Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa
File: ZAOrb6okZVUAB05ijM-wFMjQqXo.roa (raw, json)
Hash identifier: GCAqlvboAq3McrUmiE33ZgswUpwzWSnNtbXTgZPgWRc=
Subject key identifier: 64:03:AB:6F:AA:24:65:55:00:07:4E:62:8C:CF:B0:14:C8:D0:A9:7A
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018B68CB9C5645D2885A95C619CA9D71E7A7
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa
Signing time: Wed 25 Oct 2023 21:44:16 +0000
ROA not before: Wed 25 Oct 2023 21:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a11:e101::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:cb:9c:56:45:d2:88:5a:95:c6:19:ca:9d:71:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Oct 25 21:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6403ab6faa24655500074e628ccfb014c8d0a97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:e0:65:01:57:95:32:a4:d3:12:64:1e:6a:
a3:85:06:e5:8f:93:6a:91:0e:1d:9c:35:1d:42:ea:
5d:80:96:f8:b8:30:fe:4d:58:b1:56:c3:5e:46:4a:
88:24:6e:50:83:71:18:af:8e:d2:7b:b8:77:e3:78:
2f:eb:8a:d4:9f:39:9b:23:b3:0f:3d:6c:a7:fe:43:
fe:02:7a:3c:18:a8:f0:fe:4a:ac:5e:e0:36:9e:08:
c7:50:86:09:70:84:28:13:f3:a7:15:a6:a8:ba:73:
a5:d6:ac:34:2c:c3:80:39:80:21:e7:b9:7c:d5:99:
d0:82:18:db:26:22:88:0e:58:e7:9d:30:7e:ba:37:
75:be:ac:3f:90:05:9e:fb:5d:f1:b6:07:d5:37:db:
36:b8:43:85:57:4f:44:47:21:86:04:49:dd:b1:15:
ca:71:21:9b:23:b1:68:1b:a1:ac:08:3a:e1:92:8a:
48:2b:fe:5a:59:de:d7:3c:1b:18:6a:9c:24:e9:9d:
b8:89:cd:21:b7:7d:95:48:8c:b1:6e:bc:cc:70:a9:
60:76:90:f2:97:b9:76:07:4c:1d:2f:bc:e4:63:5c:
f9:1d:82:1e:f3:a2:7b:1c:69:0b:c3:c2:a8:9f:e1:
92:2e:e2:c1:dc:f4:5a:08:e4:24:cc:f5:fe:54:af:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:AB:6F:AA:24:65:55:00:07:4E:62:8C:CF:B0:14:C8:D0:A9:7A
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ZAOrb6okZVUAB05ijM-wFMjQqXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e101::/32
Signature Algorithm: sha256WithRSAEncryption
48:a6:10:8a:10:0a:60:fa:49:75:25:57:55:8a:47:eb:53:80:
66:a1:65:7b:ca:ad:e1:48:dd:3f:d0:ce:60:86:c4:ed:81:c8:
94:21:82:4e:af:c4:28:57:47:bb:65:d6:5c:a2:8f:b8:43:06:
15:c0:84:8a:15:7d:da:96:0f:b7:b5:9c:8d:2c:1b:1b:5c:67:
e4:70:e0:ec:43:7b:ee:1a:f8:9f:ea:83:48:9d:48:eb:39:76:
c3:67:09:03:a3:cd:5e:3f:dd:11:99:39:b7:34:54:51:c7:1b:
c2:52:f4:31:2e:95:49:4e:8e:aa:00:dc:b3:7b:96:aa:e2:29:
f5:1d:f6:b0:ed:86:2e:34:e2:ff:1b:bb:1a:17:98:f8:33:cc:
9b:59:9c:a4:07:d9:5e:90:35:fa:d3:df:08:16:d0:5e:0e:17:
af:21:81:fc:57:99:3c:e0:25:8e:fb:53:1b:20:f0:24:09:88:
a0:3a:fc:02:3c:c5:31:53:ed:5d:63:7a:c9:99:a2:b6:34:99:
43:43:08:52:b3:89:4b:54:1d:84:fe:cb:51:58:f3:d6:aa:22:
e5:85:da:0e:7a:55:4b:04:90:52:11:19:f5:38:e9:a7:64:6b:
e3:38:40:83:d0:80:fd:2e:a8:58:17:89:94:88:15:99:6f:40:
64:6e:70:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtoy5xWRdKIWpXGGcqdceenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjMxMDI1MjE0NDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDAzYWI2ZmFhMjQ2NTU1MDAwNzRlNjI4Y2NmYjAxNGM4ZDBhOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLPgZQFXlTKk0xJkHmqjhQblj5Nq
kQ4dnDUdQupdgJb4uDD+TVixVsNeRkqIJG5Qg3EYr47Se7h343gv64rUnzmbI7MP
PWyn/kP+Ano8GKjw/kqsXuA2ngjHUIYJcIQoE/OnFaaounOl1qw0LMOAOYAh57l8
1ZnQghjbJiKIDljnnTB+ujd1vqw/kAWe+13xtgfVN9s2uEOFV09ERyGGBEndsRXK
cSGbI7FoG6GsCDrhkopIK/5aWd7XPBsYapwk6Z24ic0ht32VSIyxbrzMcKlgdpDy
l7l2B0wdL7zkY1z5HYIe86J7HGkLw8Kon+GSLuLB3PRaCOQkzPX+VK+ujwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGQDq2+qJGVVAAdOYozPsBTI0Kl6MB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvWkFPcmI2b2taVlVBQjA1aWpNLXdGTWpRcVhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhHhATAN
BgkqhkiG9w0BAQsFAAOCAQEASKYQihAKYPpJdSVXVYpH61OAZqFle8qt4UjdP9DO
YIbE7YHIlCGCTq/EKFdHu2XWXKKPuEMGFcCEihV92pYPt7WcjSwbG1xn5HDg7EN7
7hr4n+qDSJ1I6zl2w2cJA6PNXj/dEZk5tzRUUccbwlL0MS6VSU6OqgDcs3uWquIp
9R32sO2GLjTi/xu7GheY+DPMm1mcpAfZXpA1+tPfCBbQXg4XryGB/FeZPOAljvtT
GyDwJAmIoDr8AjzFMVPtXWN6yZmitjSZQ0MIUrOJS1QdhP7LUVjz1qoi5YXaDnpV
SwSQUhEZ9Tjpp2Rr4zhAg9CA/S6oWBeJlIgVmW9AZG5wnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org