Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Vz9ScPm0kGrCQPolIPS6CL1pLyU.roa
File: Vz9ScPm0kGrCQPolIPS6CL1pLyU.roa (raw, json)
Hash identifier: k62+4bMy+G8bDFw3V4VWOzOLxPhZn5op0ns8QeEMTyM=
Subject key identifier: 57:3F:52:70:F9:B4:90:6A:C2:40:FA:25:20:F4:BA:08:BD:69:2F:25
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42EE4B8CB2C0B74BF59B06399539F7
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Vz9ScPm0kGrCQPolIPS6CL1pLyU.roa
Signing time: Sun 01 Jan 2023 21:35:35 +0000
ROA not before: Sun 01 Jan 2023 21:35:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212666
IP address blocks: 2a0e:8f02:f009::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:ee:4b:8c:b2:c0:b7:4b:f5:9b:06:39:95:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573f5270f9b4906ac240fa2520f4ba08bd692f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:0f:98:ac:2f:94:66:e8:f9:90:72:a1:be:
b5:7c:74:8c:c5:69:c0:65:2f:8e:e4:fe:ae:7b:cc:
b3:5b:fe:fd:d2:40:4c:a8:5a:ab:dc:6f:7a:bc:1a:
70:60:52:d3:77:ef:5a:80:e0:8f:d2:93:bf:ae:23:
8e:f4:ea:ae:5d:16:ff:29:e6:47:2d:a2:11:52:eb:
f3:61:4c:68:51:b6:39:d1:32:4c:ba:4e:77:e2:c6:
fc:50:bb:9a:c5:2a:09:66:c9:bd:b2:e7:d7:41:bd:
54:8e:87:d1:75:48:4f:f9:6b:52:11:2c:bb:64:62:
84:61:37:3b:69:a1:f0:21:cc:98:2e:78:10:d8:6a:
d2:c3:77:61:da:7c:b6:60:f1:3b:bb:fc:bf:57:3a:
4c:76:b6:7d:b2:95:e0:20:b3:f8:14:6b:3a:86:bd:
2d:a3:fb:3a:8a:a3:3c:30:44:d1:82:aa:13:fa:9b:
64:ae:18:27:6d:c0:c3:5d:99:e4:be:4f:e4:0d:25:
87:7a:ae:31:b0:b4:b6:3f:5c:35:ae:c4:12:fe:a3:
57:fb:d9:40:f0:28:8c:49:0a:f2:37:09:9f:17:aa:
93:e7:95:bc:16:de:83:44:bd:19:bc:d1:cb:06:29:
16:44:b9:da:af:3c:d1:d4:3c:70:ba:20:28:b8:6a:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:52:70:F9:B4:90:6A:C2:40:FA:25:20:F4:BA:08:BD:69:2F:25
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Vz9ScPm0kGrCQPolIPS6CL1pLyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f009::/48
Signature Algorithm: sha256WithRSAEncryption
51:f9:91:c4:be:02:6b:49:3d:46:fa:aa:a0:6e:0a:1a:b3:ed:
cd:a9:8a:c1:a6:df:09:78:4c:05:ed:36:65:5f:a5:58:5d:6a:
66:23:07:f1:bc:3f:5b:ae:90:65:a8:e8:dd:ec:e1:b6:c3:ea:
88:16:ff:66:2b:c8:76:67:9c:e9:b3:68:b7:e0:b1:c1:87:bb:
ae:a6:96:2c:b9:6e:84:e3:d5:6f:08:32:d8:18:c9:6b:5b:3a:
46:ba:eb:dc:32:d7:13:b4:15:b2:38:80:e3:4a:72:3d:56:67:
e4:f6:ee:7e:10:6e:15:bf:cd:88:1d:88:c4:88:7a:72:13:d5:
a6:d9:27:0c:9e:77:f5:f6:b5:91:58:ad:8e:0e:a7:20:3a:e7:
54:f4:f5:7d:f8:32:e4:49:f4:b6:93:8e:f2:e4:9c:04:a6:ca:
ca:83:74:72:d9:da:ff:30:35:b0:9c:9c:08:59:17:41:a2:a4:
09:25:5e:40:7d:ee:b1:f8:00:9e:45:aa:fc:46:98:3c:7e:51:
ed:d6:91:03:73:6e:89:e4:12:71:f7:ac:c1:64:3b:f6:37:e8:
44:04:f7:cc:63:cd:5c:a0:66:b5:12:e1:35:6d:36:05:95:db:
d7:29:49:6d:1f:e4:2e:18:56:2c:ff:ce:97:1b:fe:ee:5d:bc:
c8:13:a8:29
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQu5LjLLAt0v1mwY5lTn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzNmNTI3MGY5YjQ5MDZhYzI0MGZhMjUyMGY0YmEwOGJkNjkyZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+0PmKwvlGbo+ZByob61fHSMxWnA
ZS+O5P6ue8yzW/790kBMqFqr3G96vBpwYFLTd+9agOCP0pO/riOO9OquXRb/KeZH
LaIRUuvzYUxoUbY50TJMuk534sb8ULuaxSoJZsm9sufXQb1UjofRdUhP+WtSESy7
ZGKEYTc7aaHwIcyYLngQ2GrSw3dh2ny2YPE7u/y/VzpMdrZ9spXgILP4FGs6hr0t
o/s6iqM8METRgqoT+ptkrhgnbcDDXZnkvk/kDSWHeq4xsLS2P1w1rsQS/qNX+9lA
8CiMSQryNwmfF6qT55W8Ft6DRL0ZvNHLBikWRLnarzzR1DxwuiAouGqHLwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFc/UnD5tJBqwkD6JSD0ugi9aS8lMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvVno5U2NQbTBrR3JDUVBvbElQUzZDTDFwTHlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBR+ZHEvgJrST1G+qqgbgoas+3NqYrBpt8JeEwF
7TZlX6VYXWpmIwfxvD9brpBlqOjd7OG2w+qIFv9mK8h2Z5zps2i34LHBh7uuppYs
uW6E49VvCDLYGMlrWzpGuuvcMtcTtBWyOIDjSnI9Vmfk9u5+EG4Vv82IHYjEiHpy
E9Wm2ScMnnf19rWRWK2ODqcgOudU9PV9+DLkSfS2k47y5JwEpsrKg3Ry2dr/MDWw
nJwIWRdBoqQJJV5Afe6x+ACeRar8Rpg8flHt1pEDc26J5BJx96zBZDv2N+hEBPfM
Y81coGa1EuE1bTYFldvXKUltH+QuGFYs/86XG/7uXbzIE6gp
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org