4:
28:71:27:84:ea:cc:9b:32:10:3a:55:cc:e6:a4:9f:2e:ab:a4:
49:ad:b5:b1:a5:af:32:15:bd:af:60:1c:21:37:ce:0a:b1:39:
48:a7:ac:58:77:e8:66:47:4c:b1:b8:a3:1d:2f:71:e1:dd:57:
3f:0e:ff:63:3f:a7:64:98:df:41:31:6d:ce:b4:34:4d:49:c1:
e9:e6:59:19:7b:37:8d:ee:3c:08:7e:98:21:55:52:45:13:2f:
f3:a3:d3:4c:27:a5:45:57:54:b6:cf:7b:ec:44:62:64:60:bd:
66:04:20:67:57:57:b1:0a:99:68:61:7c:c2:f6:c4:b0:a7:6d:
bf:df:70:7c:e9:fa:89:54:1b:9a:f8:cc:f0:fa:40:21:ac:a3:
d3:4d:46:e3:57:24:84:86:fa:9a:54:88:2f:7a:f7:06:e6:73:
bb:b2:22:74:3e:e2:4b:e3:e3:c0:59:85:d3:c0:8c:3d:ba:6a:
c5:ba:bb:04:fc:70:a3:e7:10:fa:2f:57:17:ca:bf:21:6b:40:
4b:50:33:c2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtU/cZDWcDJK3Bd0n4PqN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl
YWRiODgwHhcNMjMwMTAxMTIzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQwOWYyMTc4M2UwM2Y5OTQ4M2FiODZhODA1ZGEzMmM3ZmFlM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswyoT86NSPqt9wvOPe6m5QxSMWAv
dJ5tkGvjTsvH6advZZMf1crpwHIvHXMJ+yIKPbLqWcXk5brJBMv1voLaQ7Gu3imZ
9e+40C5qt4z5a+PN/SOg7NiabXIazW4cUKzEZqFGtLLqOfvxgYvNUzS7LQqFX0QJ
u7oEmlgdH2+4i8nkLdgbEkkj5n6D7/9jhBk2JriHpMSaVRAMBWllyeGDDndfB7vd
9ZcwBPIPdazcdzXckmAZuYY+qNiespsCKO2Jv7xaYTsypKWabrPhLHaFrsYGXyWF
DNRAEbsIT7dACJuepOR8RrQmK5Go1gK7w3e54e4UJIXZb/WZdteVd7GFjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ3QnyF4PgP5lIOrhqgF2jLH+uO6MB8GA1UdIwQY
MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt
ZTZkZmJhMWRmMjMwLzEvbmRDZklYZy1BX21VZzZ1R3FBWGFNc2Y2NDdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw
LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAGM
MA0GCSqGSIb3DQEBCwUAA4IBAQCm6BNRTQct34PZk9b7Li9c5YQBPXI9aikOcmoM
rMUNHaAeYN+N3rKn0esn50NQ/ecXZsVq3LQocSeE6sybMhA6VczmpJ8uq6RJrbWx
pa8yFb2vYBwhN84KsTlIp6xYd+hmR0yxuKMdL3Hh3Vc/Dv9jP6dkmN9BMW3OtDRN
ScHp5lkZezeN7jwIfpghVVJFEy/zo9NMJ6VFV1S2z3vsRGJkYL1mBCBnV1exCplo
YXzC9sSwp22/33B86fqJVBua+Mzw+kAhrKPTTUbjVySEhvqaVIgvevcG5nO7siJ0
PuJL4+PAWYXTwIw9umrFursE/HCj5xD6L1cXyr8ha0BLUDPC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:12 2024 by rpki-client on console-ams.rpki-client.org