Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/TpEv-O1sBjfF60QSd4rQuOa0o0E.roa
File: TpEv-O1sBjfF60QSd4rQuOa0o0E.roa (raw, json)
Hash identifier: Co9rI6Ho6Qfb3BKtr2kh6KPg4/lfRCiLQVZ7CDz43+4=
Subject key identifier: 4E:91:2F:F8:ED:6C:06:37:C5:EB:44:12:77:8A:D0:B8:E6:B4:A3:41
Certificate issuer: /CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Certificate serial: 01856C93887378E31A8C0761F9B7263DBC54
Authority key identifier: D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/TpEv-O1sBjfF60QSd4rQuOa0o0E.roa
Signing time: Sun 01 Jan 2023 09:04:46 +0000
ROA not before: Sun 01 Jan 2023 09:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8365
IP address blocks: 2001:67c:295c::/48 maxlen: 48
2001:67c:2184::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:88:73:78:e3:1a:8c:07:61:f9:b7:26:3d:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb616ccfe0e866b427c0a45ef4181b0981e631
Validity
Not Before: Jan 1 09:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e912ff8ed6c0637c5eb4412778ad0b8e6b4a341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:84:dc:b3:3b:64:e0:13:18:d0:05:c9:a2:
1e:4d:60:2d:61:7b:2b:6d:82:d9:72:4d:97:66:1f:
0e:66:c0:73:ed:d1:b7:56:4f:4b:a8:9e:9a:8b:f2:
28:3f:0e:08:19:46:e6:c6:b4:eb:a5:af:16:63:2d:
91:36:04:26:c9:0b:7e:58:3d:2b:8f:bc:66:57:ad:
8e:b7:7b:c4:c7:65:fd:ca:d4:80:b2:f6:ed:db:0f:
b1:6a:04:9f:72:e4:27:31:77:70:d2:31:9f:88:95:
7b:ef:8a:b9:b9:9d:2e:8b:72:59:f2:3c:ac:a2:ec:
c2:54:86:0e:94:45:9a:60:19:83:2f:66:df:ef:b7:
3e:18:72:c9:17:87:9a:51:66:cb:94:b1:4c:dc:54:
b8:32:24:fa:4e:5d:f8:bc:b1:82:60:86:79:8e:6b:
df:c7:9e:16:50:84:ab:c8:7b:1a:4d:b9:94:dc:04:
a6:b7:88:1e:d6:43:57:8c:7a:50:fe:ae:5e:2d:81:
50:e3:91:10:b3:95:4a:1f:58:4f:45:d7:79:1f:2a:
83:b5:c2:fe:13:ea:08:71:cd:83:69:a9:e9:21:e5:
64:6a:b0:5e:05:78:2e:dc:b8:db:13:13:22:91:93:
87:11:2c:b1:c8:d3:93:19:8b:92:fa:f1:a4:57:2a:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:2F:F8:ED:6C:06:37:C5:EB:44:12:77:8A:D0:B8:E6:B4:A3:41
X509v3 Authority Key Identifier:
keyid:D7:CB:61:6C:CF:E0:E8:66:B4:27:C0:A4:5E:F4:18:1B:09:81:E6:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18thbM_g6Ga0J8CkXvQYGwmB5jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/TpEv-O1sBjfF60QSd4rQuOa0o0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7ce3dc-68db-45bb-8e57-3e6198a512e0/1/18thbM_g6Ga0J8CkXvQYGwmB5jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2184::/48
2001:67c:295c::/48
