Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/E9qIe7UmyV1tcTwdahaMTxMc9uI.roa
File: E9qIe7UmyV1tcTwdahaMTxMc9uI.roa (raw, json)
Hash identifier: oDvRDsWUv7hOi0rMHTFVj2oT573lbYzrx3jkcS/Uocg=
Subject key identifier: 13:DA:88:7B:B5:26:C9:5D:6D:71:3C:1D:6A:16:8C:4F:13:1C:F6:E2
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 01856CEF19F036D80A0FB864CE0757B7BF9C
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/E9qIe7UmyV1tcTwdahaMTxMc9uI.roa
Signing time: Sun 01 Jan 2023 10:44:46 +0000
ROA not before: Sun 01 Jan 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196960
IP address blocks: 2001:67c:268::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:19:f0:36:d8:0a:0f:b8:64:ce:07:57:b7:bf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Jan 1 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13da887bb526c95d6d713c1d6a168c4f131cf6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:95:6c:8b:b4:b1:d5:05:f6:c3:9d:be:44:
d3:56:d7:6b:85:6b:a8:1b:67:eb:78:b7:5d:82:c8:
15:6f:dc:e8:81:7f:b1:50:d7:f3:5d:92:c1:88:0b:
0f:34:4b:f9:5e:3c:43:f3:88:9a:53:62:67:9a:75:
15:ad:ea:d5:da:95:83:ea:3b:1b:21:47:72:3b:ac:
41:ff:55:8f:02:9b:ef:26:72:0e:71:dc:b2:92:c3:
d1:79:0d:ef:9e:e6:7e:74:4e:6b:29:c6:61:cb:09:
48:c4:71:48:91:49:e6:d8:1e:36:c8:a0:7b:a3:dd:
01:e7:38:8a:d5:c6:64:ac:db:b0:24:36:26:12:85:
56:b7:97:8b:57:79:36:3f:bd:2e:4c:8b:4f:a8:83:
f1:bd:77:6d:54:0c:45:58:59:0a:f6:8f:52:9f:1b:
1b:11:0a:a5:1d:04:71:d4:b0:ab:4c:fb:0b:f8:5c:
29:dc:77:58:e1:2c:6b:41:8e:a9:0a:0e:a6:cf:aa:
78:9e:5a:cd:ee:6d:ad:0c:54:6b:f4:8d:d0:10:04:
7f:61:06:75:b1:0d:8d:1d:2b:60:8e:d5:74:bc:99:
04:5f:fb:b2:95:8a:de:b5:fe:f6:e6:99:c0:ea:6c:
fd:e2:00:62:c1:87:91:f1:9b:75:20:b4:d7:00:7a:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:88:7B:B5:26:C9:5D:6D:71:3C:1D:6A:16:8C:4F:13:1C:F6:E2
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/E9qIe7UmyV1tcTwdahaMTxMc9uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:268::/48
Signature Algorithm: sha256WithRSAEncryption
b4:69:04:6f:f0:25:6b:f3:af:97:d7:df:5c:ef:ab:bf:b7:49:
5c:99:e9:5c:45:6b:10:ca:5f:c5:31:0e:93:18:7e:0a:1b:ad:
b0:b6:46:34:12:40:ed:a4:c9:13:63:51:c0:9c:cf:ce:ed:07:
ea:b8:71:d0:f7:5d:dd:59:55:97:8c:02:ae:96:d5:33:17:95:
fb:c6:ad:3a:f0:ca:0d:79:9e:aa:7b:9e:49:19:4f:f9:25:6d:
ff:16:d9:ac:ec:db:16:5d:7a:5b:92:c3:90:19:6b:66:05:37:
48:6b:77:04:7a:9c:03:98:f8:3a:3c:71:04:27:fc:75:d2:be:
85:7a:48:06:bb:b8:59:b8:30:2e:88:60:28:4d:2c:90:ff:0e:
fb:34:bd:91:c8:37:68:4a:7a:cf:d3:1b:f1:c5:78:f6:19:f7:
c4:0f:bf:35:90:af:2a:51:b1:91:27:10:42:9e:7b:da:59:e5:
68:26:f3:e9:27:ed:24:2d:54:7c:40:80:11:cc:63:e0:ad:ab:
21:f0:d9:1c:2d:c1:08:00:c5:c0:84:4e:2e:88:2b:be:76:48:
f5:82:de:08:15:3a:d6:8b:5b:b2:f9:db:a9:12:16:5f:be:f2:
13:aa:5c:f9:a7:e0:6c:53:40:c6:0f:e8:19:48:04:d6:5e:a3:
02:63:f9:af
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVs7xnwNtgKD7hkzgdXt7+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjMwMTAxMTA0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2RhODg3YmI1MjZjOTVkNmQ3MTNjMWQ2YTE2OGM0ZjEzMWNmNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbOVbIu0sdUF9sOdvkTTVtdrhWuo
G2freLddgsgVb9zogX+xUNfzXZLBiAsPNEv5XjxD84iaU2JnmnUVrerV2pWD6jsb
IUdyO6xB/1WPApvvJnIOcdyyksPReQ3vnuZ+dE5rKcZhywlIxHFIkUnm2B42yKB7
o90B5ziK1cZkrNuwJDYmEoVWt5eLV3k2P70uTItPqIPxvXdtVAxFWFkK9o9Snxsb
EQqlHQRx1LCrTPsL+Fwp3HdY4SxrQY6pCg6mz6p4nlrN7m2tDFRr9I3QEAR/YQZ1
sQ2NHStgjtV0vJkEX/uylYretf725pnA6mz94gBiwYeR8Zt1ILTXAHoOkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBPaiHu1JsldbXE8HWoWjE8THPbiMB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEvRTlxSWU3VW15VjF0Y1R3ZGFoYU1UeE1jOXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAJo
MA0GCSqGSIb3DQEBCwUAA4IBAQC0aQRv8CVr86+X199c76u/t0lcmelcRWsQyl/F
MQ6TGH4KG62wtkY0EkDtpMkTY1HAnM/O7QfquHHQ913dWVWXjAKultUzF5X7xq06
8MoNeZ6qe55JGU/5JW3/Ftms7NsWXXpbksOQGWtmBTdIa3cEepwDmPg6PHEEJ/x1
0r6FekgGu7hZuDAuiGAoTSyQ/w77NL2RyDdoSnrP0xvxxXj2GffED781kK8qUbGR
JxBCnnvaWeVoJvPpJ+0kLVR8QIARzGPgrash8NkcLcEIAMXAhE4uiCu+dkj1gt4I
FTrWi1uy+dupEhZfvvITqlz5p+BsU0DGD+gZSATWXqMCY/mv
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:25 2024 by rpki-client on console-fra.rpki-client.org