Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/gQErt3dys6ulL31lVnGijaQef1M.roa
File: gQErt3dys6ulL31lVnGijaQef1M.roa (raw, json)
Hash identifier: WvtNUjMGpWtCrOKsuvynC4im1SFexN387g5KlkBXhNY=
Subject key identifier: 81:01:2B:B7:77:72:B3:AB:A5:2F:7D:65:56:71:A2:8D:A4:1E:7F:53
Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Certificate serial: 01856F798A1B8BD83039C8E067EC3342FA76
Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/gQErt3dys6ulL31lVnGijaQef1M.roa
Signing time: Sun 01 Jan 2023 22:35:14 +0000
ROA not before: Sun 01 Jan 2023 22:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211723
IP address blocks: 2001:67c:296c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8a:1b:8b:d8:30:39:c8:e0:67:ec:33:42:fa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955
Validity
Not Before: Jan 1 22:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81012bb77772b3aba52f7d655671a28da41e7f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:3a:97:3b:da:83:21:c7:3e:5e:68:c9:ff:
4c:fe:08:bc:e4:d1:4e:80:5a:38:d6:3b:29:16:ae:
68:31:f9:ac:63:45:62:72:ec:e6:09:04:ee:02:f6:
d1:a8:df:eb:c3:98:8d:f0:ae:56:ba:6e:13:1e:ad:
43:1c:33:00:93:5b:2a:22:3a:8f:f5:34:41:8d:b0:
66:94:79:6f:de:2b:38:8a:d4:38:7f:98:81:60:7d:
0d:f8:2f:a9:79:e3:9d:62:63:b1:ea:29:0e:02:3d:
32:58:7f:3e:f9:6d:ff:e2:92:33:96:ba:c9:d1:52:
16:de:c9:ef:62:c4:62:23:5c:5e:2a:f3:2e:aa:46:
58:76:05:fd:d5:28:c3:b9:9f:aa:6c:fc:12:b4:f9:
03:fa:91:43:62:88:c9:5b:23:ea:c2:97:c5:7b:6d:
d4:0a:93:06:a7:eb:0f:49:9f:55:9d:08:c3:65:8c:
2d:2d:69:49:bd:81:d8:0c:a6:95:74:4c:f5:be:2f:
17:ba:b7:6e:18:cf:39:33:62:84:ff:84:8b:d0:66:
1c:c4:d9:3e:a8:2e:f4:af:f6:d3:f6:c2:ad:ae:7b:
3c:d4:ff:5b:4b:41:db:bc:2b:46:31:b5:88:d0:4e:
ac:47:ad:02:47:fa:8a:1a:3d:4b:29:1a:3c:8f:df:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:01:2B:B7:77:72:B3:AB:A5:2F:7D:65:56:71:A2:8D:A4:1E:7F:53
X509v3 Authority Key Identifier:
keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/gQErt3dys6ulL31lVnGijaQef1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:296c::/48
Signature Algorithm: sha256WithRSAEncryption
45:d8:b6:c6:52:50:40:10:50:b5:5b:5c:db:74:e8:e8:99:6d:
8f:16:d2:15:7e:ce:b7:60:30:10:f8:c9:96:8e:1c:0d:ac:d1:
a5:47:99:9a:72:3f:d4:18:1c:c7:e8:ca:50:1c:4f:72:d9:08:
b1:03:59:d4:af:5e:5a:e5:d8:81:89:38:5d:63:f7:74:86:15:
ea:02:63:e1:ad:af:e6:86:54:11:5d:db:20:3b:2a:c3:b9:c6:
08:95:6b:f2:67:e5:54:59:e7:a3:54:5c:c7:19:c2:07:c0:c9:
56:25:98:ee:10:3b:28:c5:3b:9f:7c:71:a6:46:6b:37:42:c4:
b2:f4:bc:41:bc:64:7b:9b:24:30:db:4c:2e:d3:62:3a:ca:8b:
3d:0a:ae:e2:22:85:5b:d2:71:1c:c1:0d:60:67:2c:de:e3:46:
62:8c:40:69:02:06:40:19:03:ed:2a:1c:6e:d0:c1:b5:bf:d4:
e0:05:7f:bd:64:35:6e:4f:2f:ac:05:f5:31:f5:77:1f:13:de:
bf:68:78:24:1d:99:42:bc:e5:53:4e:8f:ee:8a:93:b6:25:12:
2f:b6:ea:d0:e7:de:8f:cd:95:8d:b2:6b:63:13:1e:8f:0e:43:
23:cf:ad:e4:87:f3:e3:69:63:cf:6c:11:4f:6d:01:21:91:79:
21:48:e3:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVveYobi9gwOcjgZ+wzQvp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh
MTI5NTUwHhcNMjMwMTAxMjIzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTAxMmJiNzc3NzJiM2FiYTUyZjdkNjU1NjcxYTI4ZGE0MWU3ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnA6lzvagyHHPl5oyf9M/gi85NFO
gFo41jspFq5oMfmsY0VicuzmCQTuAvbRqN/rw5iN8K5Wum4THq1DHDMAk1sqIjqP
9TRBjbBmlHlv3is4itQ4f5iBYH0N+C+peeOdYmOx6ikOAj0yWH8++W3/4pIzlrrJ
0VIW3snvYsRiI1xeKvMuqkZYdgX91SjDuZ+qbPwStPkD+pFDYojJWyPqwpfFe23U
CpMGp+sPSZ9VnQjDZYwtLWlJvYHYDKaVdEz1vi8XurduGM85M2KE/4SL0GYcxNk+
qC70r/bT9sKtrns81P9bS0HbvCtGMbWI0E6sR60CR/qKGj1LKRo8j9/bdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIEBK7d3crOrpS99ZVZxoo2kHn9TMB8GA1UdIwQY
MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct
YjdiMTQ4MTYyNWIxLzEvZ1FFcnQzZHlzNnVsTDMxbFZuR2lqYVFlZjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx
LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCls
MA0GCSqGSIb3DQEBCwUAA4IBAQBF2LbGUlBAEFC1W1zbdOjomW2PFtIVfs63YDAQ
+MmWjhwNrNGlR5macj/UGBzH6MpQHE9y2QixA1nUr15a5diBiThdY/d0hhXqAmPh
ra/mhlQRXdsgOyrDucYIlWvyZ+VUWeejVFzHGcIHwMlWJZjuEDsoxTuffHGmRms3
QsSy9LxBvGR7myQw20wu02I6yos9Cq7iIoVb0nEcwQ1gZyze40ZijEBpAgZAGQPt
Khxu0MG1v9TgBX+9ZDVuTy+sBfUx9XcfE96/aHgkHZlCvOVTTo/uipO2JRIvturQ
596PzZWNsmtjEx6PDkMjz63kh/PjaWPPbBFPbQEhkXkhSOMc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:35 2024 by rpki-client on console-ams.rpki-client.org