Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa
File: XAvSpa6b_8-EGMnNiRsFOxMFB64.roa (raw, json)
Hash identifier: SMQnu5lcTt0BDVw9OQSoUkOa6zcU3YSp5R2QWaaXgII=
Subject key identifier: 5C:0B:D2:A5:AE:9B:FF:CF:84:18:C9:CD:89:1B:05:3B:13:05:07:AE
Certificate issuer: /CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Certificate serial: 01889F453516B777955D7170C4FB600FEFD0
Authority key identifier: F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa
Signing time: Fri 09 Jun 2023 08:28:12 +0000
ROA not before: Fri 09 Jun 2023 08:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198186
IP address blocks: 2001:67c:1244::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:45:35:16:b7:77:95:5d:71:70:c4:fb:60:0f:ef:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6398c302d0d16da81983e78ff4c1a96f384943c
Validity
Not Before: Jun 9 08:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c0bd2a5ae9bffcf8418c9cd891b053b130507ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:c4:d1:7f:aa:e5:ad:e0:10:d5:0e:2d:ac:
d7:2c:9e:2d:db:62:f3:a6:68:57:1d:e6:08:bf:6a:
cc:5b:6a:c9:25:03:c6:e3:0e:04:f9:0c:ed:18:2c:
cf:0d:a6:62:39:6b:54:d8:5b:34:46:04:c4:22:3d:
c3:7e:0d:8f:e1:4e:64:6e:d5:00:c8:03:36:73:99:
60:f0:a7:7f:8a:ac:42:51:56:04:55:86:d4:0e:e4:
2e:d9:ce:c5:de:5f:14:af:64:8b:b2:52:ea:7d:13:
55:ab:ed:93:b1:b3:a7:62:f6:11:a1:67:50:7e:e8:
06:2b:4e:cf:23:81:de:de:1f:09:6a:96:eb:41:ea:
9e:9c:9b:b5:eb:28:c7:b8:9a:77:b8:16:3b:9f:66:
c7:25:64:80:ad:21:2e:4a:e1:52:ef:af:43:11:28:
4e:1c:33:97:54:0b:b3:c3:25:a5:e7:f4:57:af:2b:
00:1a:94:a8:11:0a:c7:71:54:6d:18:39:a9:af:c7:
7a:42:2d:a0:17:fb:20:df:8b:a4:6e:ab:ad:c0:4b:
7c:58:72:6c:ae:35:d3:aa:77:29:b6:ed:de:90:dd:
2c:c1:cd:54:cd:a4:4e:66:fb:bc:4b:b2:07:c3:17:
e0:9f:ce:c1:4e:a1:d7:a0:30:b3:22:74:41:16:6d:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:D2:A5:AE:9B:FF:CF:84:18:C9:CD:89:1B:05:3B:13:05:07:AE
X509v3 Authority Key Identifier:
keyid:F6:39:8C:30:2D:0D:16:DA:81:98:3E:78:FF:4C:1A:96:F3:84:94:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jmMMC0NFtqBmD54_0walvOElDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/XAvSpa6b_8-EGMnNiRsFOxMFB64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/920bb6-09bb-441a-9061-15520cd0ff6b/1/9jmMMC0NFtqBmD54_0walvOElDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1244::/48
Signature Algorithm: sha256WithRSAEncryption
2b:9f:8b:ea:0d:6d:c4:c1:03:ec:be:bf:45:09:7a:fe:0b:b0:
