Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/bsUrzfhtWbH7v9Y3y_FjqSWC-U8.roa
File: bsUrzfhtWbH7v9Y3y_FjqSWC-U8.roa (raw, json)
Hash identifier: ltEaQdygpEgS/UXI/TmrniDk4LumqvP+thlNT3SD0Qg=
Subject key identifier: 6E:C5:2B:CD:F8:6D:59:B1:FB:BF:D6:37:CB:F1:63:A9:25:82:F9:4F
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 01856C9388AF62CEB33645283D659E99D250
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/bsUrzfhtWbH7v9Y3y_FjqSWC-U8.roa
Signing time: Sun 01 Jan 2023 09:04:46 +0000
ROA not before: Sun 01 Jan 2023 09:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204882
IP address blocks: 2001:678:a68::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:88:af:62:ce:b3:36:45:28:3d:65:9e:99:d2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Jan 1 09:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec52bcdf86d59b1fbbfd637cbf163a92582f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:24:ce:de:99:91:f1:97:3b:2b:91:db:e9:
e9:34:a8:83:7e:99:a0:cc:1b:18:29:93:ac:74:51:
ff:f9:fd:b1:6e:0e:c9:9d:f0:ef:c0:d7:a9:5a:3c:
5f:ad:76:de:2e:7e:7b:1e:eb:01:e1:0f:57:2c:56:
08:42:d8:b2:82:32:67:68:fd:3e:f2:3c:0f:7b:de:
de:37:8c:5b:d3:03:fd:10:95:56:e3:e6:82:e7:68:
e9:4a:08:96:6b:1b:29:69:2c:b3:8e:52:9c:52:03:
44:c9:e5:3f:b6:62:e3:d9:10:de:14:e4:90:e0:40:
b7:72:bf:d4:37:83:57:9d:61:45:61:5f:98:cd:24:
e9:d7:8e:85:1a:4d:52:2c:39:b1:af:e5:b1:cc:3f:
d2:54:c1:ee:24:2a:4b:58:7b:43:70:8c:14:c6:bc:
6d:76:b4:c9:ae:f2:02:e6:93:d9:79:92:e7:c6:65:
73:53:d2:3c:70:1e:64:bf:b1:a3:eb:cb:98:b9:10:
72:ee:18:a6:e2:5c:1d:09:2d:80:ea:c8:7d:47:3a:
2c:12:cb:ae:7a:ed:63:7a:3c:ef:8d:fa:4b:70:68:
0b:8c:eb:7d:96:99:51:bb:b8:57:57:10:e6:23:fc:
52:a5:00:08:3c:41:63:80:73:c2:ec:a7:5b:72:55:
fa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:2B:CD:F8:6D:59:B1:FB:BF:D6:37:CB:F1:63:A9:25:82:F9:4F
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/bsUrzfhtWbH7v9Y3y_FjqSWC-U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a68::/48
Signature Algorithm: sha256WithRSAEncryption
38:16:1a:14:4e:4d:bd:f3:11:7e:7c:3c:81:53:53:80:a0:0e:
58:7b:7a:73:59:0d:6c:b5:dd:45:ed:ce:3e:97:c8:ad:79:f8:
5c:34:53:28:78:a4:36:b7:fa:88:7b:97:be:be:b0:8f:47:f4:
2a:3c:89:5b:fe:94:c7:66:d6:cd:dc:84:1c:66:65:7c:f8:c5:
66:02:aa:8f:cb:a6:dd:6b:27:28:0a:b8:d7:9d:fc:c1:ca:d3:
87:9e:ac:e4:17:82:e7:59:4e:08:b8:a3:7b:e0:6c:90:80:23:
34:4e:6b:a0:97:f5:74:5d:1f:cf:82:22:3d:f5:b2:9d:02:13:
29:eb:e1:ed:12:24:fa:f2:8b:35:eb:51:aa:99:58:e4:9b:44:
2a:5c:7c:9e:47:ed:9b:67:ed:84:65:23:d5:5e:bc:40:1a:e3:
db:90:94:e3:7a:98:40:30:96:fa:dc:ca:13:66:cc:b9:c7:61:
66:6d:6a:75:1b:22:e5:4f:8c:58:ca:17:bc:9e:0f:63:7a:aa:
3a:33:94:28:54:4e:cb:ae:1d:6b:6c:15:0c:9d:78:45:7f:8d:
5a:f1:fc:37:7d:b5:ee:d8:ed:5c:be:58:1c:18:0b:4e:88:e9:
60:0c:99:11:b5:96:1d:1f:f7:74:36:2d:8f:23:ea:de:d1:a4:
cc:b1:9b:c9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsk4ivYs6zNkUoPWWemdJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjMwMTAxMDkwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM1MmJjZGY4NmQ1OWIxZmJiZmQ2MzdjYmYxNjNhOTI1ODJmOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIUkzt6ZkfGXOyuR2+npNKiDfpmg
zBsYKZOsdFH/+f2xbg7JnfDvwNepWjxfrXbeLn57HusB4Q9XLFYIQtiygjJnaP0+
8jwPe97eN4xb0wP9EJVW4+aC52jpSgiWaxspaSyzjlKcUgNEyeU/tmLj2RDeFOSQ
4EC3cr/UN4NXnWFFYV+YzSTp146FGk1SLDmxr+WxzD/SVMHuJCpLWHtDcIwUxrxt
drTJrvIC5pPZeZLnxmVzU9I8cB5kv7Gj68uYuRBy7him4lwdCS2A6sh9RzosEsuu
eu1jejzvjfpLcGgLjOt9lplRu7hXVxDmI/xSpQAIPEFjgHPC7KdbclX6WQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG7FK834bVmx+7/WN8vxY6klgvlPMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvYnNVcnpmaHRXYkg3djlZM3lfRmpxU1dDLVU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeApo
MA0GCSqGSIb3DQEBCwUAA4IBAQA4FhoUTk298xF+fDyBU1OAoA5Ye3pzWQ1std1F
7c4+l8itefhcNFMoeKQ2t/qIe5e+vrCPR/QqPIlb/pTHZtbN3IQcZmV8+MVmAqqP
y6bdaycoCrjXnfzBytOHnqzkF4LnWU4IuKN74GyQgCM0Tmugl/V0XR/PgiI99bKd
AhMp6+HtEiT68os161GqmVjkm0QqXHyeR+2bZ+2EZSPVXrxAGuPbkJTjephAMJb6
3MoTZsy5x2FmbWp1GyLlT4xYyhe8ng9jeqo6M5QoVE7Lrh1rbBUMnXhFf41a8fw3
fbXu2O1cvlgcGAtOiOlgDJkRtZYdH/d0Ni2PI+re0aTMsZvJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:48 2024 by rpki-client on console-fra.rpki-client.org