Signature Algorithm: sha256WithRSAEncryption
3b:a5:99:38:43:d5:9b:bb:00:7d:7e:bb:b7:d4:f7:d6:7d:65:
34:b6:ac:36:55:7c:f5:4a:ca:49:da:22:6f:32:7b:69:d7:a8:
18:37:6c:ec:81:5c:f2:ea:66:45:3f:e2:92:6c:56:79:4a:14:
0d:0e:dc:c9:2b:3a:57:34:96:bb:0a:23:08:b0:d9:17:f5:78:
4b:7f:17:d9:4d:c5:1b:52:f7:36:c7:5c:b3:87:e1:e7:93:1d:
1a:5e:59:2e:0f:99:fd:e4:be:58:c5:2f:f2:2a:75:54:96:03:
7e:e7:c9:a8:de:7f:c1:90:c3:89:0f:f3:a9:62:75:d9:40:75:
05:a3:31:33:52:60:3d:20:ac:6f:99:49:42:16:27:e0:20:29:
dc:8e:a6:4d:b5:f5:89:65:c5:ad:50:49:fa:39:59:e9:62:ec:
1a:a0:d3:c8:06:2e:97:1d:e4:dd:e3:f5:04:41:e1:10:77:cf:
e3:da:de:26:66:1c:88:c9:a4:4f:a0:cf:22:7e:40:1b:5d:3f:
b5:6e:68:f0:c3:10:02:49:33:a0:f7:de:d3:03:11:b7:78:6a:
0a:91:e5:40:ab:c6:82:4e:3e:91:61:0a:3f:b2:75:8a:2e:71:
79:78:fe:04:96:74:30:5a:27:92:a3:5d:a8:ff:a4:b7:36:d3:
74:5a:4a:2e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVsk4hzeOMajAdh+bcmPbxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I2MTZjY2ZlMGU4NjZiNDI3YzBhNDVlZjQxODFiMDk4
MWU2MzEwHhcNMjMwMTAxMDkwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTkxMmZmOGVkNmMwNjM3YzVlYjQ0MTI3NzhhZDBiOGU2YjRhMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowuE3LM7ZOATGNAFyaIeTWAtYXsr
bYLZck2XZh8OZsBz7dG3Vk9LqJ6ai/IoPw4IGUbmxrTrpa8WYy2RNgQmyQt+WD0r
j7xmV62Ot3vEx2X9ytSAsvbt2w+xagSfcuQnMXdw0jGfiJV774q5uZ0ui3JZ8jys
ouzCVIYOlEWaYBmDL2bf77c+GHLJF4eaUWbLlLFM3FS4MiT6Tl34vLGCYIZ5jmvf
x54WUISryHsaTbmU3ASmt4ge1kNXjHpQ/q5eLYFQ45EQs5VKH1hPRdd5HyqDtcL+
E+oIcc2DaanpIeVkarBeBXgu3LjbExMikZOHESyxyNOTGYuS+vGkVyo3xQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE6RL/jtbAY3xetEEneK0LjmtKNBMB8GA1UdIwQY
MBaAFNfLYWzP4OhmtCfApF70GBsJgeYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTct
M2U2MTk4YTUxMmUwLzEvVHBFdi1PMXNCamZGNjBRU2Q0clF1T2EwbzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83Y2UzZGMtNjhkYi00NWJiLThlNTctM2U2MTk4YTUxMmUw
LzEvMTh0aGJNX2c2R2EwSjhDa1h2UVlHd21CNWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfCGE
AwcAIAEGfClcMA0GCSqGSIb3DQEBCwUAA4IBAQA7pZk4Q9WbuwB9fru31PfWfWU0
tqw2VXz1SspJ2iJvMntp16gYN2zsgVzy6mZFP+KSbFZ5ShQNDtzJKzpXNJa7CiMI
sNkX9XhLfxfZTcUbUvc2x1yzh+Hnkx0aXlkuD5n95L5YxS/yKnVUlgN+58mo3n/B
kMOJD/OpYnXZQHUFozEzUmA9IKxvmUlCFifgICncjqZNtfWJZcWtUEn6OVnpYuwa
oNPIBi6XHeTd4/UEQeEQd8/j2t4mZhyIyaRPoM8ifkAbXT+1bmjwwxACSTOg997T
AxG3eGoKkeVAq8aCTj6RYQo/snWKLnF5eP4ElnQwWieSo12o/6S3NtN0Wkou
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:30 2024 by rpki-client on console-ams.rpki-client.org