Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cXfVKi76nAGSw5aqwusQJ_OX1rk.roa
File: cXfVKi76nAGSw5aqwusQJ_OX1rk.roa (raw, json)
Hash identifier: na/irgkdnCcDg0OJy0bGF4iUJuRlTXHD1jfcp3/VqdU=
Subject key identifier: 71:77:D5:2A:2E:FA:9C:01:92:C3:96:AA:C2:EB:10:27:F3:97:D6:B9
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018B87AB5BE2FABBC304FED82B1284E800CF
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cXfVKi76nAGSw5aqwusQJ_OX1rk.roa
Signing time: Tue 31 Oct 2023 21:37:16 +0000
ROA not before: Tue 31 Oct 2023 21:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399486
IP address blocks: 2a10:4646:240::/44 maxlen: 44
2a10:4640::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Dec 2023 16:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:ab:5b:e2:fa:bb:c3:04:fe:d8:2b:12:84:e8:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Oct 31 21:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7177d52a2efa9c0192c396aac2eb1027f397d6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:96:88:e3:00:47:47:78:b2:0f:8f:37:74:
3f:ee:a1:1f:2a:18:b2:c7:60:f8:0e:c0:b1:73:ef:
ba:88:32:bf:44:6a:16:b3:67:fb:07:3f:8f:6d:dc:
f9:9b:33:05:49:22:be:f3:ac:77:36:f0:22:1b:55:
9c:e5:16:b5:68:50:de:74:72:d9:d8:32:bd:42:08:
68:11:1b:ea:59:ee:7b:84:e1:12:f5:66:76:ad:75:
a0:5b:b2:f6:3a:1b:bf:6d:9f:df:58:b5:0f:7c:d2:
ac:ee:48:ff:a0:38:c4:0f:3b:1b:00:a4:08:52:67:
4b:bc:0c:fe:dd:c3:68:7b:8d:62:3f:2c:fa:f6:43:
8d:1b:04:7b:68:23:5d:45:04:12:f0:b8:10:d3:24:
10:32:37:f2:ff:4b:5a:4a:97:f5:6a:54:8d:ad:4c:
0a:be:ab:3b:a9:61:77:2a:33:cb:74:d7:c7:3f:97:
f3:65:bf:11:dc:c4:73:81:e6:04:4a:45:26:15:26:
e0:a8:0e:9f:51:cc:08:14:f9:8c:c7:ad:d9:ca:42:
a5:0b:3e:93:0e:dd:c5:16:d9:96:e0:80:d0:89:28:
c2:c4:0c:53:58:4e:0a:18:8a:1a:26:39:93:be:25:
e5:df:b3:98:55:98:47:47:7f:47:b0:0b:47:28:62:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:D5:2A:2E:FA:9C:01:92:C3:96:AA:C2:EB:10:27:F3:97:D6:B9
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cXfVKi76nAGSw5aqwusQJ_OX1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4640::/29
Signature Algorithm: sha256WithRSAEncryption
d2:44:5c:7e:fd:ba:22:65:24:1f:30:cb:38:0b:71:3e:44:ad:
19:cb:2e:e0:6d:11:e9:f1:2f:4d:8b:27:59:d5:c3:79:ed:ff:
d9:e6:7f:a8:4b:5c:9e:b7:c1:a9:e3:e2:fd:16:13:59:b4:93:
17:22:67:da:ae:3a:bf:7f:61:30:0e:cf:a3:b6:08:37:cf:e8:
61:db:c9:73:e0:c6:5b:95:f9:84:f0:d8:6f:88:37:31:2e:98:
6c:08:47:55:d5:70:12:d1:44:07:c9:59:f5:61:45:1e:59:55:
4c:dc:24:b4:08:ac:5a:d4:cc:1e:09:93:e0:20:8a:73:87:d1:
3b:ec:07:2f:d3:92:0a:16:ec:a2:73:bc:c9:40:dc:0f:c5:89:
03:d5:20:77:a6:2a:5c:2d:8c:70:57:d3:e4:7f:5e:bd:ce:a1:
12:72:a8:f5:f0:53:be:0f:5a:1e:98:8c:be:b1:7d:e4:22:bf:
07:d5:51:a1:14:86:47:dc:e1:fb:ca:df:2b:58:f8:88:e1:0b:
ae:c9:ab:26:07:36:c8:c0:62:81:80:0b:fe:7b:63:58:4a:46:
ab:0c:91:a1:48:f6:75:e8:f4:5a:b1:88:fd:1d:a3:aa:d2:38:
ec:8b:6a:95:c9:bb:3d:a8:56:4d:b5:5a:00:3c:4c:a9:82:b7:
6a:66:2d:f4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYuHq1vi+rvDBP7YKxKE6ADPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjMxMDMxMjEzNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTc3ZDUyYTJlZmE5YzAxOTJjMzk2YWFjMmViMTAyN2YzOTdkNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhSWiOMAR0d4sg+PN3Q/7qEfKhiy
x2D4DsCxc++6iDK/RGoWs2f7Bz+Pbdz5mzMFSSK+86x3NvAiG1Wc5Ra1aFDedHLZ
2DK9QghoERvqWe57hOES9WZ2rXWgW7L2Ohu/bZ/fWLUPfNKs7kj/oDjEDzsbAKQI
UmdLvAz+3cNoe41iPyz69kONGwR7aCNdRQQS8LgQ0yQQMjfy/0taSpf1alSNrUwK
vqs7qWF3KjPLdNfHP5fzZb8R3MRzgeYESkUmFSbgqA6fUcwIFPmMx63ZykKlCz6T
Dt3FFtmW4IDQiSjCxAxTWE4KGIoaJjmTviXl37OYVZhHR39HsAtHKGJotQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHF31Sou+pwBksOWqsLrECfzl9a5MB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvY1hmVktpNzZuQUdTdzVhcXd1c1FKX09YMXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhBGQDAN
BgkqhkiG9w0BAQsFAAOCAQEA0kRcfv26ImUkHzDLOAtxPkStGcsu4G0R6fEvTYsn
WdXDee3/2eZ/qEtcnrfBqePi/RYTWbSTFyJn2q46v39hMA7Po7YIN8/oYdvJc+DG
W5X5hPDYb4g3MS6YbAhHVdVwEtFEB8lZ9WFFHllVTNwktAisWtTMHgmT4CCKc4fR
O+wHL9OSChbsonO8yUDcD8WJA9Ugd6YqXC2McFfT5H9evc6hEnKo9fBTvg9aHpiM
vrF95CK/B9VRoRSGR9zh+8rfK1j4iOELrsmrJgc2yMBigYAL/ntjWEpGqwyRoUj2
dej0WrGI/R2jqtI47Itqlcm7PahWTbVaADxMqYK3amYt9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org