Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKVRNgBvfx75SsGen6PGvHn-eEQ.roa
File: vKVRNgBvfx75SsGen6PGvHn-eEQ.roa (raw, json)
Hash identifier: 4UUEK8le6qT4oiBEFsOkeoLLj+Kmyln/u0E2btpw8e4=
Subject key identifier: BC:A5:51:36:00:6F:7F:1E:F9:4A:C1:9E:9F:A3:C6:BC:79:FE:78:44
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018C3665DF69BE8AEC0FBE5D4F07354E5980
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKVRNgBvfx75SsGen6PGvHn-eEQ.roa
Signing time: Mon 04 Dec 2023 19:54:55 +0000
ROA not before: Mon 04 Dec 2023 19:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215906
IP address blocks: 2a0c:b641:b60::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:65:df:69:be:8a:ec:0f:be:5d:4f:07:35:4e:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 4 19:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca55136006f7f1ef94ac19e9fa3c6bc79fe7844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:95:5a:81:62:dc:fd:9f:09:58:25:3f:9f:
8b:ea:cb:72:94:e3:e6:c6:0d:13:28:fc:29:de:fc:
e9:45:cf:0a:4f:af:a2:ce:7d:29:d0:10:cd:40:af:
e0:65:88:76:03:15:5e:86:19:d8:c8:91:bb:1c:f5:
e1:f1:da:63:79:7e:68:56:c4:f8:d5:ba:9a:2d:d7:
8c:38:df:c1:13:43:06:65:07:0e:9b:73:83:60:f6:
bf:39:a2:c8:54:09:2a:a4:12:e5:ab:00:f7:41:1a:
82:19:34:e8:b0:6f:a9:ff:01:3f:05:8b:81:32:e5:
49:6d:db:67:f4:16:a6:e7:dd:90:18:59:a8:16:61:
af:99:aa:ac:37:13:6b:32:58:4f:9e:25:bd:ce:7e:
22:63:1d:20:03:97:c4:a7:1e:90:54:85:ee:72:84:
e7:de:bc:08:cc:49:8e:48:30:75:a7:69:7b:41:28:
ff:51:da:ef:68:ea:a3:55:e8:55:f7:de:b1:e8:af:
83:f3:01:d6:39:a3:19:28:f7:d1:92:b3:0d:15:c7:
67:56:be:b1:d6:bf:bf:77:6a:d2:94:d5:bf:8c:43:
7a:a7:42:28:66:3b:70:76:46:d4:07:1b:3a:fd:5f:
e3:5b:12:65:cb:55:5b:5e:83:4c:47:6f:9d:2b:f4:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:51:36:00:6F:7F:1E:F9:4A:C1:9E:9F:A3:C6:BC:79:FE:78:44
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vKVRNgBvfx75SsGen6PGvHn-eEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b60::/44
Signature Algorithm: sha256WithRSAEncryption
93:dd:78:70:a4:94:88:fc:e7:2b:49:76:63:0f:fc:d3:38:37:
08:b6:54:b6:f1:60:d9:12:d3:e4:65:47:19:cb:15:2b:87:71:
ec:db:00:d0:8b:8c:7d:ed:4d:ef:aa:d9:77:d0:e0:51:37:ba:
83:3d:3c:16:21:65:ca:6c:60:d5:37:bc:29:0f:08:33:4f:fb:
b2:7a:92:23:ae:2e:c2:7f:53:97:8c:19:74:7b:19:86:d3:92:
34:5e:6d:dc:20:14:91:3e:5d:40:e8:5b:d0:47:5f:7f:71:03:
4e:bb:17:c5:85:c6:a8:9b:db:1d:58:9e:89:6e:ae:5d:6b:b8:
7f:c7:57:11:8e:7b:dc:ce:4f:a2:5d:5a:cb:b5:c4:2a:25:17:
03:1c:71:23:13:f2:a2:10:36:52:6b:ec:87:1e:0d:76:6c:1d:
c8:3d:34:5e:07:94:b5:ca:4b:60:14:5d:c6:6c:d7:8f:c8:9b:
90:91:22:4b:f3:08:02:24:1f:99:de:72:38:80:8d:e7:33:cf:
f9:ed:62:a8:45:29:5c:c9:74:75:0b:b6:bd:37:41:dd:2f:0a:
69:e7:a5:cd:59:6e:50:ad:d0:08:3f:dc:ac:bb:c8:be:3e:2b:
6a:08:b7:d8:19:2a:07:ac:4b:f1:d2:83:f6:71:34:ac:fd:b3:
a4:25:af:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYw2Zd9pvorsD75dTwc1TlmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMxMjA0MTk1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2E1NTEzNjAwNmY3ZjFlZjk0YWMxOWU5ZmEzYzZiYzc5ZmU3ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8SVWoFi3P2fCVglP5+L6stylOPm
xg0TKPwp3vzpRc8KT6+izn0p0BDNQK/gZYh2AxVehhnYyJG7HPXh8dpjeX5oVsT4
1bqaLdeMON/BE0MGZQcOm3ODYPa/OaLIVAkqpBLlqwD3QRqCGTTosG+p/wE/BYuB
MuVJbdtn9Bam592QGFmoFmGvmaqsNxNrMlhPniW9zn4iYx0gA5fEpx6QVIXucoTn
3rwIzEmOSDB1p2l7QSj/UdrvaOqjVehV996x6K+D8wHWOaMZKPfRkrMNFcdnVr6x
1r+/d2rSlNW/jEN6p0IoZjtwdkbUBxs6/V/jWxJly1VbXoNMR2+dK/R81QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLylUTYAb38e+UrBnp+jxrx5/nhEMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdktWUk5nQnZmeDc1U3NHZW42UEd2SG4tZUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQtg
MA0GCSqGSIb3DQEBCwUAA4IBAQCT3XhwpJSI/OcrSXZjD/zTODcItlS28WDZEtPk
ZUcZyxUrh3Hs2wDQi4x97U3vqtl30OBRN7qDPTwWIWXKbGDVN7wpDwgzT/uyepIj
ri7Cf1OXjBl0exmG05I0Xm3cIBSRPl1A6FvQR19/cQNOuxfFhcaom9sdWJ6Jbq5d
a7h/x1cRjnvczk+iXVrLtcQqJRcDHHEjE/KiEDZSa+yHHg12bB3IPTReB5S1yktg
FF3GbNePyJuQkSJL8wgCJB+Z3nI4gI3nM8/57WKoRSlcyXR1C7a9N0HdLwpp56XN
WW5QrdAIP9ysu8i+PitqCLfYGSoHrEvx0oP2cTSs/bOkJa9O
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org