Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZHc-3WSjWyz28RskZMvY7FtvK-o.roa
File: ZHc-3WSjWyz28RskZMvY7FtvK-o.roa (raw, json)
Hash identifier: 5NnjvPiY/5U5a8PLK6eRKax5qN4SZm1JOpZy4nSBnLk=
Subject key identifier: 64:77:3E:DD:64:A3:5B:2C:F6:F1:1B:24:64:CB:D8:EC:5B:6F:2B:EA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E4D6AA49439DB83C9CBB55DBD9E6F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZHc-3WSjWyz28RskZMvY7FtvK-o.roa
Signing time: Mon 02 Jan 2023 06:14:49 +0000
ROA not before: Mon 02 Jan 2023 06:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202297
IP address blocks: 2a0c:b642:1a08::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4d:6a:a4:94:39:db:83:c9:cb:b5:5d:bd:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64773edd64a35b2cf6f11b2464cbd8ec5b6f2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:a5:fc:85:2c:d8:45:b1:a0:2d:f2:51:b6:
2c:61:dd:73:23:c7:ef:5a:cf:5a:1d:04:85:4f:09:
57:29:0b:34:0f:a9:92:58:6f:81:93:97:5d:4d:3b:
e1:0b:40:38:ad:56:ad:13:b7:2d:11:37:d3:d2:67:
71:21:4f:cb:f0:7d:40:ba:4e:47:d8:37:99:a8:fc:
37:23:ce:0c:4e:f4:02:fb:6f:3d:5a:53:40:1b:8f:
f6:8c:55:fd:22:bb:3b:12:a9:8e:d3:c7:90:78:19:
dc:67:d2:cb:31:cc:1b:61:6a:d7:45:04:82:6c:61:
b6:56:a6:12:06:65:d8:8b:33:a8:57:59:5a:03:7d:
ff:5b:61:2f:5a:e7:c5:45:19:fc:1e:df:43:dd:2d:
ea:db:0e:3a:06:61:e0:41:d9:9f:fd:55:41:73:91:
a5:b7:ba:4e:fe:fc:e4:7d:d0:1d:02:18:f8:2f:f3:
6d:bb:d6:a0:37:82:01:ad:39:94:d2:bd:6c:c5:a2:
26:4f:45:0a:c0:bf:4e:61:ff:99:e2:8c:3e:a8:52:
34:5f:15:97:24:50:d6:8f:4a:d8:6a:f1:af:12:e5:
65:a5:8c:9d:b4:91:56:f6:66:7f:0e:90:7a:11:76:
1a:b7:2e:72:68:30:48:04:6a:cf:7d:01:49:33:1b:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:3E:DD:64:A3:5B:2C:F6:F1:1B:24:64:CB:D8:EC:5B:6F:2B:EA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZHc-3WSjWyz28RskZMvY7FtvK-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a08::/48
Signature Algorithm: sha256WithRSAEncryption
16:2f:0c:be:99:7e:87:8f:a4:51:86:c3:af:ef:4f:85:99:2c:
98:55:bb:b6:39:b7:1f:f4:e4:64:d0:ca:0c:9d:05:44:09:a1:
85:99:77:c5:35:43:7e:0c:bf:93:50:b8:1d:74:ae:1f:c5:b2:
66:ea:6b:31:b7:8c:b9:b2:af:6d:da:be:dd:fe:0f:b2:b1:e9:
f8:39:1d:45:ef:b0:10:44:6c:7b:8b:9a:14:1a:3c:9f:cb:59:
00:2d:09:29:35:e3:ff:f1:ad:e7:2c:34:35:bd:71:66:d1:92:
53:84:06:64:c8:25:b3:fe:0f:64:cb:be:6e:42:bf:c8:cb:8e:
44:35:5d:2a:15:45:28:f0:cc:f0:bc:57:f0:56:57:ea:98:3e:
70:27:1d:b1:95:e2:25:70:a9:76:e6:93:b7:e6:68:38:13:45:
13:b3:f2:15:3c:95:73:38:9f:52:d2:4a:b5:77:60:4c:51:74:
de:a8:cb:e7:c6:7f:14:92:da:d7:80:d9:02:4e:8d:4a:cd:0c:
e6:3c:a4:3f:66:60:5a:3a:4f:14:a1:69:ef:a7:cd:df:3c:ab:
a9:dc:72:91:08:c3:1c:c7:d5:c0:26:10:30:8c:b9:06:f2:0c:
d0:93:cd:3d:d0:59:cd:96:ac:d2:b2:d9:93:23:d2:b9:bf:8d:
aa:0e:be:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHk1qpJQ524PJy7VdvZ5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDc3M2VkZDY0YTM1YjJjZjZmMTFiMjQ2NGNiZDhlYzViNmYyYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Ol/IUs2EWxoC3yUbYsYd1zI8fv
Ws9aHQSFTwlXKQs0D6mSWG+Bk5ddTTvhC0A4rVatE7ctETfT0mdxIU/L8H1Auk5H
2DeZqPw3I84MTvQC+289WlNAG4/2jFX9Irs7EqmO08eQeBncZ9LLMcwbYWrXRQSC
bGG2VqYSBmXYizOoV1laA33/W2EvWufFRRn8Ht9D3S3q2w46BmHgQdmf/VVBc5Gl
t7pO/vzkfdAdAhj4L/Ntu9agN4IBrTmU0r1sxaImT0UKwL9OYf+Z4ow+qFI0XxWX
JFDWj0rYavGvEuVlpYydtJFW9mZ/DpB6EXYaty5yaDBIBGrPfQFJMxtnGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGR3Pt1ko1ss9vEbJGTL2OxbbyvqMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvWkhjLTNXU2pXeXoyOFJza1pNdlk3RnR2Sy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoI
MA0GCSqGSIb3DQEBCwUAA4IBAQAWLwy+mX6Hj6RRhsOv70+FmSyYVbu2Obcf9ORk
0MoMnQVECaGFmXfFNUN+DL+TULgddK4fxbJm6msxt4y5sq9t2r7d/g+ysen4OR1F
77AQRGx7i5oUGjyfy1kALQkpNeP/8a3nLDQ1vXFm0ZJThAZkyCWz/g9ky75uQr/I
y45ENV0qFUUo8MzwvFfwVlfqmD5wJx2xleIlcKl25pO35mg4E0UTs/IVPJVzOJ9S
0kq1d2BMUXTeqMvnxn8UktrXgNkCTo1KzQzmPKQ/ZmBaOk8UoWnvp83fPKup3HKR
CMMcx9XAJhAwjLkG8gzQk8090FnNlqzSstmTI9K5v42qDr7y
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org