Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/0Bms8JsH7Y_28ZFsG5B7U6Rc2cw.roa
File: 0Bms8JsH7Y_28ZFsG5B7U6Rc2cw.roa (raw, json)
Hash identifier: QMkK3OzErQYQjutQPoCwlZ03ms5+M7RdhU9PvWg99g8=
Subject key identifier: D0:19:AC:F0:9B:07:ED:8F:F6:F1:91:6C:1B:90:7B:53:A4:5C:D9:CC
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 018AFF40FD033E3A083D161AC858F3D79E2A
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/0Bms8JsH7Y_28ZFsG5B7U6Rc2cw.roa
Signing time: Thu 05 Oct 2023 09:52:43 +0000
ROA not before: Thu 05 Oct 2023 09:52:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 2a09:aa80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Oct 2023 11:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:40:fd:03:3e:3a:08:3d:16:1a:c8:58:f3:d7:9e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Oct 5 09:52:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d019acf09b07ed8ff6f1916c1b907b53a45cd9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:f6:97:c9:f8:8a:bb:aa:24:36:31:46:f3:
8a:96:2c:3c:1c:72:2f:47:d8:4b:e1:12:c7:e9:38:
c4:7c:61:62:6d:51:e9:0a:d0:3f:14:db:00:df:36:
58:5c:3e:17:d1:fb:12:a8:e0:ec:d2:9d:8a:a4:26:
1f:05:3c:ad:d5:39:10:a9:10:a6:e8:03:4a:22:3a:
ba:8c:dc:d4:04:cd:24:aa:e5:90:a8:72:3e:5c:d4:
b6:23:21:5d:70:d0:cb:f1:ba:c7:aa:17:dd:30:77:
b6:5b:9f:a8:65:ad:2c:d8:9d:a3:b0:ec:9b:a9:10:
88:de:4a:0a:d4:cd:7c:7b:1f:ce:04:1c:a2:9c:3b:
66:1c:f9:7b:11:cc:89:d7:95:3d:1a:cc:50:7d:db:
6c:86:30:13:33:14:22:65:b1:6d:ab:eb:01:85:5a:
cd:c0:ef:b6:62:89:34:7f:5f:0d:aa:a0:2a:62:29:
a5:f4:9f:7b:a7:84:37:c3:96:1e:cf:a8:22:0c:f0:
89:9d:09:d8:32:87:a7:bf:09:ca:73:1a:95:b4:c6:
ad:5e:dc:c4:e1:8b:33:06:43:5d:cb:46:55:82:52:
dc:c5:96:32:62:a8:c7:bd:8b:6b:7a:26:8a:cc:76:
14:70:76:dc:55:51:52:f1:b2:a9:36:15:f1:e4:c8:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:AC:F0:9B:07:ED:8F:F6:F1:91:6C:1B:90:7B:53:A4:5C:D9:CC
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/0Bms8JsH7Y_28ZFsG5B7U6Rc2cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
92:2a:1e:e2:32:ad:aa:a2:73:f8:0c:be:e5:cb:32:0b:70:e8:
99:9c:23:e6:fb:e9:09:55:81:61:50:f5:b7:6f:a1:e4:b5:ac:
cf:eb:92:72:07:72:9e:36:5b:5d:aa:5b:c5:40:f7:87:5c:e6:
d3:c7:67:44:3e:16:e1:3c:d9:48:7c:8c:9e:fd:05:d2:ef:c7:
27:1a:fe:b6:96:b8:c4:d9:a2:60:2e:f4:c9:06:02:67:90:c1:
61:bd:e4:0b:68:6b:b1:f7:78:48:98:53:ae:78:61:fa:e8:44:
2b:f4:e8:60:97:17:a7:4b:2e:2e:10:1c:f7:d4:2b:1b:5a:1d:
07:34:18:4f:95:3a:e0:dd:17:d0:2b:96:48:8f:93:90:ee:5b:
6f:48:17:f5:06:c3:61:d0:4b:f8:3e:b7:cd:2b:9b:1c:58:a0:
14:74:3e:d0:f9:34:07:b7:9c:95:84:7d:99:2b:de:f6:e2:48:
02:de:04:cd:19:27:26:32:75:6a:b9:6e:ea:d2:a3:f4:dc:a9:
3e:ec:ba:8e:ed:1d:29:f1:e6:23:a1:2e:03:7f:a0:c5:f8:71:
f2:24:26:47:7a:2d:56:9a:1b:56:c6:94:66:29:c3:ae:54:6a:
0b:f8:75:7d:7d:d6:ae:c1:42:1a:5a:1b:da:0b:2c:7a:a0:3b:
b8:7c:11:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYr/QP0DPjoIPRYayFjz154qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjMxMDA1MDk1MjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE5YWNmMDliMDdlZDhmZjZmMTkxNmMxYjkwN2I1M2E0NWNkOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoin2l8n4iruqJDYxRvOKliw8HHIv
R9hL4RLH6TjEfGFibVHpCtA/FNsA3zZYXD4X0fsSqODs0p2KpCYfBTyt1TkQqRCm
6ANKIjq6jNzUBM0kquWQqHI+XNS2IyFdcNDL8brHqhfdMHe2W5+oZa0s2J2jsOyb
qRCI3koK1M18ex/OBByinDtmHPl7EcyJ15U9GsxQfdtshjATMxQiZbFtq+sBhVrN
wO+2Yok0f18NqqAqYiml9J97p4Q3w5Yez6giDPCJnQnYMoenvwnKcxqVtMatXtzE
4YszBkNdy0ZVglLcxZYyYqjHvYtreiaKzHYUcHbcVVFS8bKpNhXx5MgW3QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNAZrPCbB+2P9vGRbBuQe1OkXNnMMB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvMEJtczhKc0g3WV8yOFpGc0c1QjdVNlJjMmN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgmqgDAN
BgkqhkiG9w0BAQsFAAOCAQEAkioe4jKtqqJz+Ay+5csyC3DomZwj5vvpCVWBYVD1
t2+h5LWsz+uScgdynjZbXapbxUD3h1zm08dnRD4W4TzZSHyMnv0F0u/HJxr+tpa4
xNmiYC70yQYCZ5DBYb3kC2hrsfd4SJhTrnhh+uhEK/ToYJcXp0suLhAc99QrG1od
BzQYT5U64N0X0CuWSI+TkO5bb0gX9QbDYdBL+D63zSubHFigFHQ+0Pk0B7eclYR9
mSve9uJIAt4EzRknJjJ1arlu6tKj9NypPuy6ju0dKfHmI6EuA3+gxfhx8iQmR3ot
VpobVsaUZinDrlRqC/h1fX3WrsFCGlob2gsseqA7uHwR6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-fra.rpki-client.org