Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xDJg7viES3XMKOr4yUjt0_vOsLw.roa
File: xDJg7viES3XMKOr4yUjt0_vOsLw.roa (raw, json)
Hash identifier: 5dHxsWHPxy8q1rkFYziVEV3hKZncxKYBH1C/Ct0dAg0=
Subject key identifier: C4:32:60:EE:F8:84:4B:75:CC:28:EA:F8:C9:48:ED:D3:FB:CE:B0:BC
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 0185735891A215CA98EC34D069B19320CAF8
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xDJg7viES3XMKOr4yUjt0_vOsLw.roa
Signing time: Mon 02 Jan 2023 16:37:42 +0000
ROA not before: Mon 02 Jan 2023 16:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48749
IP address blocks: 2a05:8883:ffff::/48 maxlen: 48
2a0f:55c7:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:58:91:a2:15:ca:98:ec:34:d0:69:b1:93:20:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 16:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43260eef8844b75cc28eaf8c948edd3fbceb0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:a2:43:da:38:f1:c3:5e:b8:40:bc:fb:37:
b2:4b:4c:27:81:49:c6:97:ed:63:27:8a:71:25:d7:
33:2b:39:8d:fc:97:83:5d:41:04:ca:5a:38:bb:8c:
42:98:56:3c:21:61:20:bc:b3:36:cc:b9:82:03:91:
cc:b3:47:d6:7f:1f:09:1a:3b:d2:22:38:43:47:97:
4e:ba:6f:17:a9:04:a6:ec:7f:1a:1d:ba:ae:2f:b8:
b2:1d:5a:1b:aa:5f:96:94:58:08:46:0e:8c:7d:6c:
50:95:7c:27:cd:8b:51:64:71:1b:4c:3e:a2:55:e2:
47:d3:56:d8:53:f8:56:a4:c8:c2:1a:5d:50:d6:5a:
45:42:c6:0c:a5:9f:a8:7e:91:75:7f:40:57:8d:c4:
56:13:b6:2a:f8:98:9a:d6:5a:d2:d2:0e:db:ce:90:
44:97:fe:84:6e:d1:75:08:28:ba:fe:8d:66:98:79:
0e:d4:56:35:b4:4b:9e:4b:13:ed:a5:95:d5:cb:b4:
25:55:bc:c9:d4:a2:50:20:af:4f:01:33:aa:d8:91:
5f:b0:7b:a7:bd:57:6e:50:52:d0:4b:66:3c:40:1e:
87:3d:8f:e6:71:4a:70:da:cd:d8:0e:69:d5:82:9b:
5b:f3:3c:45:93:eb:6d:33:f2:d1:a1:7b:9d:20:66:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:60:EE:F8:84:4B:75:CC:28:EA:F8:C9:48:ED:D3:FB:CE:B0:BC
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/xDJg7viES3XMKOr4yUjt0_vOsLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:8883:ffff::/48
2a0f:55c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
57:50:e9:28:ea:fe:e2:55:34:ea:03:73:3b:1b:56:50:65:d5:
00:10:e6:4a:08:09:dc:09:2b:c4:93:50:62:d6:0c:0b:ca:f0:
30:7c:07:87:24:35:33:b8:39:c7:82:c0:40:35:8a:53:bd:57:
62:7c:79:bc:a3:00:fc:15:cf:ba:ae:b4:cf:2d:c8:8c:40:83:
9a:90:fc:d1:e8:cf:f0:0f:8b:9f:37:9a:8c:b9:12:f7:e8:fa:
5c:1b:45:70:1d:ca:a6:42:6a:56:a5:c3:29:0c:c4:71:43:57:
d2:47:38:3a:d8:08:a1:76:0f:90:64:b9:de:d6:ff:ee:e7:f1:
09:a7:f1:20:4c:2f:65:f0:b6:7b:2d:5c:d0:43:0b:47:61:cd:
80:b8:4c:d3:27:f3:f2:97:cc:75:08:d8:50:a5:60:8c:fe:4b:
bf:a7:a8:f5:cd:f2:3c:bb:ac:90:c7:a8:1b:ae:c6:0c:84:71:
f8:ad:fd:de:ea:cf:e4:bb:75:8e:f9:55:ad:18:ac:49:d0:98:
d1:59:e9:0d:6d:03:3a:9d:58:56:13:da:77:64:2a:af:dc:a8:
5a:b4:5d:ea:3f:62:3b:14:f6:2e:6e:0a:fe:c9:2d:36:27:4b:
84:ad:eb:ca:0b:b8:c3:c4:79:12:fa:50:93:6e:5b:0d:30:5b:
4f:ee:0f:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVzWJGiFcqY7DTQabGTIMr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4
NWZmOGMwHhcNMjMwMTAyMTYzNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDMyNjBlZWY4ODQ0Yjc1Y2MyOGVhZjhjOTQ4ZWRkM2ZiY2ViMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqiQ9o48cNeuEC8+zeyS0wngUnG
l+1jJ4pxJdczKzmN/JeDXUEEylo4u4xCmFY8IWEgvLM2zLmCA5HMs0fWfx8JGjvS
IjhDR5dOum8XqQSm7H8aHbquL7iyHVobql+WlFgIRg6MfWxQlXwnzYtRZHEbTD6i
VeJH01bYU/hWpMjCGl1Q1lpFQsYMpZ+ofpF1f0BXjcRWE7Yq+Jia1lrS0g7bzpBE
l/6EbtF1CCi6/o1mmHkO1FY1tEueSxPtpZXVy7QlVbzJ1KJQIK9PATOq2JFfsHun
vVduUFLQS2Y8QB6HPY/mcUpw2s3YDmnVgptb8zxFk+ttM/LRoXudIGZBGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMQyYO74hEt1zCjq+MlI7dP7zrC8MB8GA1UdIwQY
MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt
MjVkYmY0MzgwNGM1LzEveERKZzd2aUVTM1hNS09yNHlVanQwX3ZPc0x3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1
LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWIg///
AwcAKg9Vx///MA0GCSqGSIb3DQEBCwUAA4IBAQBXUOko6v7iVTTqA3M7G1ZQZdUA
EOZKCAncCSvEk1Bi1gwLyvAwfAeHJDUzuDnHgsBANYpTvVdifHm8owD8Fc+6rrTP
LciMQIOakPzR6M/wD4ufN5qMuRL36PpcG0VwHcqmQmpWpcMpDMRxQ1fSRzg62Aih
dg+QZLne1v/u5/EJp/EgTC9l8LZ7LVzQQwtHYc2AuEzTJ/Pyl8x1CNhQpWCM/ku/
p6j1zfI8u6yQx6gbrsYMhHH4rf3e6s/ku3WO+VWtGKxJ0JjRWekNbQM6nVhWE9p3
ZCqv3KhatF3qP2I7FPYubgr+yS02J0uErevKC7jDxHkS+lCTblsNMFtP7g9n
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:40 2024 by rpki-client on console-ams.rpki-client.org