Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/fQTa_h5LA8MWIpIwnc7gUz5YLz8.roa
File: fQTa_h5LA8MWIpIwnc7gUz5YLz8.roa (raw, json)
Hash identifier: CwhCtBseExnl5ksrFUHZwAa4cclW6u7m6iWFVVwVjCs=
Subject key identifier: 7D:04:DA:FE:1E:4B:03:C3:16:22:92:30:9D:CE:E0:53:3E:58:2F:3F
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0186A7F820ABC8DF12445128A69667292286
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/fQTa_h5LA8MWIpIwnc7gUz5YLz8.roa
Signing time: Fri 03 Mar 2023 14:55:01 +0000
ROA not before: Fri 03 Mar 2023 14:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199591
IP address blocks: 2001:67c:bf4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:f8:20:ab:c8:df:12:44:51:28:a6:96:67:29:22:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Mar 3 14:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d04dafe1e4b03c3162292309dcee0533e582f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:0b:88:5a:c3:50:fe:f8:5a:d6:88:a2:23:
7e:6f:1e:bf:76:67:d5:91:c8:1d:d2:dd:4b:11:e1:
2d:89:09:87:30:98:05:c2:df:42:3d:f7:64:de:08:
09:8a:7f:04:66:9d:e5:96:24:2c:7f:91:48:a9:6b:
36:9b:d4:84:c2:35:8e:11:82:53:da:66:18:5e:b5:
4b:79:27:41:af:ab:57:bb:99:d4:66:a2:38:d3:02:
84:98:4d:55:aa:3b:94:d0:7c:6a:4e:f2:5e:85:7e:
e5:92:01:07:71:66:f0:b7:a5:99:df:a9:f2:77:9c:
5a:7b:a6:8e:bd:c4:08:89:5d:6c:5d:7c:ae:83:ec:
b5:1b:c5:a6:c9:74:dd:88:ec:67:5a:97:06:3a:f1:
57:15:74:b6:dc:1d:81:49:08:eb:06:cf:c8:2d:b6:
74:e0:bc:7c:fc:78:81:cd:0f:68:e1:15:64:ac:b4:
a1:38:8f:7a:a6:06:e5:67:0e:fc:83:73:6c:72:dc:
34:60:73:54:17:f9:d3:4d:f8:75:57:fb:9b:c7:18:
e4:39:95:ca:86:8f:f8:e5:52:f6:9c:e4:cc:f0:17:
41:57:81:88:9b:e6:16:3f:bf:27:e3:d3:9b:75:89:
0a:11:05:5a:3d:97:89:52:ca:bc:e3:33:1f:c1:c3:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:DA:FE:1E:4B:03:C3:16:22:92:30:9D:CE:E0:53:3E:58:2F:3F
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/fQTa_h5LA8MWIpIwnc7gUz5YLz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bf4::/48
Signature Algorithm: sha256WithRSAEncryption
58:ae:8b:1e:20:fe:c7:a6:b6:de:c4:fc:d1:fa:44:80:b1:d4:
43:f6:b9:7a:e1:78:cc:aa:f8:02:23:8f:b3:99:69:43:30:3a:
79:b9:66:4d:4a:92:db:f3:55:35:1a:a7:23:b5:41:5e:5b:57:
c9:b3:00:ff:90:54:40:15:7e:6b:f8:9f:52:86:26:ca:81:07:
18:f2:af:41:86:df:33:2f:41:54:0a:b7:5a:38:71:9e:75:78:
af:c6:ea:5c:54:1e:45:31:25:4a:59:6d:9a:e0:9e:b6:a9:6a:
3d:3c:44:90:ed:f7:98:a2:7f:90:6b:5c:02:6c:87:25:03:a7:
17:16:92:ab:1b:94:78:5a:23:fc:59:6e:a8:25:56:7e:cb:e6:
0b:8d:60:b3:86:c1:91:de:ad:08:24:e1:1a:77:61:87:10:00:
e4:42:2a:aa:3b:5d:ed:71:39:34:39:e2:6f:48:9a:0d:95:6b:
b2:72:6b:50:f5:8b:89:26:87:59:72:7c:97:ea:09:41:8c:46:
40:1e:38:0f:d8:09:17:ad:2e:3e:74:b3:cc:8e:de:6c:da:00:
02:91:fa:e2:49:4a:db:96:3f:a0:d9:cf:16:76:12:34:60:66:
7c:d5:6b:77:81:a6:1f:38:6a:74:2b:67:07:08:d1:cd:77:ec:
9e:f2:c0:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYan+CCryN8SRFEoppZnKSKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl
YzZhOGUwHhcNMjMwMzAzMTQ1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDA0ZGFmZTFlNGIwM2MzMTYyMjkyMzA5ZGNlZTA1MzNlNTgyZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AkLiFrDUP74WtaIoiN+bx6/dmfV
kcgd0t1LEeEtiQmHMJgFwt9CPfdk3ggJin8EZp3lliQsf5FIqWs2m9SEwjWOEYJT
2mYYXrVLeSdBr6tXu5nUZqI40wKEmE1VqjuU0HxqTvJehX7lkgEHcWbwt6WZ36ny
d5xae6aOvcQIiV1sXXyug+y1G8WmyXTdiOxnWpcGOvFXFXS23B2BSQjrBs/ILbZ0
4Lx8/HiBzQ9o4RVkrLShOI96pgblZw78g3Nsctw0YHNUF/nTTfh1V/ubxxjkOZXK
ho/45VL2nOTM8BdBV4GIm+YWP78n49ObdYkKEQVaPZeJUsq84zMfwcM4iQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH0E2v4eSwPDFiKSMJ3O4FM+WC8/MB8GA1UdIwQY
MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt
OTFkZTlmMWRlYzJkLzEvZlFUYV9oNUxBOE1XSXBJd25jN2dVejVZTHo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk
LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAv0
MA0GCSqGSIb3DQEBCwUAA4IBAQBYroseIP7HprbexPzR+kSAsdRD9rl64XjMqvgC
I4+zmWlDMDp5uWZNSpLb81U1GqcjtUFeW1fJswD/kFRAFX5r+J9ShibKgQcY8q9B
ht8zL0FUCrdaOHGedXivxupcVB5FMSVKWW2a4J62qWo9PESQ7feYon+Qa1wCbIcl
A6cXFpKrG5R4WiP8WW6oJVZ+y+YLjWCzhsGR3q0IJOEad2GHEADkQiqqO13tcTk0
OeJvSJoNlWuycmtQ9YuJJodZcnyX6glBjEZAHjgP2AkXrS4+dLPMjt5s2gACkfri
SUrblj+g2c8WdhI0YGZ81Wt3gaYfOGp0K2cHCNHNd+ye8sAO
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:13 2024 by rpki-client on console-ams.rpki-client.org