Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/lkhKUSY5oj5VIKzyav5uReCgFY4.roa
File: lkhKUSY5oj5VIKzyav5uReCgFY4.roa (raw, json)
Hash identifier: p34aLN1UM2iWSUna+EL6w0utraB4EkVX2YdOc7RIR4w=
Subject key identifier: 96:48:4A:51:26:39:A2:3E:55:20:AC:F2:6A:FE:6E:45:E0:A0:15:8E
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01856FC295DE8A4BC754837FBD5378A85CC6
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/lkhKUSY5oj5VIKzyav5uReCgFY4.roa
Signing time: Sun 01 Jan 2023 23:55:01 +0000
ROA not before: Sun 01 Jan 2023 23:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44394
IP address blocks: 2a03:8600:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:95:de:8a:4b:c7:54:83:7f:bd:53:78:a8:5c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jan 1 23:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96484a512639a23e5520acf26afe6e45e0a0158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:1b:15:12:cd:90:45:6b:e8:19:b3:8f:6d:
01:3f:d5:23:d9:b5:33:0e:a5:fe:55:fc:d6:9c:50:
82:eb:3f:2d:74:cc:87:a4:8d:3f:60:b7:2f:c6:53:
90:1e:e8:fb:df:70:8b:4b:39:b5:62:22:9f:d3:bb:
7e:ce:9a:af:0a:99:ac:98:a5:a7:db:f0:85:92:47:
c2:f7:30:7a:e9:63:c4:3a:28:59:e1:57:33:91:69:
0e:5e:81:b1:5e:46:a8:f2:b5:66:45:af:c0:28:e5:
ce:8b:77:6d:80:4e:c6:36:fc:cd:9c:e6:6f:61:02:
d2:e6:f2:e9:e4:35:ac:b5:f1:8d:99:0b:c2:0b:1b:
88:b4:e5:3b:e8:11:34:3b:44:8d:52:12:22:1e:d6:
0b:87:78:65:15:4f:0d:d1:1d:a4:98:08:62:a7:3b:
d6:28:2e:45:15:a4:1f:03:fe:9b:0a:cc:71:32:00:
94:22:e6:4e:d1:43:87:e8:46:6e:4e:38:cc:c7:6e:
5b:00:db:52:9b:8b:b1:e1:07:c2:39:db:e5:a0:06:
3c:40:c8:f4:d1:0e:6f:5f:14:8e:a2:f1:b3:f6:94:
46:e4:1f:71:35:14:0e:e5:2b:fb:9a:b2:ed:48:d9:
4c:43:f1:68:32:c1:fb:2a:f8:56:db:ff:61:7f:de:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:4A:51:26:39:A2:3E:55:20:AC:F2:6A:FE:6E:45:E0:A0:15:8E
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/lkhKUSY5oj5VIKzyav5uReCgFY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:8600:6::/48
Signature Algorithm: sha256WithRSAEncryption
42:d8:a8:90:49:63:31:9b:a1:3d:49:93:04:a4:6b:23:a5:ee:
be:2d:2e:99:0e:83:4e:bc:4c:f7:6c:d9:40:5c:39:9e:22:99:
00:26:ce:33:75:db:7c:98:a7:c8:dd:78:4c:ad:dc:e1:6c:42:
b6:b4:fb:cc:30:53:c5:b3:f5:cc:6e:48:ef:16:9e:05:f7:54:
44:a3:e9:46:12:d2:71:53:78:1f:c4:da:59:23:9b:79:37:ee:
88:0a:4c:47:00:cb:df:b3:b7:7a:a7:ab:b6:4d:36:36:00:e8:
48:b1:ba:8d:fb:bd:70:65:39:a4:55:5c:23:0d:69:70:4f:3e:
e6:2b:4b:f9:d5:70:17:01:08:11:96:b3:cb:54:fb:03:52:36:
49:9e:bc:d0:fb:e2:52:92:cf:b6:f1:22:cd:db:e8:eb:a8:3f:
ce:50:41:4e:09:e8:27:2b:f7:b0:c0:18:65:28:32:33:4f:b4:
32:ea:70:fa:ca:a2:b8:e5:3f:a8:be:26:49:b7:e3:34:08:a6:
cc:87:08:a0:4e:9a:bc:38:85:0a:85:cf:84:d7:59:be:fb:bd:
4c:ef:b0:ed:1d:ab:8f:c4:ce:3d:fb:a4:23:85:c9:41:81:3b:
13:5d:d2:90:5b:1a:ff:9c:80:ec:bb:f5:3a:0d:4f:50:78:ce:
0f:23:62:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvwpXeikvHVIN/vVN4qFzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz
NGE1MDIwHhcNMjMwMTAxMjM1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQ4NGE1MTI2MzlhMjNlNTUyMGFjZjI2YWZlNmU0NWUwYTAxNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RgbFRLNkEVr6Bmzj20BP9Uj2bUz
DqX+VfzWnFCC6z8tdMyHpI0/YLcvxlOQHuj733CLSzm1YiKf07t+zpqvCpmsmKWn
2/CFkkfC9zB66WPEOihZ4VczkWkOXoGxXkao8rVmRa/AKOXOi3dtgE7GNvzNnOZv
YQLS5vLp5DWstfGNmQvCCxuItOU76BE0O0SNUhIiHtYLh3hlFU8N0R2kmAhipzvW
KC5FFaQfA/6bCsxxMgCUIuZO0UOH6EZuTjjMx25bANtSm4ux4QfCOdvloAY8QMj0
0Q5vXxSOovGz9pRG5B9xNRQO5Sv7mrLtSNlMQ/FoMsH7KvhW2/9hf94yHwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJZISlEmOaI+VSCs8mr+bkXgoBWOMB8GA1UdIwQY
MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct
MGNkNzIzNmIyOWI2LzEvbGtoS1VTWTVvajVWSUt6eWF2NXVSZUNnRlk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2
LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOGAAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQBC2KiQSWMxm6E9SZMEpGsjpe6+LS6ZDoNOvEz3
bNlAXDmeIpkAJs4zddt8mKfI3XhMrdzhbEK2tPvMMFPFs/XMbkjvFp4F91REo+lG
EtJxU3gfxNpZI5t5N+6ICkxHAMvfs7d6p6u2TTY2AOhIsbqN+71wZTmkVVwjDWlw
Tz7mK0v51XAXAQgRlrPLVPsDUjZJnrzQ++JSks+28SLN2+jrqD/OUEFOCegnK/ew
wBhlKDIzT7Qy6nD6yqK45T+oviZJt+M0CKbMhwigTpq8OIUKhc+E11m++71M77Dt
HauPxM49+6QjhclBgTsTXdKQWxr/nIDsu/U6DU9QeM4PI2Ks
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:22 2024 by rpki-client on console-fra.rpki-client.org