Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/p-5ckJsV1Tf82CbpsIN2cOgXRHk.roa
File: p-5ckJsV1Tf82CbpsIN2cOgXRHk.roa (raw, json)
Hash identifier: RNcOnEyTLaoudcW529OYlE5/SmZL1AGHiOfX+9qWDuI=
Subject key identifier: A7:EE:5C:90:9B:15:D5:37:FC:D8:26:E9:B0:83:76:70:E8:17:44:79
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42CD75FD10A01D04CD66D8F9A69105
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/p-5ckJsV1Tf82CbpsIN2cOgXRHk.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201733
IP address blocks: 2a0e:8f02:f051::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cd:75:fd:10:a0:1d:04:cd:66:d8:f9:a6:91:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ee5c909b15d537fcd826e9b0837670e8174479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ac:6e:74:80:7d:64:f7:ab:2a:98:e4:b1:88:
3c:fe:b5:30:f8:01:8a:cc:90:3a:53:cb:4a:f9:69:
9a:90:af:ae:5b:00:61:0d:7a:06:80:04:82:16:5e:
8a:2a:b2:a9:d9:a2:3c:24:9e:34:be:e5:8a:59:f6:
f5:4e:d6:53:2b:92:0e:41:f8:cb:67:03:3b:d1:ea:
03:2c:f4:03:74:21:ec:e7:ca:3a:2c:b9:7c:1f:6f:
49:fc:3f:f7:2c:5a:d9:19:23:8b:ca:48:9b:84:6d:
44:eb:02:53:d5:9c:8c:ff:ec:31:82:49:ca:61:30:
8f:0d:a1:74:d0:fe:91:18:33:40:a7:60:e0:d4:d9:
6c:72:76:fc:3e:9f:cb:4b:07:9d:cb:d9:d7:9c:f9:
7f:d1:06:11:0f:5c:ba:14:c1:16:f4:f2:21:56:f6:
3e:96:fe:31:b2:f8:3d:91:99:5a:61:0e:60:34:4c:
60:94:7e:92:63:93:15:82:b8:82:9c:4b:cc:9f:4f:
d1:fd:87:c7:4c:6a:1e:a8:ed:90:94:1a:df:99:32:
eb:fb:36:b5:bd:3c:bc:72:22:34:3a:05:0a:59:93:
c1:fc:eb:d0:b0:e6:f5:ff:df:66:ea:0d:a6:a6:9c:
56:20:d0:5b:d8:b7:56:36:ce:94:84:a7:0f:2b:1c:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:5C:90:9B:15:D5:37:FC:D8:26:E9:B0:83:76:70:E8:17:44:79
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/p-5ckJsV1Tf82CbpsIN2cOgXRHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f051::/48
Signature Algorithm: sha256WithRSAEncryption
46:96:3d:6f:6c:83:b2:02:ab:e8:c0:29:fe:fc:5a:5e:44:4c:
4a:ad:96:3a:f0:87:45:86:90:e8:0c:fd:15:dd:94:9d:91:c1:
17:1e:53:3a:ee:07:14:dc:ed:18:89:ca:0b:a9:4d:39:2f:05:
56:e0:1b:d6:65:75:d7:f3:e4:09:68:e2:38:86:f9:a3:e2:ac:
4f:06:ef:b4:73:2c:23:60:83:84:51:3b:68:ec:70:dc:43:dc:
f0:ff:dc:ec:a5:3c:75:b1:17:33:67:63:fc:65:9d:9b:c9:cf:
fc:97:96:f9:5f:c0:0b:3f:20:de:62:29:23:dd:00:43:84:9d:
c7:9f:75:44:97:e8:ba:ba:e3:1f:d5:3e:d9:61:a0:39:35:72:
d0:07:77:9f:be:c5:0d:73:f5:12:89:52:1c:16:07:0a:4d:d9:
da:99:d4:9e:92:d0:c8:80:25:c3:5f:a6:d6:32:b5:ce:a9:cb:
72:de:7e:6b:26:32:d5:45:f9:21:e0:cc:a9:dc:14:63:4f:1d:
43:af:83:61:10:09:60:9a:56:20:d0:8e:79:c2:31:7e:f9:b9:
87:8c:be:2e:13:86:e9:bf:90:c9:a6:4a:bc:e7:e1:3a:f6:81:
ed:b8:ae:5c:a5:b8:2d:09:fe:39:8a:a3:27:06:df:5d:f5:4e:
95:e3:fc:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQs11/RCgHQTNZtj5ppEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2VlNWM5MDliMTVkNTM3ZmNkODI2ZTliMDgzNzY3MGU4MTc0NDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKxudIB9ZPerKpjksYg8/rUw+AGK
zJA6U8tK+WmakK+uWwBhDXoGgASCFl6KKrKp2aI8JJ40vuWKWfb1TtZTK5IOQfjL
ZwM70eoDLPQDdCHs58o6LLl8H29J/D/3LFrZGSOLykibhG1E6wJT1ZyM/+wxgknK
YTCPDaF00P6RGDNAp2Dg1Nlscnb8Pp/LSwedy9nXnPl/0QYRD1y6FMEW9PIhVvY+
lv4xsvg9kZlaYQ5gNExglH6SY5MVgriCnEvMn0/R/YfHTGoeqO2QlBrfmTLr+za1
vTy8ciI0OgUKWZPB/OvQsOb1/99m6g2mppxWINBb2LdWNs6UhKcPKxzSwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKfuXJCbFdU3/Ngm6bCDdnDoF0R5MB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvcC01Y2tKc1YxVGY4MkNicHNJTjJjT2dYUkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBR
MA0GCSqGSIb3DQEBCwUAA4IBAQBGlj1vbIOyAqvowCn+/FpeRExKrZY68IdFhpDo
DP0V3ZSdkcEXHlM67gcU3O0YicoLqU05LwVW4BvWZXXX8+QJaOI4hvmj4qxPBu+0
cywjYIOEUTto7HDcQ9zw/9zspTx1sRczZ2P8ZZ2byc/8l5b5X8ALPyDeYikj3QBD
hJ3Hn3VEl+i6uuMf1T7ZYaA5NXLQB3efvsUNc/USiVIcFgcKTdnamdSektDIgCXD
X6bWMrXOqcty3n5rJjLVRfkh4Myp3BRjTx1Dr4NhEAlgmlYg0I55wjF++bmHjL4u
E4bpv5DJpkq85+E69oHtuK5cpbgtCf45iqMnBt9d9U6V4/yI
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:52 2024 by rpki-client on console-fra.rpki-client.org