Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/myuMGs6PUompL77V9Frc8aCwqx4.roa
File: myuMGs6PUompL77V9Frc8aCwqx4.roa (raw, json)
Hash identifier: mluaFxNL0kQQ0vomDgby6mj1AR2lOfAM/dRqRdc6Eis=
Subject key identifier: 9B:2B:8C:1A:CE:8F:52:89:A9:2F:BE:D5:F4:5A:DC:F1:A0:B0:AB:1E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D33589429522F7D5D73ECB3DAE0D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/myuMGs6PUompL77V9Frc8aCwqx4.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207778
IP address blocks: 2a0e:8f02:2020::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d3:35:89:42:95:22:f7:d5:d7:3e:cb:3d:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b2b8c1ace8f5289a92fbed5f45adcf1a0b0ab1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:11:f9:c9:46:96:7e:6c:61:b0:c6:bc:8d:
7b:81:76:04:7b:92:11:3f:a2:ba:1b:25:41:bd:9a:
2b:5d:c5:79:1e:e1:04:bc:2d:3d:9e:d5:4c:a8:ff:
a2:db:3a:1a:09:87:ea:af:39:0e:2d:2b:98:9e:8d:
d8:13:1f:5b:ea:5b:ae:9d:3d:7d:71:3f:0c:da:8a:
44:c8:1b:0a:8b:43:e6:23:99:ef:ed:e1:51:0f:2c:
15:35:ab:aa:2a:8f:79:29:32:78:9a:c6:a8:52:ce:
fe:76:66:51:3e:f2:2e:10:d8:91:de:6b:3f:b7:63:
92:e1:92:28:06:eb:49:5f:15:61:9a:31:d0:84:67:
0a:a8:99:69:47:9a:3e:3f:91:c8:3a:9f:8e:02:fa:
2a:9b:19:d2:fc:87:1f:b7:69:64:47:2b:b1:54:0b:
47:8e:99:92:98:b9:ee:5b:c5:3e:de:0d:ec:c4:37:
5c:d4:9b:79:ee:04:12:10:b3:52:13:94:6f:8f:3f:
93:71:0d:69:2b:bf:c8:72:89:77:33:59:52:c0:81:
25:63:a0:fe:1e:04:41:0d:59:53:66:2a:8e:c2:ce:
83:05:fd:f5:f9:47:6c:c2:53:d0:04:85:f1:9e:a6:
f0:42:85:75:87:57:cd:49:dc:b4:97:1a:42:db:d3:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:8C:1A:CE:8F:52:89:A9:2F:BE:D5:F4:5A:DC:F1:A0:B0:AB:1E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/myuMGs6PUompL77V9Frc8aCwqx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2020::/44
Signature Algorithm: sha256WithRSAEncryption
3b:da:bb:a4:48:33:58:e8:98:c2:ef:14:bd:76:37:b2:3e:9c:
81:7a:84:22:97:31:ec:28:d7:0a:b9:d7:25:57:ef:b1:7d:74:
37:6a:e7:60:c3:5e:06:0b:cb:21:7d:80:4c:c0:6d:3b:14:24:
c2:63:53:6d:6f:6a:3a:ef:a2:30:97:d9:b8:d3:0d:e1:d6:2a:
1d:06:52:22:6c:61:ca:bf:28:d6:29:c4:6b:3d:0c:b6:ec:4c:
12:33:10:34:f6:a2:f5:b2:6b:d8:e5:27:0e:b4:cf:34:36:1f:
d0:d6:03:24:56:f2:0f:7d:3d:7d:1b:4e:16:97:d7:f7:21:8f:
83:c7:f8:0b:6a:03:8d:d4:95:8c:df:37:38:bb:21:7a:0c:2a:
60:88:3a:4d:29:0d:5d:8e:46:08:68:27:2c:61:c4:ea:98:50:
11:ec:b1:cb:58:a0:52:b5:74:30:e6:90:4e:4f:e6:61:67:a7:
51:b3:ed:d2:c2:12:ea:76:0c:8a:5e:5f:e7:d4:81:27:8d:d4:
13:34:90:44:1a:a2:eb:ec:0e:12:ac:90:eb:f6:5c:3c:f9:60:
eb:1c:23:a0:37:90:93:01:97:bc:f1:69:d7:2d:dc:ad:8b:f2:
50:3b:1e:f4:a2:e7:28:d0:52:f5:9a:36:20:17:e5:71:79:28:
f5:e8:b2:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQtM1iUKVIvfV1z7LPa4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjJiOGMxYWNlOGY1Mjg5YTkyZmJlZDVmNDVhZGNmMWEwYjBhYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNwR+clGln5sYbDGvI17gXYEe5IR
P6K6GyVBvZorXcV5HuEEvC09ntVMqP+i2zoaCYfqrzkOLSuYno3YEx9b6luunT19
cT8M2opEyBsKi0PmI5nv7eFRDywVNauqKo95KTJ4msaoUs7+dmZRPvIuENiR3ms/
t2OS4ZIoButJXxVhmjHQhGcKqJlpR5o+P5HIOp+OAvoqmxnS/Icft2lkRyuxVAtH
jpmSmLnuW8U+3g3sxDdc1Jt57gQSELNSE5Rvjz+TcQ1pK7/Icol3M1lSwIElY6D+
HgRBDVlTZiqOws6DBf31+UdswlPQBIXxnqbwQoV1h1fNSdy0lxpC29ONFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJsrjBrOj1KJqS++1fRa3PGgsKseMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvbXl1TUdzNlBVb21wTDc3VjlGcmM4YUN3cXg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiAg
MA0GCSqGSIb3DQEBCwUAA4IBAQA72rukSDNY6JjC7xS9djeyPpyBeoQilzHsKNcK
udclV++xfXQ3audgw14GC8shfYBMwG07FCTCY1Ntb2o676Iwl9m40w3h1iodBlIi
bGHKvyjWKcRrPQy27EwSMxA09qL1smvY5ScOtM80Nh/Q1gMkVvIPfT19G04Wl9f3
IY+Dx/gLagON1JWM3zc4uyF6DCpgiDpNKQ1djkYIaCcsYcTqmFAR7LHLWKBStXQw
5pBOT+ZhZ6dRs+3SwhLqdgyKXl/n1IEnjdQTNJBEGqLr7A4SrJDr9lw8+WDrHCOg
N5CTAZe88WnXLdyti/JQOx70ouco0FL1mjYgF+VxeSj16LI/
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:00 2024 by rpki-client on console-ams.rpki-client.org