9d:81:55:27:53:dd:fc:2d:cb:e8:e6:a0:c5:c5:95:e2:62:f7:
02:3d:26:5d:81:1a:ec:8c:7a:c9:5d:f9:b6:dc:a9:09:82:c7:
e0:6f:47:95:ab:0e:d2:33:3b:c1:68:d5:22:09:eb:62:6e:28:
11:83:0d:fa:3a:c8:13:de:01:5b:6d:00:8f:54:80:64:74:1f:
0a:3e:c6:6c:c3:68:bc:79:5f:db:39:9f:ab:59:c7:a0:44:f8:
d7:58:d7:c3:a6:24:36:e5:82:79:85:60:32:35:e3:4d:21:35:
af:80:22:14:c4:d7:d9:72:22:bb:3e:5b:dd:88:26:7e:69:3b:
79:bf:66:3f:d9:39:92:79:e3:2d:e9:6f:14:5f:7d:d9:2b:89:
6c:03:23:e9:e7:17:8b:cc:c8:17:22:b2:08:70:ac:0c:82:6a:
73:65:b0:76:dd:aa:96:ca:59:e5:af:fd:b8:52:11:06:02:d0:
5e:e9:4c:11:57:94:ce:8f:fb:b9:4f:9f:c7:3e:96:ca:e5:b2:
df:16:27:37:2a:44:bc:be:64:69:1a:53:02:74:89:bd:2d:a0:
bf:ca:51:fb:8e:3c:81:bf:2b:5f:4a:59:2f:5c:06:31:99:35:
78:69:b7:10
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYifRTUWt3eVXXFwxPtgD+/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Mzk4YzMwMmQwZDE2ZGE4MTk4M2U3OGZmNGMxYTk2ZjM4
NDk0M2MwHhcNMjMwNjA5MDgyODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzBiZDJhNWFlOWJmZmNmODQxOGM5Y2Q4OTFiMDUzYjEzMDUwN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHE0X+q5a3gENUOLazXLJ4t22Lz
pmhXHeYIv2rMW2rJJQPG4w4E+QztGCzPDaZiOWtU2Fs0RgTEIj3Dfg2P4U5kbtUA
yAM2c5lg8Kd/iqxCUVYEVYbUDuQu2c7F3l8Ur2SLslLqfRNVq+2TsbOnYvYRoWdQ
fugGK07PI4He3h8JapbrQeqenJu16yjHuJp3uBY7n2bHJWSArSEuSuFS769DEShO
HDOXVAuzwyWl5/RXrysAGpSoEQrHcVRtGDmpr8d6Qi2gF/sg34ukbqutwEt8WHJs
rjXTqncptu3ekN0swc1UzaROZvu8S7IHwxfgn87BTqHXoDCzInRBFm2Y5wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFwL0qWum//PhBjJzYkbBTsTBQeuMB8GA1UdIwQY
MBaAFPY5jDAtDRbagZg+eP9MGpbzhJQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWptTU1DME5GdHFCbUQ1NF8wd2Fsdk9FbER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MjBiYjYtMDliYi00NDFhLTkwNjEt
MTU1MjBjZDBmZjZiLzEvWEF2U3BhNmJfOC1FR01uTmlSc0ZPeE1GQjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MjBiYjYtMDliYi00NDFhLTkwNjEtMTU1MjBjZDBmZjZi
LzEvOWptTU1DME5GdHFCbUQ1NF8wd2Fsdk9FbER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBJE
MA0GCSqGSIb3DQEBCwUAA4IBAQArn4vqDW3EwQPsvr9FCXr+C7CdgVUnU938Lcvo
5qDFxZXiYvcCPSZdgRrsjHrJXfm23KkJgsfgb0eVqw7SMzvBaNUiCetibigRgw36
OsgT3gFbbQCPVIBkdB8KPsZsw2i8eV/bOZ+rWcegRPjXWNfDpiQ25YJ5hWAyNeNN
ITWvgCIUxNfZciK7PlvdiCZ+aTt5v2Y/2TmSeeMt6W8UX33ZK4lsAyPp5xeLzMgX
IrIIcKwMgmpzZbB23aqWylnlr/24UhEGAtBe6UwRV5TOj/u5T5/HPpbK5bLfFic3
KkS8vmRpGlMCdIm9LaC/ylH7jjyBvytfSlkvXAYxmTV4abcQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:11 2024 by rpki-client on console-ams.rpki-client.org