Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/_S1mvradKd-9I88wbGd79pynGrg.roa
File: _S1mvradKd-9I88wbGd79pynGrg.roa (raw, json)
Hash identifier: g28iAKlv4/3EoA7bSR4fInpM2HPTj2uENs7mWET64Ik=
Subject key identifier: FD:2D:66:BE:B6:9D:29:DF:BD:23:CF:30:6C:67:7B:F6:9C:A7:1A:B8
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 01856C25CFE573AA2900B5530AF6AACA1DD1
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/_S1mvradKd-9I88wbGd79pynGrg.roa
Signing time: Sun 01 Jan 2023 07:04:55 +0000
ROA not before: Sun 01 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 2001:67c:2b34::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:cf:e5:73:aa:29:00:b5:53:0a:f6:aa:ca:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Jan 1 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2d66beb69d29dfbd23cf306c677bf69ca71ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:f7:ce:f8:be:a4:7b:33:a3:51:2b:84:fe:
64:e6:ce:41:ec:b8:85:68:32:18:89:eb:60:7f:24:
5f:a5:27:69:93:5b:7d:40:43:6f:6a:61:17:8e:58:
1c:a3:f9:88:cb:f6:cc:82:7b:26:84:4d:59:70:ce:
19:74:d8:c0:e6:c1:72:a0:b7:ee:06:05:a8:16:b6:
35:94:bb:19:b9:3f:d6:63:45:6a:a9:a0:cf:e1:8d:
71:fb:97:68:15:27:ad:f7:2f:1b:ea:98:b4:86:f5:
48:13:7f:5d:8c:aa:d9:d9:5e:f3:ca:36:64:0c:db:
d2:3f:bb:9c:40:51:82:3a:87:91:1f:02:f8:88:1c:
1b:e5:a4:03:31:f1:6f:7a:b3:a1:90:07:d4:9e:50:
14:34:8f:c1:8b:22:1f:67:5d:53:ea:f4:96:48:df:
15:c6:0a:02:e7:bf:4d:d9:4b:87:12:27:7d:71:6c:
21:30:00:f7:7d:47:a4:f8:42:8c:6c:ae:09:7e:49:
19:ab:93:35:38:a8:6b:4c:3c:4e:3f:15:4d:a2:c4:
f4:e6:a5:0b:ff:d4:a2:2a:d5:91:e6:5a:45:a9:12:
d8:29:fa:8e:ca:14:e9:ca:14:36:bd:98:94:6d:29:
2e:ae:49:c7:4b:ee:5d:bf:d3:ae:ee:22:7c:0b:49:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:66:BE:B6:9D:29:DF:BD:23:CF:30:6C:67:7B:F6:9C:A7:1A:B8
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/_S1mvradKd-9I88wbGd79pynGrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b34::/48
Signature Algorithm: sha256WithRSAEncryption
71:fc:7a:e1:fd:45:ae:a5:58:84:b6:62:12:3c:8e:30:d7:cf:
bb:58:51:d9:9e:b6:d5:e5:1e:48:c5:a4:67:0e:2d:c3:1f:46:
9b:0d:8c:2f:7f:c0:c3:be:5d:98:9a:35:ef:e8:9f:c7:42:89:
6a:94:aa:e6:c3:6e:19:f8:4d:5f:3a:8f:9b:56:1a:c0:1b:f6:
e6:f9:cd:7a:ca:03:3b:af:1b:e0:2e:5e:85:35:16:4d:4e:32:
89:dd:48:93:a2:ca:1a:01:b5:34:ff:4e:ec:9f:80:48:61:d6:
97:71:51:5e:08:82:e6:00:f9:22:dd:b1:df:be:da:c8:ca:c5:
ab:d7:3b:de:c1:b9:b3:af:5a:0e:2c:c4:0d:01:26:ce:29:8b:
25:3a:ed:1e:06:de:62:81:8c:95:59:e5:57:95:9a:ac:28:cb:
8c:0e:01:33:e3:d7:69:6e:22:4e:de:0e:a1:93:46:d8:d0:34:
7c:36:aa:6e:07:cf:07:af:c4:4a:5b:b1:02:88:44:c9:f8:fc:
6e:2d:c6:9f:6a:25:69:e8:62:1c:48:fe:c4:34:03:45:4f:d2:
f9:c5:90:61:3e:96:a8:31:35:1f:f4:e2:21:bb:f8:ee:d7:05:
dc:60:1f:e0:a1:4f:3c:bd:5a:63:3d:3d:cc:e0:60:8a:01:6c:
d2:c1:f5:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsJc/lc6opALVTCvaqyh3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjMwMTAxMDcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDJkNjZiZWI2OWQyOWRmYmQyM2NmMzA2YzY3N2JmNjljYTcxYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKz3zvi+pHszo1ErhP5k5s5B7LiF
aDIYietgfyRfpSdpk1t9QENvamEXjlgco/mIy/bMgnsmhE1ZcM4ZdNjA5sFyoLfu
BgWoFrY1lLsZuT/WY0VqqaDP4Y1x+5doFSet9y8b6pi0hvVIE39djKrZ2V7zyjZk
DNvSP7ucQFGCOoeRHwL4iBwb5aQDMfFverOhkAfUnlAUNI/BiyIfZ11T6vSWSN8V
xgoC579N2UuHEid9cWwhMAD3fUek+EKMbK4JfkkZq5M1OKhrTDxOPxVNosT05qUL
/9SiKtWR5lpFqRLYKfqOyhTpyhQ2vZiUbSkurknHS+5dv9Ou7iJ8C0lG9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP0tZr62nSnfvSPPMGxne/acpxq4MB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvX1MxbXZyYWRLZC05STg4d2JHZDc5cHluR3JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCs0
MA0GCSqGSIb3DQEBCwUAA4IBAQBx/Hrh/UWupViEtmISPI4w18+7WFHZnrbV5R5I
xaRnDi3DH0abDYwvf8DDvl2YmjXv6J/HQolqlKrmw24Z+E1fOo+bVhrAG/bm+c16
ygM7rxvgLl6FNRZNTjKJ3UiTosoaAbU0/07sn4BIYdaXcVFeCILmAPki3bHfvtrI
ysWr1zvewbmzr1oOLMQNASbOKYslOu0eBt5igYyVWeVXlZqsKMuMDgEz49dpbiJO
3g6hk0bY0DR8NqpuB88Hr8RKW7ECiETJ+PxuLcafaiVp6GIcSP7ENANFT9L5xZBh
PpaoMTUf9OIhu/ju1wXcYB/goU88vVpjPT3M4GCKAWzSwfWt
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org