Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SAQhzJwOnxu4mP8SIu4DcsHmVK8.roa
File: SAQhzJwOnxu4mP8SIu4DcsHmVK8.roa (raw, json)
Hash identifier: HvNEu2l758VhYn/e9AT0cMQVTayFBCbSV9kyy1rNeIc=
Subject key identifier: 48:04:21:CC:9C:0E:9F:1B:B8:98:FF:12:22:EE:03:72:C1:E6:54:AF
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BA901455A81FD9B3C87AF6BA2FD2
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SAQhzJwOnxu4mP8SIu4DcsHmVK8.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43474
IP address blocks: 2a00:ece1:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ba:90:14:55:a8:1f:d9:b3:c8:7a:f6:ba:2f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=480421cc9c0e9f1bb898ff1222ee0372c1e654af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:b2:60:69:d5:4b:2c:ce:c9:bb:d2:7e:57:
30:24:aa:3d:42:88:8e:bd:b1:4d:df:d1:4b:a0:0f:
4b:13:73:11:06:5e:6d:e1:33:3c:0a:83:fa:67:c8:
83:06:a7:cd:94:8a:fb:6c:c2:ce:49:6d:ba:94:20:
98:cf:a3:9d:44:f5:e8:0e:0c:35:16:4c:0a:b9:a7:
86:e8:12:00:84:00:6f:4b:85:67:3b:f9:84:f3:6f:
3e:4d:dc:70:01:c5:e9:73:15:a7:06:f1:51:b0:ea:
08:41:6b:05:c8:98:65:3a:97:d6:7c:35:f2:0a:16:
7c:9d:5a:7c:5c:f7:45:f6:11:fc:7f:39:12:15:4a:
c3:b8:fc:3d:4d:15:82:f9:88:3e:48:79:77:ee:cd:
53:77:3e:95:84:24:c5:fb:e1:78:1f:fe:8d:54:5e:
c5:31:0f:1e:f9:79:b4:9e:71:ec:6f:31:2d:23:09:
fc:a3:f8:a2:1b:90:7f:61:24:8c:1e:12:b5:bf:d7:
5a:38:a4:f6:c6:2d:7d:ee:82:db:c1:72:bd:c9:21:
ee:78:88:fa:48:22:b5:fc:f7:df:30:08:23:eb:53:
96:62:dc:39:af:71:d8:10:80:20:be:50:3b:bb:36:
f9:2b:d8:62:28:7d:a6:76:de:23:a6:0d:22:6e:b6:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:21:CC:9C:0E:9F:1B:B8:98:FF:12:22:EE:03:72:C1:E6:54:AF
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/SAQhzJwOnxu4mP8SIu4DcsHmVK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:2::/48
Signature Algorithm: sha256WithRSAEncryption
62:54:28:5c:c7:6c:21:f0:5d:2c:53:a8:8e:68:6c:c0:70:da:
a7:1d:f8:09:b1:57:97:14:d1:ef:51:79:e3:1b:34:fc:c6:66:
79:f6:d1:d4:64:36:69:8f:95:24:ea:fe:60:20:18:df:59:bb:
df:0d:a0:46:05:4d:44:07:3d:9c:db:53:2d:52:04:52:d4:77:
66:91:04:90:24:e7:49:05:39:f5:7b:8b:d9:9a:3b:d1:72:45:
51:e8:2c:50:99:46:22:d7:6b:a3:ac:67:dc:34:69:e3:dd:5f:
68:df:57:60:d7:45:d6:61:ca:6a:e8:e0:12:ca:86:aa:24:52:
0e:c2:17:6b:0b:11:13:cf:07:37:9e:3b:c2:15:00:15:77:6f:
3d:e1:54:00:b6:b3:45:52:e8:8e:0d:a8:4b:d8:91:41:4d:08:
bb:e1:fb:ba:e2:75:0c:43:38:e3:d5:32:53:57:fd:1d:36:17:
6a:24:3e:b6:d7:d6:ed:93:f6:39:50:1e:ee:2e:f8:b4:aa:e9:
20:6d:70:36:02:fd:e0:0f:24:b3:e3:44:97:17:15:14:c9:26:
97:c2:c7:6e:29:5c:1d:b4:e5:6c:42:08:39:73:a4:37:5c:24:
94:5a:a5:35:44:8d:5a:b8:9f:77:51:c6:af:e3:22:0d:52:fc:
d6:f9:40:a1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxObqQFFWoH9mzyHr2ui/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjMwMTAyMDY0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA0MjFjYzljMGU5ZjFiYjg5OGZmMTIyMmVlMDM3MmMxZTY1NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQiyYGnVSyzOybvSflcwJKo9QoiO
vbFN39FLoA9LE3MRBl5t4TM8CoP6Z8iDBqfNlIr7bMLOSW26lCCYz6OdRPXoDgw1
FkwKuaeG6BIAhABvS4VnO/mE828+TdxwAcXpcxWnBvFRsOoIQWsFyJhlOpfWfDXy
ChZ8nVp8XPdF9hH8fzkSFUrDuPw9TRWC+Yg+SHl37s1Tdz6VhCTF++F4H/6NVF7F
MQ8e+Xm0nnHsbzEtIwn8o/iiG5B/YSSMHhK1v9daOKT2xi197oLbwXK9ySHueIj6
SCK1/PffMAgj61OWYtw5r3HYEIAgvlA7uzb5K9hiKH2mdt4jpg0ibrbrSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEgEIcycDp8buJj/EiLuA3LB5lSvMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvU0FRaHpKd09ueHU0bVA4U0l1NERjc0htVks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDs4QAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBiVChcx2wh8F0sU6iOaGzAcNqnHfgJsVeXFNHv
UXnjGzT8xmZ59tHUZDZpj5Uk6v5gIBjfWbvfDaBGBU1EBz2c21MtUgRS1HdmkQSQ
JOdJBTn1e4vZmjvRckVR6CxQmUYi12ujrGfcNGnj3V9o31dg10XWYcpq6OASyoaq
JFIOwhdrCxETzwc3njvCFQAVd2894VQAtrNFUuiODahL2JFBTQi74fu64nUMQzjj
1TJTV/0dNhdqJD6219btk/Y5UB7uLvi0qukgbXA2Av3gDySz40SXFxUUySaXwsdu
KVwdtOVsQgg5c6Q3XCSUWqU1RI1auJ93Ucav4yINUvzW+UCh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org