Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/_6r-HFBEtvsb2CkXj29jj2uKVLw.roa
File: _6r-HFBEtvsb2CkXj29jj2uKVLw.roa (raw, json)
Hash identifier: 7eRNgGQaiLtIf986ETEEskNMthd1SzVWkiGZy761Qpo=
Subject key identifier: FF:AA:FE:1C:50:44:B6:FB:1B:D8:29:17:8F:6F:63:8F:6B:8A:54:BC
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 018570FBCC33540A6D3C8ECCD31D1ED8485C
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/_6r-HFBEtvsb2CkXj29jj2uKVLw.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213330
IP address blocks: 2001:678:d20::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cc:33:54:0a:6d:3c:8e:cc:d3:1d:1e:d8:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffaafe1c5044b6fb1bd829178f6f638f6b8a54bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:5b:4f:c9:45:97:53:c2:3e:15:3c:cd:0f:
d0:5d:ee:b8:15:db:f2:85:7a:12:4b:d1:c4:6a:ad:
36:ee:35:83:11:1b:cd:78:90:11:8c:86:72:19:99:
74:c4:43:99:db:71:6f:65:bd:f5:a9:54:d9:b8:e8:
70:aa:da:14:42:ac:f2:9e:c5:24:d0:71:64:68:3d:
dd:ff:28:92:59:f8:06:6a:d9:6f:53:ed:0a:d2:e5:
bf:5f:62:35:37:27:00:fd:c8:4b:e7:a6:88:e7:fc:
38:bd:94:5b:0a:c3:aa:1a:e6:45:89:29:d5:bb:10:
b7:de:9c:25:d4:b5:d1:de:f5:30:e0:c9:93:cb:67:
41:f6:a4:2e:08:03:63:8a:44:2f:11:0e:40:23:d1:
21:99:6e:96:81:7e:29:a0:6c:61:a2:2e:3c:c4:37:
41:fa:49:b6:cd:be:1e:50:23:3f:be:58:60:17:49:
f1:b4:5c:46:b0:a4:03:c8:c5:13:26:78:aa:17:88:
3f:df:36:fc:79:8c:74:d5:d8:19:87:78:ed:8e:72:
5b:52:6d:17:45:c8:9c:8f:45:47:5d:e1:29:9d:3f:
11:8b:a4:ed:ee:1c:d3:ec:49:dd:9e:ae:d0:63:fb:
26:05:00:7d:e8:78:df:16:a8:f3:07:97:53:a0:6b:
4d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:FE:1C:50:44:B6:FB:1B:D8:29:17:8F:6F:63:8F:6B:8A:54:BC
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/_6r-HFBEtvsb2CkXj29jj2uKVLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d20::/48
Signature Algorithm: sha256WithRSAEncryption
ad:c1:17:49:43:00:01:e4:59:0f:16:97:70:8e:5a:13:74:d8:
61:2e:90:84:72:e7:71:8d:ae:ca:28:8a:87:7e:53:30:03:6e:
59:13:fd:99:d6:08:e8:ee:a0:4a:48:90:9f:3d:64:66:0d:54:
6f:33:57:b0:33:22:c5:25:75:fb:9d:75:f7:da:65:fb:10:84:
b0:7b:6c:20:0c:0b:6e:69:9a:f3:db:85:eb:b0:6a:92:9d:e7:
3e:9b:51:c8:c8:d9:c1:5e:07:8d:a5:3b:22:66:32:54:06:e0:
1c:79:db:68:b4:14:56:32:df:43:47:b4:f1:0d:e9:71:cc:50:
62:67:7b:ae:26:49:4d:d9:12:e3:40:a2:73:22:e9:dd:57:8d:
f9:17:a4:0f:ba:d0:88:9d:f1:52:43:37:d7:2d:3f:88:51:0b:
f1:bb:38:cf:78:ea:2f:02:d5:c2:57:98:ef:85:7f:0d:62:11:
0d:28:49:75:ca:14:ef:7e:8c:d6:f7:77:0b:65:3a:e2:87:e3:
7b:54:2d:e8:18:f3:dd:a9:7f:9b:f1:75:cb:3e:a9:1d:8d:d8:
fe:c2:6b:2f:ce:be:72:2f:98:61:ec:83:94:d4:01:31:06:c5:
4c:4f:8c:48:18:a6:7e:05:6d:36:17:d3:ca:f3:37:70:a7:2a:
87:91:b4:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw+8wzVAptPI7M0x0e2EhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmJlNmYwNzU0MDBkMzA1YTE2ZGRlNjkwZTI1Y2JkOTQ2
NDVjYmUwHhcNMjMwMTAyMDUzNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFhZmUxYzUwNDRiNmZiMWJkODI5MTc4ZjZmNjM4ZjZiOGE1NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPxbT8lFl1PCPhU8zQ/QXe64Fdvy
hXoSS9HEaq027jWDERvNeJARjIZyGZl0xEOZ23FvZb31qVTZuOhwqtoUQqzynsUk
0HFkaD3d/yiSWfgGatlvU+0K0uW/X2I1NycA/chL56aI5/w4vZRbCsOqGuZFiSnV
uxC33pwl1LXR3vUw4MmTy2dB9qQuCANjikQvEQ5AI9EhmW6WgX4poGxhoi48xDdB
+km2zb4eUCM/vlhgF0nxtFxGsKQDyMUTJniqF4g/3zb8eYx01dgZh3jtjnJbUm0X
Rcicj0VHXeEpnT8Ri6Tt7hzT7Endnq7QY/smBQB96HjfFqjzB5dToGtN9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP+q/hxQRLb7G9gpF49vY49rilS8MB8GA1UdIwQY
MBaAFNNr5vB1QA0wWhbd5pDiXL2UZFy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQt
MzBjMWM1YTA4MGQ5LzEvXzZyLUhGQkV0dnNiMkNrWGoyOWpqMnVLVkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZmRlMzgtZTliOS00YjY5LWI0MTQtMzBjMWM1YTA4MGQ5
LzEvMDJ2bThIVkFEVEJhRnQzbWtPSmN2WlJrWEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA0g
MA0GCSqGSIb3DQEBCwUAA4IBAQCtwRdJQwAB5FkPFpdwjloTdNhhLpCEcudxja7K
KIqHflMwA25ZE/2Z1gjo7qBKSJCfPWRmDVRvM1ewMyLFJXX7nXX32mX7EISwe2wg
DAtuaZrz24XrsGqSnec+m1HIyNnBXgeNpTsiZjJUBuAcedtotBRWMt9DR7TxDelx
zFBiZ3uuJklN2RLjQKJzIundV435F6QPutCInfFSQzfXLT+IUQvxuzjPeOovAtXC
V5jvhX8NYhENKEl1yhTvfozW93cLZTrih+N7VC3oGPPdqX+b8XXLPqkdjdj+wmsv
zr5yL5hh7IOU1AExBsVMT4xIGKZ+BW02F9PK8zdwpyqHkbTb
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org