Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vsxVsYevcJwoy3zmjheqd_lyJ1o.roa
File: vsxVsYevcJwoy3zmjheqd_lyJ1o.roa (raw, json)
Hash identifier: 1KZg+0p5PCcL++gAVULpzuGQ/UygcbZ/8Y8pELl9rcM=
Subject key identifier: BE:CC:55:B1:87:AF:70:9C:28:CB:7C:E6:8E:17:AA:77:F9:72:27:5A
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E821A248D8AFCDC24DE16EFFB5340
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vsxVsYevcJwoy3zmjheqd_lyJ1o.roa
Signing time: Mon 02 Jan 2023 06:15:02 +0000
ROA not before: Mon 02 Jan 2023 06:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211367
IP address blocks: 2a0c:b641:180::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:82:1a:24:8d:8a:fc:dc:24:de:16:ef:fb:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=becc55b187af709c28cb7ce68e17aa77f972275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:df:91:e9:cf:c1:14:17:4f:fc:7c:1e:58:
25:b7:76:e5:a1:9d:74:57:75:39:70:65:2a:2e:45:
43:ac:79:92:58:47:a0:15:bf:52:cb:7d:bf:4d:d8:
3b:46:6e:01:65:7f:46:46:3d:49:6b:86:98:c9:40:
50:b2:9a:98:36:d2:f8:3a:f2:82:74:6c:f1:8f:a1:
eb:1f:5e:82:f7:08:30:a6:e8:b9:c7:b6:27:da:80:
a0:21:b1:bf:92:e9:0c:f3:be:c7:83:b4:0d:db:24:
4a:97:e5:a3:29:84:38:92:85:5e:7a:e4:14:8d:cd:
1d:99:4b:b7:5e:f7:04:cd:1a:d3:7d:ee:48:7f:fd:
d2:a3:95:bb:1a:c6:16:5c:5d:47:07:61:25:09:43:
0d:09:3f:2f:1e:ad:0a:8e:56:9b:51:78:44:38:a1:
c2:8e:b2:7c:86:be:f1:db:7c:b9:09:42:f3:e7:5d:
af:96:1a:4d:74:fb:0f:2d:8d:e3:b8:8b:a2:17:aa:
57:70:3d:00:e6:10:3c:02:15:4a:55:f7:24:fd:61:
46:af:c9:28:ac:e3:51:e8:48:dd:c2:1f:1b:85:00:
76:26:f5:8b:e9:a7:ce:b7:3e:45:3a:6c:74:fa:21:
c6:69:5b:b8:77:99:14:ee:c9:09:d7:6e:8f:88:b5:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:55:B1:87:AF:70:9C:28:CB:7C:E6:8E:17:AA:77:F9:72:27:5A
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vsxVsYevcJwoy3zmjheqd_lyJ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:180::/44
Signature Algorithm: sha256WithRSAEncryption
29:d8:21:f8:9e:da:f6:98:3f:97:a1:d2:4d:a1:72:56:d6:f6:
73:f1:6d:2c:3c:40:74:47:80:20:c9:03:2f:38:ca:9b:5e:e6:
0b:a8:a2:f2:dc:07:79:60:e9:6c:81:90:16:ab:9a:2a:5c:cc:
5f:a3:96:ca:d6:28:bf:ed:8b:02:0f:80:94:4d:51:5d:99:23:
3e:76:9e:94:f4:75:70:8a:43:bb:42:48:c0:85:48:a6:85:ad:
df:39:0c:f5:84:05:9f:a3:e9:8c:a1:f1:bf:b3:22:66:5e:3f:
bb:40:20:65:89:2f:51:9b:7c:c9:c5:f2:1d:c8:5b:69:19:bc:
10:66:d6:50:71:4b:b5:3d:13:3a:ca:33:16:bd:03:eb:96:43:
cf:63:9a:9e:41:f7:f7:36:84:ac:8d:ae:80:3b:e1:a3:3e:23:
76:4e:9e:94:87:bd:3e:d5:1f:14:fe:a4:e6:06:19:d1:3e:89:
75:44:f2:45:db:f9:89:78:a2:ff:71:ec:d4:4a:f7:b9:90:c5:
ee:1a:a6:54:12:4c:af:e8:d9:30:af:36:22:70:7d:c4:cc:d6:
c6:d9:52:34:fa:3e:ba:0e:3e:cb:95:55:09:5d:fe:e2:e3:28:
42:de:88:25:53:28:0b:2e:e9:4d:8f:ad:03:41:72:57:7e:91:
a9:21:7a:dc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHoIaJI2K/Nwk3hbv+1NAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWNjNTViMTg3YWY3MDljMjhjYjdjZTY4ZTE3YWE3N2Y5NzIyNzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1XfkenPwRQXT/x8Hlglt3bloZ10
V3U5cGUqLkVDrHmSWEegFb9Sy32/Tdg7Rm4BZX9GRj1Ja4aYyUBQspqYNtL4OvKC
dGzxj6HrH16C9wgwpui5x7Yn2oCgIbG/kukM877Hg7QN2yRKl+WjKYQ4koVeeuQU
jc0dmUu3XvcEzRrTfe5If/3So5W7GsYWXF1HB2ElCUMNCT8vHq0KjlabUXhEOKHC
jrJ8hr7x23y5CULz512vlhpNdPsPLY3juIuiF6pXcD0A5hA8AhVKVfck/WFGr8ko
rONR6Ejdwh8bhQB2JvWL6afOtz5FOmx0+iHGaVu4d5kU7skJ126PiLVWGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL7MVbGHr3CcKMt85o4Xqnf5cidaMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdnN4VnNZZXZjSndveTN6bWpoZXFkX2x5SjFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGA
MA0GCSqGSIb3DQEBCwUAA4IBAQAp2CH4ntr2mD+XodJNoXJW1vZz8W0sPEB0R4Ag
yQMvOMqbXuYLqKLy3Ad5YOlsgZAWq5oqXMxfo5bK1ii/7YsCD4CUTVFdmSM+dp6U
9HVwikO7QkjAhUimha3fOQz1hAWfo+mMofG/syJmXj+7QCBliS9Rm3zJxfIdyFtp
GbwQZtZQcUu1PRM6yjMWvQPrlkPPY5qeQff3NoSsja6AO+GjPiN2Tp6Uh70+1R8U
/qTmBhnRPol1RPJF2/mJeKL/cezUSve5kMXuGqZUEkyv6NkwrzYicH3EzNbG2VI0
+j66Dj7LlVUJXf7i4yhC3oglUygLLulNj60DQXJXfpGpIXrc
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:02 2024 by rpki-client on console-ams.rpki-client.org