Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AGK-iAUmFjL8KexM6Xn_NOGr_Gk.roa
File: AGK-iAUmFjL8KexM6Xn_NOGr_Gk.roa (raw, json)
Hash identifier: ZlhuRwNMX/9KHjjurck6Tf5sw+uydv8Q/frxngQ4ME4=
Subject key identifier: 00:62:BE:88:05:26:16:32:FC:29:EC:4C:E9:79:FF:34:E1:AB:FC:69
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018606D5003D42183883C059C1AFCBD4E922
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AGK-iAUmFjL8KexM6Xn_NOGr_Gk.roa
Signing time: Tue 31 Jan 2023 07:57:47 +0000
ROA not before: Tue 31 Jan 2023 07:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:8f02:f057::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:d5:00:3d:42:18:38:83:c0:59:c1:af:cb:d4:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 31 07:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0062be8805261632fc29ec4ce979ff34e1abfc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:3f:d0:d3:6d:5a:cf:5e:7f:44:6d:d5:ca:
88:e4:a1:3a:5e:a6:76:dd:aa:6e:40:50:8f:a4:f4:
78:f1:9c:84:da:ac:f5:91:d4:0d:d0:db:02:f9:35:
4c:32:b1:74:28:08:e1:5c:f0:10:ea:a3:29:e4:2d:
a8:7e:cc:5f:42:d0:64:1a:b2:f3:f5:bb:ab:45:a5:
db:ef:80:6a:2c:e9:a5:a7:e2:fa:db:c3:55:f8:3c:
65:5d:fb:77:c1:e8:f8:b7:11:3b:ec:76:9b:2e:61:
40:18:25:7f:48:32:8e:67:fd:61:83:46:9d:71:51:
d2:91:44:22:df:fd:37:ae:ab:30:e4:99:83:41:11:
84:63:b9:29:d8:9b:d6:7f:68:48:53:7a:21:d6:33:
01:f6:c3:e9:67:bb:d2:24:88:2c:24:6f:d3:2c:c2:
de:ab:55:29:d0:c1:5b:b0:b6:69:97:75:11:b2:7e:
b6:d4:16:ac:45:9e:88:4c:d4:78:f4:3b:40:5e:9f:
25:67:0d:63:c8:9c:81:2f:86:6e:e5:f5:42:c4:87:
17:21:75:a9:5b:7e:f2:a7:4a:5f:3f:d5:4f:d4:c9:
78:ec:74:4f:ea:52:ed:8b:fb:bd:2d:30:80:a4:41:
67:3d:d0:be:bc:76:fb:41:9b:48:2f:68:1b:fd:fa:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:BE:88:05:26:16:32:FC:29:EC:4C:E9:79:FF:34:E1:AB:FC:69
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/AGK-iAUmFjL8KexM6Xn_NOGr_Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f057::/48
Signature Algorithm: sha256WithRSAEncryption
06:ed:4b:64:64:f7:fc:e1:86:90:4e:7e:0b:5e:7d:7b:13:f1:
d2:5c:1b:49:fe:92:c8:22:65:5c:1e:6e:3b:76:dc:4c:aa:11:
41:f0:26:65:84:1e:89:76:3f:45:c5:ef:06:93:30:06:7e:0d:
23:0d:fe:07:b2:79:de:15:50:36:49:b6:77:02:82:f5:89:66:
b7:42:8e:35:7a:b7:62:e8:b0:0a:05:b1:af:5f:2d:4e:b8:ca:
fb:6c:52:2e:05:a8:f1:f6:ea:13:f9:f8:5b:b9:d7:77:93:29:
cf:11:39:47:3a:88:d3:22:cd:9d:3d:3c:9e:a7:c7:2e:7e:8b:
38:da:fd:8f:28:55:df:bd:a2:f6:88:21:d7:1c:6d:8a:d7:ba:
41:ef:0c:66:d0:89:6c:a1:85:3e:4e:dd:1b:8b:aa:c7:fb:97:
d1:f7:29:71:96:78:d2:23:9f:24:d0:7a:36:7e:5d:bd:08:f3:
58:f3:2d:d0:f0:8c:e1:fa:ae:4a:2e:68:1c:66:cf:6a:4c:e7:
be:66:2c:1d:aa:21:2d:f8:05:15:99:05:91:62:51:0f:62:4d:
f5:7d:1f:11:8f:9a:dc:fe:41:66:ff:22:ad:0f:b9:be:9d:53:
92:a1:ef:52:10:1d:88:24:72:c3:df:9c:5a:55:4d:d5:66:42:
cb:27:8c:73
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYG1QA9Qhg4g8BZwa/L1OkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTMxMDc1NzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDYyYmU4ODA1MjYxNjMyZmMyOWVjNGNlOTc5ZmYzNGUxYWJmYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmc/0NNtWs9ef0Rt1cqI5KE6XqZ2
3apuQFCPpPR48ZyE2qz1kdQN0NsC+TVMMrF0KAjhXPAQ6qMp5C2ofsxfQtBkGrLz
9burRaXb74BqLOmlp+L628NV+DxlXft3wej4txE77HabLmFAGCV/SDKOZ/1hg0ad
cVHSkUQi3/03rqsw5JmDQRGEY7kp2JvWf2hIU3oh1jMB9sPpZ7vSJIgsJG/TLMLe
q1Up0MFbsLZpl3URsn621BasRZ6ITNR49DtAXp8lZw1jyJyBL4Zu5fVCxIcXIXWp
W37yp0pfP9VP1Ml47HRP6lLti/u9LTCApEFnPdC+vHb7QZtIL2gb/foCMQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFABivogFJhYy/CnsTOl5/zThq/xpMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvQUdLLWlBVW1Gakw4S2V4TTZYbl9OT0dyX0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBX
MA0GCSqGSIb3DQEBCwUAA4IBAQAG7UtkZPf84YaQTn4LXn17E/HSXBtJ/pLIImVc
Hm47dtxMqhFB8CZlhB6Jdj9Fxe8GkzAGfg0jDf4HsnneFVA2SbZ3AoL1iWa3Qo41
erdi6LAKBbGvXy1OuMr7bFIuBajx9uoT+fhbudd3kynPETlHOojTIs2dPTyep8cu
fos42v2PKFXfvaL2iCHXHG2K17pB7wxm0IlsoYU+Tt0bi6rH+5fR9ylxlnjSI58k
0Ho2fl29CPNY8y3Q8Izh+q5KLmgcZs9qTOe+ZiwdqiEt+AUVmQWRYlEPYk31fR8R
j5rc/kFm/yKtD7m+nVOSoe9SEB2IJHLD35xaVU3VZkLLJ4xz
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org