Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-gVloyfwNhI2mE0nBUcNOOaoquo.roa
File: 1-gVloyfwNhI2mE0nBUcNOOaoquo.roa (raw, json)
Hash identifier: 6e9a0JhH+pYaELrn5FJLRWX0C5k/8sEqbgsohQfRGKc=
Subject key identifier: FA:05:65:A3:27:F0:36:12:36:98:4D:27:05:47:0D:38:E6:A8:AA:EA
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018B8AB9377C03CEF264C8031BB50AAF02DA
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-gVloyfwNhI2mE0nBUcNOOaoquo.roa
Signing time: Wed 01 Nov 2023 11:51:16 +0000
ROA not before: Wed 01 Nov 2023 11:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56694
IP address blocks: 2a0e:dfc4::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:b9:37:7c:03:ce:f2:64:c8:03:1b:b5:0a:af:02:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Nov 1 11:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa0565a327f0361236984d2705470d38e6a8aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:d1:c6:cb:78:a4:94:09:53:6c:da:bc:ae:
b4:8f:b4:4e:b4:fc:41:17:54:2f:d2:35:92:0c:85:
fb:d0:67:6a:58:4b:1e:e0:3e:88:e0:90:13:1e:6d:
f0:90:95:3d:8b:34:c9:3a:cd:8c:75:85:5e:4b:d4:
81:37:07:ba:46:69:73:7c:79:65:cc:4d:eb:f6:f4:
08:4b:46:0b:17:14:26:91:1d:d2:3a:e5:20:78:16:
56:a6:ac:53:7b:91:fc:dd:c9:96:e0:f3:bf:b9:96:
0c:46:46:1e:b7:b5:e1:45:9e:2b:90:a4:bb:c5:b8:
6d:7b:2e:2d:7c:d3:fb:7b:d1:cd:8e:0c:54:ed:b3:
e4:26:b3:69:e0:89:8e:71:31:2b:11:f2:83:d1:04:
fc:76:7c:4b:60:bf:eb:c7:92:88:8b:41:df:4a:5d:
8d:05:23:52:7d:a6:63:37:29:eb:41:53:8e:42:3b:
fd:19:8d:d0:f8:5b:47:f9:9d:05:b7:91:c2:9a:e1:
7e:04:1b:fc:70:6d:06:4b:87:c3:94:3d:8a:82:c1:
24:f9:a6:6f:a5:88:31:be:84:c0:06:49:3f:ea:0c:
7e:cf:dc:e6:cb:8e:e3:9e:0e:18:e7:45:34:24:47:
2a:da:52:1e:f9:2d:ba:de:7e:ee:e0:e2:a5:5f:d2:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:65:A3:27:F0:36:12:36:98:4D:27:05:47:0D:38:E6:A8:AA:EA
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/1-gVloyfwNhI2mE0nBUcNOOaoquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:dfc4::/32
Signature Algorithm: sha256WithRSAEncryption
6b:64:f5:df:9b:63:f8:69:e9:3e:ea:d2:c7:84:bc:c8:52:b8:
b9:9e:22:18:a5:d9:9d:63:4c:9a:69:f9:97:a9:1f:dc:0c:fa:
d3:71:6e:76:9d:c9:c0:10:ab:89:5c:b8:ad:3f:63:ad:a5:6d:
5c:aa:1a:a1:c0:b3:e2:c2:65:72:b3:5e:99:4a:20:f9:2e:ee:
26:79:61:4e:01:03:c2:7c:76:a2:0e:8c:25:95:96:5c:52:bd:
84:0f:00:e0:78:7f:f3:f4:86:5e:51:3c:cf:e2:a0:bb:ad:a2:
53:3c:7f:97:2c:9e:e6:65:34:05:e9:44:fc:ee:d2:c4:cd:1c:
21:bd:b7:9b:26:25:8a:f9:a0:74:ee:74:63:70:2c:41:06:1f:
f0:79:69:cc:80:d9:5d:27:0e:30:0f:06:57:bd:e7:9a:13:52:
e0:75:74:5f:c6:14:6e:ef:f7:a9:c4:96:71:d6:bb:53:99:d8:
18:09:d6:62:2a:c8:6d:e4:94:47:df:d2:27:2b:da:56:63:94:
62:12:83:d6:69:b5:d4:ce:e7:47:0b:7c:e2:81:ef:98:e3:46:
48:50:e4:62:55:52:fa:cf:06:d6:2e:61:04:89:c2:50:3a:28:
e3:34:0e:b3:bb:30:23:a0:52:77:2f:8e:e6:57:c4:57:8c:79:
ff:a5:d3:43
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYuKuTd8A87yZMgDG7UKrwLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjMxMTAxMTE1MTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTA1NjVhMzI3ZjAzNjEyMzY5ODRkMjcwNTQ3MGQzOGU2YThhYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9DRxst4pJQJU2zavK60j7ROtPxB
F1Qv0jWSDIX70GdqWEse4D6I4JATHm3wkJU9izTJOs2MdYVeS9SBNwe6RmlzfHll
zE3r9vQIS0YLFxQmkR3SOuUgeBZWpqxTe5H83cmW4PO/uZYMRkYet7XhRZ4rkKS7
xbhtey4tfNP7e9HNjgxU7bPkJrNp4ImOcTErEfKD0QT8dnxLYL/rx5KIi0HfSl2N
BSNSfaZjNynrQVOOQjv9GY3Q+FtH+Z0Ft5HCmuF+BBv8cG0GS4fDlD2KgsEk+aZv
pYgxvoTABkk/6gx+z9zmy47jng4Y50U0JEcq2lIe+S263n7u4OKlX9Kl/QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPoFZaMn8DYSNphNJwVHDTjmqKrqMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvMS1nVmxveWZ3TmhJMm1FMG5CVWNOT09hb3F1by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDgvOTUxNGVkLTI3NmUtNGFiYS04OTdlLWE0NDEwZTEwYjZm
NS8xLzkxMkxVb0ZmUHlZVDZVaVpMc24tWmc5cFNiUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoO38Qw
DQYJKoZIhvcNAQELBQADggEBAGtk9d+bY/hp6T7q0seEvMhSuLmeIhil2Z1jTJpp
+ZepH9wM+tNxbnadycAQq4lcuK0/Y62lbVyqGqHAs+LCZXKzXplKIPku7iZ5YU4B
A8J8dqIOjCWVllxSvYQPAOB4f/P0hl5RPM/ioLutolM8f5csnuZlNAXpRPzu0sTN
HCG9t5smJYr5oHTudGNwLEEGH/B5acyA2V0nDjAPBle955oTUuB1dF/GFG7v96nE
lnHWu1OZ2BgJ1mIqyG3klEff0icr2lZjlGISg9ZptdTO50cLfOKB75jjRkhQ5GJV
UvrPBtYuYQSJwlA6KOM0DrO7MCOgUncvjuZXxFeMef+l00M=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:15 2024 by rpki-client on console-fra.rpki-client.org