Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/1f966QNN5uOpY0PmBJoSyiKWYTQ.roa
File: 1f966QNN5uOpY0PmBJoSyiKWYTQ.roa (raw, json)
Hash identifier: 9USBAQqIFqH7wioVs35dKKotPEW/UeTGGEriOoLgJHk=
Subject key identifier: D5:FF:7A:E9:03:4D:E6:E3:A9:63:43:E6:04:9A:12:CA:22:96:61:34
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 018AAF0451D022A9CC07E8FA3AD9327A1407
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/1f966QNN5uOpY0PmBJoSyiKWYTQ.roa
Signing time: Tue 19 Sep 2023 19:56:50 +0000
ROA not before: Tue 19 Sep 2023 19:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206564
IP address blocks: 2001:678:5d0::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:04:51:d0:22:a9:cc:07:e8:fa:3a:d9:32:7a:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Sep 19 19:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5ff7ae9034de6e3a96343e6049a12ca22966134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:1c:aa:3a:1c:a7:c4:f5:9a:63:4a:49:32:
69:fb:b9:95:85:20:40:39:46:5d:d2:c3:4e:d4:b4:
6f:76:70:d5:ea:df:24:fb:0c:9a:13:f1:90:97:82:
d7:e0:3a:6c:da:06:de:c8:d7:cf:57:4f:b1:67:03:
a1:10:dd:de:7e:ae:5a:8a:a9:3a:4e:b5:cd:b4:e4:
36:a9:37:28:50:4e:5f:39:65:09:35:a4:5e:b0:7b:
58:0a:f4:26:89:e2:c3:57:a6:1a:2b:43:84:c2:a4:
b6:29:9e:58:04:eb:e1:f4:40:bb:1d:77:fd:b3:3a:
d2:d1:16:de:4d:28:2c:0e:0f:06:88:e4:ae:92:3f:
4d:b1:67:fb:38:cc:31:e2:93:fd:8e:b4:e2:55:ef:
07:53:ca:88:cc:13:46:46:ab:e0:b5:c0:9b:a8:cd:
11:20:9a:cd:a0:2f:91:a2:96:ac:fc:75:5b:34:23:
59:31:59:d4:70:6e:f9:62:7c:d2:14:c2:43:c5:d7:
46:b0:ed:b0:90:a1:1a:1f:7d:92:72:58:80:49:03:
a7:a3:e4:44:6c:7b:4e:ed:a4:7f:ba:1a:2e:88:71:
35:81:f4:8b:6a:4c:35:87:e6:d7:dc:cc:af:f0:9e:
56:6c:55:0f:77:ad:ef:b1:0b:a6:bb:7b:9a:70:6d:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:7A:E9:03:4D:E6:E3:A9:63:43:E6:04:9A:12:CA:22:96:61:34
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/1f966QNN5uOpY0PmBJoSyiKWYTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5d0::/48
Signature Algorithm: sha256WithRSAEncryption
c0:59:21:53:32:46:d5:bb:de:4e:d4:0c:fd:ff:95:f6:91:5b:
11:ad:33:8d:a9:0f:49:1f:58:f5:cf:62:b1:ff:b1:43:e7:c2:
be:23:c9:84:8c:25:b2:c5:5d:03:52:78:3a:16:4c:37:53:ae:
d1:0d:cd:e7:24:00:6b:fa:e5:38:29:d8:88:d1:4e:f6:0d:c7:
2f:93:c6:f5:d2:ac:88:d1:9f:de:f3:af:28:90:d9:fb:f8:75:
7f:be:f3:59:de:7e:26:bc:12:92:c8:fa:22:b7:cf:7e:ad:c8:
2a:5b:64:ba:b4:85:6d:51:b7:c2:1f:44:20:f6:68:82:60:21:
03:3d:91:43:7f:e9:0b:b9:5a:f3:5b:ce:ba:e3:16:d4:65:f4:
ca:d6:7d:1d:30:d8:e5:80:d9:eb:84:28:e3:77:5d:d3:93:59:
e8:43:4e:16:80:5b:94:c7:27:7c:73:2c:6f:29:8f:b0:ea:29:
07:aa:9b:27:88:de:33:7f:67:79:a4:64:ef:21:31:f5:b1:70:
dd:81:25:9d:c8:59:6c:61:92:04:5f:c6:88:31:a9:2e:55:e2:
ea:1c:67:61:c2:6e:5e:b5:60:05:df:7d:53:0b:be:7d:0f:a4:
22:15:1c:7a:bb:d5:df:42:e3:d3:c3:81:79:76:00:2e:46:70:
ec:7a:3b:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYqvBFHQIqnMB+j6OtkyehQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTEyNzQ1M2RmYmExN2UxMGMzNDdmYTM0YmJlYmFiMTQ5
MDVhNTcwHhcNMjMwOTE5MTk1NjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWZmN2FlOTAzNGRlNmUzYTk2MzQzZTYwNDlhMTJjYTIyOTY2MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOUcqjocp8T1mmNKSTJp+7mVhSBA
OUZd0sNO1LRvdnDV6t8k+wyaE/GQl4LX4Dps2gbeyNfPV0+xZwOhEN3efq5aiqk6
TrXNtOQ2qTcoUE5fOWUJNaResHtYCvQmieLDV6YaK0OEwqS2KZ5YBOvh9EC7HXf9
szrS0RbeTSgsDg8GiOSukj9NsWf7OMwx4pP9jrTiVe8HU8qIzBNGRqvgtcCbqM0R
IJrNoC+Ropas/HVbNCNZMVnUcG75YnzSFMJDxddGsO2wkKEaH32ScliASQOno+RE
bHtO7aR/uhouiHE1gfSLakw1h+bX3Myv8J5WbFUPd63vsQumu3uacG1e/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNX/eukDTebjqWND5gSaEsoilmE0MB8GA1UdIwQY
MBaAFFihJ0U9+6F+EMNH+jS766sUkFpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2Yt
ZGE5NjAxOWQ0YzIwLzEvMWY5NjZRTk41dU9wWTBQbUJKb1N5aUtXWVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2YtZGE5NjAxOWQ0YzIw
LzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAXQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDAWSFTMkbVu95O1Az9/5X2kVsRrTONqQ9JH1j1
z2Kx/7FD58K+I8mEjCWyxV0DUng6Fkw3U67RDc3nJABr+uU4KdiI0U72Dccvk8b1
0qyI0Z/e868okNn7+HV/vvNZ3n4mvBKSyPoit89+rcgqW2S6tIVtUbfCH0Qg9miC
YCEDPZFDf+kLuVrzW8664xbUZfTK1n0dMNjlgNnrhCjjd13Tk1noQ04WgFuUxyd8
cyxvKY+w6ikHqpsniN4zf2d5pGTvITH1sXDdgSWdyFlsYZIEX8aIMakuVeLqHGdh
wm5etWAF331TC759D6QiFRx6u9XfQuPTw4F5dgAuRnDseju3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:39 2024 by rpki-client on console-ams.rpki-client.org