Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/SuqY-D1O4-C9FTzJPx4gB1zDvlY.roa
File: SuqY-D1O4-C9FTzJPx4gB1zDvlY.roa (raw, json)
Hash identifier: uMtebe+DogiH0+NSDggu9/S/2XEeOlOpn5QQjcxXUUc=
Subject key identifier: 4A:EA:98:F8:3D:4E:E3:E0:BD:15:3C:C9:3F:1E:20:07:5C:C3:BE:56
Certificate issuer: /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial: 01856FA71739A9F91127923D74C329412037
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/SuqY-D1O4-C9FTzJPx4gB1zDvlY.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200881
IP address blocks: 2001:67c:2dd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:17:39:a9:f9:11:27:92:3d:74:c3:29:41:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aea98f83d4ee3e0bd153cc93f1e20075cc3be56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:37:2e:90:4f:7d:d5:99:3a:5a:18:04:81:
b6:be:f9:a0:75:e6:b1:dc:7d:f9:51:27:f4:91:5a:
ba:9a:34:f3:66:0b:bc:7b:56:70:f4:67:88:e0:66:
20:17:9d:63:61:ed:ae:24:97:7b:e0:29:14:dd:a3:
17:b1:96:a4:8e:fe:12:2e:58:f7:16:cb:ca:a2:e7:
11:fe:39:78:ea:4b:bd:4b:24:a5:89:89:7c:b5:a5:
9b:b5:ad:3f:d9:e5:a4:22:a6:f3:fe:53:2b:00:72:
8a:27:3f:54:4a:e8:9f:10:72:35:13:8b:37:31:15:
96:9b:f9:91:3f:ae:31:ff:bb:7a:81:e3:b2:6d:02:
58:34:9f:bc:f6:20:b0:65:8e:94:c6:c9:67:e7:2f:
e8:e4:70:25:45:46:b4:59:f2:41:66:03:d9:2a:94:
9c:31:b6:7b:2c:de:0c:b5:c6:bc:5e:06:38:24:60:
e0:e8:03:9d:12:15:f5:17:c6:4d:a0:7e:68:70:7d:
b0:37:12:22:e7:69:f5:af:c1:8e:16:8c:40:e9:d3:
0d:11:58:c8:4d:a0:15:ce:93:e1:07:b9:d1:9f:9e:
02:28:7a:4e:b7:31:b7:bc:a3:bc:51:18:a2:a7:39:
64:d5:05:b7:2e:05:06:19:3a:1b:96:98:2a:5a:93:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:98:F8:3D:4E:E3:E0:BD:15:3C:C9:3F:1E:20:07:5C:C3:BE:56
X509v3 Authority Key Identifier:
keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/SuqY-D1O4-C9FTzJPx4gB1zDvlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2dd0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7f:92:5a:31:78:4a:64:69:5c:d8:34:22:71:95:f7:0b:1d:
11:8e:0e:9e:90:c9:74:9b:e4:8e:be:7b:33:a8:85:56:fb:30:
11:3f:71:5f:22:4a:a1:c1:5d:cb:57:1d:90:48:27:c8:45:a2:
1d:c1:27:f7:fe:72:f7:c3:4a:aa:26:57:85:69:17:10:7e:e2:
fd:bd:e0:3b:da:59:b4:b9:ee:c6:b1:14:80:68:27:ee:be:fa:
d2:c1:4f:2d:01:ae:1d:58:7e:62:7b:62:12:4d:5d:8c:fc:42:
48:7c:00:31:8c:3a:62:d7:24:52:2b:26:98:0d:09:7b:1a:24:
a7:fd:7e:24:d1:cb:02:e3:8e:70:01:b4:a7:e9:4f:65:0a:1a:
6b:b0:44:a6:6e:9b:6c:ac:50:bb:a3:88:37:2d:3d:51:85:1c:
30:96:74:9c:59:e3:cb:95:e3:56:c2:b8:6c:30:d0:ae:b0:47:
1f:0b:f5:c2:82:58:eb:d3:44:35:b4:33:83:27:cf:c7:c9:d0:
c0:2e:98:9e:7e:8f:0f:4d:aa:cf:72:67:36:e4:6f:db:ed:c2:
7e:cd:d3:b1:ef:af:a5:d1:62:be:eb:5a:f4:10:cb:5c:f9:61:
ca:04:f6:0a:32:f1:25:3a:35:b4:0f:1a:1c:4d:60:9a:42:02:
3d:0d:f9:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvpxc5qfkRJ5I9dMMpQSA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOGRmODgwNTQwNjBkZjY4NWJiYTk3MzkxMjNlODM0MmQ0
NzllODQwHhcNMjMwMTAxMjMyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWVhOThmODNkNGVlM2UwYmQxNTNjYzkzZjFlMjAwNzVjYzNiZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAw3LpBPfdWZOloYBIG2vvmgdeax
3H35USf0kVq6mjTzZgu8e1Zw9GeI4GYgF51jYe2uJJd74CkU3aMXsZakjv4SLlj3
FsvKoucR/jl46ku9SySliYl8taWbta0/2eWkIqbz/lMrAHKKJz9USuifEHI1E4s3
MRWWm/mRP64x/7t6geOybQJYNJ+89iCwZY6Uxsln5y/o5HAlRUa0WfJBZgPZKpSc
MbZ7LN4Mtca8XgY4JGDg6AOdEhX1F8ZNoH5ocH2wNxIi52n1r8GOFoxA6dMNEVjI
TaAVzpPhB7nRn54CKHpOtzG3vKO8URiipzlk1QW3LgUGGToblpgqWpNReQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFErqmPg9TuPgvRU8yT8eIAdcw75WMB8GA1UdIwQY
MBaAFMyN+IBUBg32hbupc5Ej6DQtR56EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMt
ZGM3ODFjYzJhMjU4LzEvU3VxWS1EMU80LUM5RlR6SlB4NGdCMXpEdmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kYjhkMzgtMDc3Zi00ZDc3LTkzODMtZGM3ODFjYzJhMjU4
LzEvekkzNGdGUUdEZmFGdTZsemtTUG9OQzFIbm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBPf5JaMXhKZGlc2DQicZX3Cx0Rjg6ekMl0m+SO
vnszqIVW+zARP3FfIkqhwV3LVx2QSCfIRaIdwSf3/nL3w0qqJleFaRcQfuL9veA7
2lm0ue7GsRSAaCfuvvrSwU8tAa4dWH5ie2ISTV2M/EJIfAAxjDpi1yRSKyaYDQl7
GiSn/X4k0csC445wAbSn6U9lChprsESmbptsrFC7o4g3LT1RhRwwlnScWePLleNW
wrhsMNCusEcfC/XCgljr00Q1tDODJ8/HydDALpiefo8PTarPcmc25G/b7cJ+zdOx
76+l0WK+61r0EMtc+WHKBPYKMvElOjW0DxocTWCaQgI9DfmJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org