Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VffCZlZgrhELJ5-hYYu78f5jakY.roa
File: VffCZlZgrhELJ5-hYYu78f5jakY.roa (raw, json)
Hash identifier: MsZ7Hxw4+XZkD0B6Jp3VbT44LZ4NVDuKb/rC1qEjTGk=
Subject key identifier: 55:F7:C2:66:56:60:AE:11:0B:27:9F:A1:61:8B:BB:F1:FE:63:6A:46
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42CAE1BF3085D9A6DAC45FE502CF3E
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VffCZlZgrhELJ5-hYYu78f5jakY.roa
Signing time: Sun 01 Jan 2023 21:35:26 +0000
ROA not before: Sun 01 Jan 2023 21:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:8f01::/35 maxlen: 48
2a0e:8f01::/48 maxlen: 48
2a0e:8f01:10b::/48 maxlen: 48
2a0e:8f01:104::/48 maxlen: 48
2a0e:8f01:10c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Jan 2023 09:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ca:e1:bf:30:85:d9:a6:da:c4:5f:e5:02:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f7c2665660ae110b279fa1618bbbf1fe636a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:f3:96:3c:fb:67:75:2c:39:10:cc:fe:cc:
ca:ae:d0:b8:c6:a4:e6:0a:db:ae:88:6c:8f:59:a6:
d6:23:5d:4f:08:71:74:db:4e:aa:6d:33:d4:28:a4:
c1:31:39:b3:66:d9:3e:b4:f3:90:5a:01:26:4e:11:
02:03:02:bd:cd:0e:9b:98:ad:ff:c7:1f:bf:b0:e6:
b5:95:fb:69:0e:80:b0:c1:fe:b1:bd:99:aa:1a:89:
0d:d5:1d:4c:05:63:67:96:a7:cb:c5:96:3d:e9:b3:
0f:01:11:61:66:e5:a6:4e:f5:85:d0:f4:d7:24:a2:
91:ff:ea:c2:60:58:43:bd:d6:a5:f3:da:a2:86:0a:
bf:53:ea:12:4e:35:b6:84:3d:76:cb:b6:a7:b0:b1:
03:e0:a4:4f:d0:62:90:bf:65:0e:34:2a:ed:05:1e:
e2:a2:b9:1a:46:35:94:f0:6c:8d:57:b6:84:ba:8a:
b7:61:01:31:0d:ba:ca:1c:6a:e3:0e:3d:32:16:e2:
ee:28:88:16:ac:c9:74:0b:ad:83:fe:ec:7f:3f:cd:
1e:e2:84:89:18:b4:03:64:43:f6:50:33:68:f1:6b:
03:de:7f:90:42:d5:19:ae:24:6e:80:29:42:dc:37:
ca:bf:07:06:6c:d3:d8:c1:c6:67:d0:e8:58:d4:70:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:C2:66:56:60:AE:11:0B:27:9F:A1:61:8B:BB:F1:FE:63:6A:46
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VffCZlZgrhELJ5-hYYu78f5jakY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f01::/35
Signature Algorithm: sha256WithRSAEncryption
5d:c4:d2:91:3f:4f:84:68:5c:07:92:7a:2a:5d:ca:6d:65:51:
a0:84:20:7e:60:ce:87:13:87:61:69:09:52:4b:e4:eb:d7:d6:
b3:9f:20:b6:12:4d:13:8a:ac:6f:cc:be:92:7d:e3:6b:e1:7d:
d2:ef:42:22:e5:e9:1c:5b:ca:bb:60:87:11:7f:8f:23:1e:cf:
02:78:08:95:51:5d:0d:1b:43:2a:ad:d7:2a:de:04:9d:72:2a:
98:ae:bb:57:2b:a6:f5:6f:ce:1d:04:6c:ce:ab:99:da:2a:4b:
0d:9e:4f:6b:7a:75:b8:2d:9b:f2:f9:91:26:d0:81:6b:3c:d1:
a6:a4:4b:ef:9e:ab:96:b2:77:c4:e8:17:93:ab:d3:81:94:66:
44:f5:b9:b2:0e:a1:28:1e:44:1a:23:c3:69:23:34:7b:a9:ff:
d4:6c:74:03:b5:ef:ca:aa:c0:bb:99:17:fe:4b:80:66:54:47:
14:19:c2:81:e6:22:8d:f5:16:fd:ba:f4:26:f5:2c:30:70:ff:
41:d9:b2:d2:b5:b2:db:af:0a:fb:f7:5c:e4:a0:01:fd:50:b3:
f0:16:6f:82:4b:ae:09:4d:11:89:0b:d7:bf:f1:df:31:55:f4:
a2:9f:0a:4c:7b:a2:4e:a6:49:77:29:30:7f:c5:65:f2:65:60:
c8:fa:f1:a6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVvQsrhvzCF2abaxF/lAs8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWY3YzI2NjU2NjBhZTExMGIyNzlmYTE2MThiYmJmMWZlNjM2YTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryzzljz7Z3UsORDM/szKrtC4xqTm
CtuuiGyPWabWI11PCHF0206qbTPUKKTBMTmzZtk+tPOQWgEmThECAwK9zQ6bmK3/
xx+/sOa1lftpDoCwwf6xvZmqGokN1R1MBWNnlqfLxZY96bMPARFhZuWmTvWF0PTX
JKKR/+rCYFhDvdal89qihgq/U+oSTjW2hD12y7ansLED4KRP0GKQv2UONCrtBR7i
orkaRjWU8GyNV7aEuoq3YQExDbrKHGrjDj0yFuLuKIgWrMl0C62D/ux/P80e4oSJ
GLQDZEP2UDNo8WsD3n+QQtUZriRugClC3DfKvwcGbNPYwcZn0OhY1HDouQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFX3wmZWYK4RCyefoWGLu/H+Y2pGMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvVmZmQ1psWmdyaEVMSjUtaFlZdTc4ZjVqYWtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKg6PAQAw
DQYJKoZIhvcNAQELBQADggEBAF3E0pE/T4RoXAeSeipdym1lUaCEIH5gzocTh2Fp
CVJL5OvX1rOfILYSTROKrG/MvpJ942vhfdLvQiLl6RxbyrtghxF/jyMezwJ4CJVR
XQ0bQyqt1yreBJ1yKpiuu1crpvVvzh0EbM6rmdoqSw2eT2t6dbgtm/L5kSbQgWs8
0aakS++eq5ayd8ToF5Or04GUZkT1ubIOoSgeRBojw2kjNHup/9RsdAO178qqwLuZ
F/5LgGZURxQZwoHmIo31Fv269Cb1LDBw/0HZstK1stuvCvv3XOSgAf1Qs/AWb4JL
rglNEYkL17/x3zFV9KKfCkx7ok6mSXcpMH/FZfJlYMj68aY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org