Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa
File: Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa (raw, json)
Hash identifier: Bs3HTu5kO6E0oEBN0N5Bv+2tFqlsQQVqktUqXafHpZE=
Subject key identifier: 42:6D:59:5D:03:63:F1:04:B9:B1:1A:D8:29:BA:57:10:73:76:AE:2A
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D4B7FC4B74996D1262B1A777BB1A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208223
IP address blocks: 2a0e:8f02:f03d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d4:b7:fc:4b:74:99:6d:12:62:b1:a7:77:bb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=426d595d0363f104b9b11ad829ba57107376ae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:be:2b:99:25:6f:c3:7b:71:ed:5e:b5:35:
d4:1d:34:d7:d0:60:1c:6f:45:c1:45:3f:f9:b7:df:
bf:58:af:2d:f9:95:6f:99:c9:d9:19:f5:db:a9:21:
02:22:ab:5c:82:d8:75:cf:f4:87:96:56:16:95:8f:
01:16:b6:55:19:10:35:9c:83:38:12:34:98:1d:95:
4f:93:7e:7c:0c:1a:82:73:95:79:c7:04:bb:35:d4:
13:1d:78:a2:1b:e7:26:62:fa:c5:2b:d5:29:9f:f6:
64:06:9b:2b:aa:1f:11:e0:9f:f5:81:f7:30:4b:95:
55:15:05:77:55:9d:d3:04:32:05:aa:bb:88:d4:86:
2f:e7:de:3d:4a:4f:42:a2:ca:68:f3:37:08:a3:df:
df:6a:ae:46:ee:b7:f6:54:a0:d1:95:64:ec:c1:34:
51:0a:f8:02:09:db:4c:60:61:0d:07:fe:8a:29:8b:
90:87:73:10:e6:83:c6:e0:42:14:2d:14:20:52:bc:
27:ce:4c:cc:e9:8d:52:33:6f:70:69:b2:be:01:7a:
ce:4c:5d:5e:da:1c:e4:41:01:dc:c7:9b:15:39:8c:
a7:1f:47:48:40:3b:13:69:5c:82:57:bd:32:46:86:
eb:18:e5:1b:a5:d1:44:e6:8d:4a:95:a0:4f:7d:e5:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:59:5D:03:63:F1:04:B9:B1:1A:D8:29:BA:57:10:73:76:AE:2A
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Qm1ZXQNj8QS5sRrYKbpXEHN2rio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03d::/48
Signature Algorithm: sha256WithRSAEncryption
53:e9:6c:ef:ab:ca:95:d2:58:10:2c:b2:cf:13:17:96:2e:0f:
cf:1a:6e:fc:64:49:09:e6:57:e6:06:e2:ce:7c:b1:51:fb:b0:
d4:96:29:27:8e:1a:82:a8:63:15:1c:37:40:d7:b5:73:17:9e:
1e:4e:d8:a2:4f:d3:91:ad:c8:b0:1f:d7:63:a2:a5:fc:c4:a2:
cc:23:78:56:58:ed:f2:89:4f:c4:a3:3d:74:b4:13:fb:e3:1a:
40:dd:63:5b:bb:3a:76:e7:85:98:f3:8d:c3:54:c1:af:9c:77:
47:75:c5:58:48:5b:91:a4:ee:2e:0f:53:4e:ff:ab:48:9d:cc:
b0:cd:74:98:50:97:1d:e5:25:8f:61:67:06:a0:e8:82:ae:51:
01:66:27:19:7d:13:df:02:40:93:d8:72:e5:43:9f:b6:4b:d1:
99:da:db:60:b6:27:1a:ee:a1:7b:29:37:32:e5:45:02:c1:e5:
fb:fe:7c:49:2b:f0:2d:9e:f0:1b:bf:98:64:be:f4:21:44:8d:
34:5e:fb:01:d3:45:df:66:e2:57:56:00:d8:cf:8b:b3:4b:b6:
77:78:d5:eb:27:5e:a9:39:eb:8a:53:ac:7d:69:54:f6:e7:5d:
b0:a4:ff:26:e5:8f:b9:38:0a:4e:9b:a9:60:9a:0c:44:2b:01:
52:b8:a0:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQtS3/Et0mW0SYrGnd7saMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjZkNTk1ZDAzNjNmMTA0YjliMTFhZDgyOWJhNTcxMDczNzZhZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6+K5klb8N7ce1etTXUHTTX0GAc
b0XBRT/5t9+/WK8t+ZVvmcnZGfXbqSECIqtcgth1z/SHllYWlY8BFrZVGRA1nIM4
EjSYHZVPk358DBqCc5V5xwS7NdQTHXiiG+cmYvrFK9Upn/ZkBpsrqh8R4J/1gfcw
S5VVFQV3VZ3TBDIFqruI1IYv5949Sk9Cospo8zcIo9/faq5G7rf2VKDRlWTswTRR
CvgCCdtMYGENB/6KKYuQh3MQ5oPG4EIULRQgUrwnzkzM6Y1SM29wabK+AXrOTF1e
2hzkQQHcx5sVOYynH0dIQDsTaVyCV70yRobrGOUbpdFE5o1KlaBPfeUceQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEJtWV0DY/EEubEa2Cm6VxBzdq4qMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvUW0xWlhRTmo4UVM1c1JyWUticFhFSE4ycmlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvA9
MA0GCSqGSIb3DQEBCwUAA4IBAQBT6Wzvq8qV0lgQLLLPExeWLg/PGm78ZEkJ5lfm
BuLOfLFR+7DUliknjhqCqGMVHDdA17VzF54eTtiiT9ORrciwH9djoqX8xKLMI3hW
WO3yiU/Eoz10tBP74xpA3WNbuzp254WY843DVMGvnHdHdcVYSFuRpO4uD1NO/6tI
ncywzXSYUJcd5SWPYWcGoOiCrlEBZicZfRPfAkCT2HLlQ5+2S9GZ2ttgtica7qF7
KTcy5UUCweX7/nxJK/AtnvAbv5hkvvQhRI00XvsB00XfZuJXVgDYz4uzS7Z3eNXr
J16pOeuKU6x9aVT2512wpP8m5Y+5OApOm6lgmgxEKwFSuKCt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org