Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Afq7chEn87dWn6OlVXQQCRLKf9M.roa
File: Afq7chEn87dWn6OlVXQQCRLKf9M.roa (raw, json)
Hash identifier: 4ZEa+Yjo4Ar3cloYO0BxG/icszlPnyWUyjl62fOOhgw=
Subject key identifier: 01:FA:BB:72:11:27:F3:B7:56:9F:A3:A5:55:74:10:09:12:CA:7F:D3
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01856F429F32AFAD1874E586581E3C985F08
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Afq7chEn87dWn6OlVXQQCRLKf9M.roa
Signing time: Sun 01 Jan 2023 21:35:15 +0000
ROA not before: Sun 01 Jan 2023 21:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205290
IP address blocks: 2a05:4140:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Sep 2023 17:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:9f:32:af:ad:18:74:e5:86:58:1e:3c:98:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 21:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01fabb721127f3b7569fa3a55574100912ca7fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:ba:37:bf:08:b3:1e:f7:fd:df:11:36:b5:
f1:de:62:88:c8:d8:fe:1f:12:04:4f:ea:e8:4c:34:
51:ba:0c:f2:2c:96:dd:91:cb:82:72:b7:00:a1:42:
80:7a:13:10:b3:c6:90:3a:2f:a8:3d:c2:3f:16:75:
9e:d9:aa:05:00:fa:93:5c:24:26:d4:91:cc:68:64:
d2:78:5c:16:47:52:a5:37:e4:e9:b4:15:13:16:2f:
e6:c6:1e:3d:48:f0:71:79:3c:2d:89:93:a4:63:f4:
be:d5:22:52:a6:03:39:a3:bb:61:69:34:0b:09:ed:
5a:89:b2:d9:67:4f:69:62:21:6c:82:50:58:84:7f:
16:1c:85:95:bb:2e:36:3d:f7:d3:77:ab:73:2c:0e:
94:cc:eb:b6:3f:a2:7e:11:21:10:06:51:39:16:c3:
37:60:f9:1a:05:13:7f:ce:00:b6:99:4b:3a:65:8e:
03:2a:57:cd:cb:49:24:19:25:67:d0:f4:23:08:ed:
0b:d9:c7:f2:3b:0f:59:b1:ba:b7:8d:33:3a:42:bf:
85:f9:71:1b:bd:78:ce:9a:33:89:22:fd:a4:91:ef:
01:5e:ad:d7:0a:3f:b3:16:10:4d:14:36:eb:d2:ab:
41:c7:09:b1:3b:10:8a:40:48:9d:a7:ce:d1:a8:90:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:BB:72:11:27:F3:B7:56:9F:A3:A5:55:74:10:09:12:CA:7F:D3
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Afq7chEn87dWn6OlVXQQCRLKf9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:7::/48
Signature Algorithm: sha256WithRSAEncryption
49:22:81:c2:73:f4:df:79:fc:6a:1f:0c:8c:a1:5c:89:15:0f:
4e:bc:d1:16:99:35:90:cf:4f:c8:11:49:18:28:83:8f:66:5a:
5b:83:de:df:cd:16:7f:0a:73:02:78:73:f1:3d:f4:07:9c:c9:
db:f2:af:4b:71:d2:b2:7d:4b:9f:12:d2:52:b3:10:3f:f9:ce:
15:12:dc:9a:39:f2:29:94:de:91:19:16:df:55:8c:9a:51:56:
aa:18:9a:26:cc:00:a3:14:58:53:50:29:b9:fb:0b:c0:76:4c:
6b:08:a9:72:13:6d:0e:e2:59:79:75:71:ce:2b:44:46:01:fa:
82:de:c0:fa:49:f4:4e:ff:7b:41:d2:ed:85:f0:42:10:cb:f3:
69:7f:48:49:aa:4b:db:73:60:68:58:67:13:5c:75:d2:a9:f3:
41:f6:a5:f8:ca:8e:c2:77:34:0d:10:17:e4:d6:ce:e1:cc:88:
38:fe:6c:72:5a:98:91:0a:85:80:88:06:40:66:a7:a0:f0:9f:
ad:86:a6:8a:c6:85:b0:ef:9b:f0:23:64:aa:58:6a:ff:a2:a1:
19:25:bf:c1:0a:c9:65:4c:cb:fd:24:54:7b:74:c6:2c:e8:26:
ee:73:c3:9f:58:b6:24:c6:56:bd:c4:a7:d2:99:c2:ff:7e:7a:
c7:4c:a0:b2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQp8yr60YdOWGWB48mF8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjMwMTAxMjEzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWZhYmI3MjExMjdmM2I3NTY5ZmEzYTU1NTc0MTAwOTEyY2E3ZmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWi6N78Isx73/d8RNrXx3mKIyNj+
HxIET+roTDRRugzyLJbdkcuCcrcAoUKAehMQs8aQOi+oPcI/FnWe2aoFAPqTXCQm
1JHMaGTSeFwWR1KlN+TptBUTFi/mxh49SPBxeTwtiZOkY/S+1SJSpgM5o7thaTQL
Ce1aibLZZ09pYiFsglBYhH8WHIWVuy42PffTd6tzLA6UzOu2P6J+ESEQBlE5FsM3
YPkaBRN/zgC2mUs6ZY4DKlfNy0kkGSVn0PQjCO0L2cfyOw9Zsbq3jTM6Qr+F+XEb
vXjOmjOJIv2kke8BXq3XCj+zFhBNFDbr0qtBxwmxOxCKQEidp87RqJCEPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAH6u3IRJ/O3Vp+jpVV0EAkSyn/TMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvQWZxN2NoRW44N2RXbjZPbFZYUVFDUkxLZjlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQBJIoHCc/TfefxqHwyMoVyJFQ9OvNEWmTWQz0/I
EUkYKIOPZlpbg97fzRZ/CnMCeHPxPfQHnMnb8q9LcdKyfUufEtJSsxA/+c4VEtya
OfIplN6RGRbfVYyaUVaqGJomzACjFFhTUCm5+wvAdkxrCKlyE20O4ll5dXHOK0RG
AfqC3sD6SfRO/3tB0u2F8EIQy/Npf0hJqkvbc2BoWGcTXHXSqfNB9qX4yo7CdzQN
EBfk1s7hzIg4/mxyWpiRCoWAiAZAZqeg8J+thqaKxoWw75vwI2SqWGr/oqEZJb/B
CsllTMv9JFR7dMYs6Cbuc8OfWLYkxla9xKfSmcL/fnrHTKCy
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org