Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TODvUzpV4PW2cAISYJ7yvl96U50.roa
File: TODvUzpV4PW2cAISYJ7yvl96U50.roa (raw, json)
Hash identifier: X7x1oNozpDFpJ9br+nYTpHyU1XLHFlLH2cQGB6AoEQM=
Subject key identifier: 4C:E0:EF:53:3A:55:E0:F5:B6:70:02:12:60:9E:F2:BE:5F:7A:53:9D
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D552A04908790C5D80535CCB82D7F9
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TODvUzpV4PW2cAISYJ7yvl96U50.roa
Signing time: Mon 02 Jan 2023 04:55:06 +0000
ROA not before: Mon 02 Jan 2023 04:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19318
IP address blocks: 2a0a:b382::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:52:a0:49:08:79:0c:5d:80:53:5c:cb:82:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ce0ef533a55e0f5b6700212609ef2be5f7a539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:9c:c6:eb:07:07:e7:90:e1:56:fb:7c:a5:
75:38:c3:c3:ea:59:b4:b9:04:ea:68:c5:df:b3:d0:
28:e2:b1:20:36:c5:f1:0c:8a:11:1a:e2:ce:cd:0f:
85:cd:7b:70:57:b5:dd:11:44:e6:b2:d1:53:4e:20:
09:0c:57:7b:c6:ab:5e:f4:4e:4e:ab:af:5b:64:ed:
e5:55:30:c4:76:b3:0e:c7:a9:41:59:11:77:0f:24:
98:32:ab:a0:2d:7f:9c:db:50:a9:d4:84:a1:52:5b:
a2:50:c2:74:f6:f0:73:b3:33:67:a3:25:60:73:99:
c3:65:c2:fd:32:e6:19:e3:b4:bf:c1:28:55:e5:bc:
78:8b:54:42:69:06:b4:2e:7a:3e:9b:e8:04:18:a4:
2d:89:39:f6:d4:39:33:4f:22:f5:6a:e4:9d:d5:14:
77:0b:f4:21:dd:63:ab:ff:f4:68:cb:11:6f:4b:99:
47:c9:ee:f4:d9:b7:08:28:08:60:10:0a:a4:2f:fd:
c7:34:f9:4b:07:c0:0e:f1:e6:a2:3a:61:70:59:f5:
e7:15:8b:98:76:c9:79:28:63:02:16:4d:10:b5:6a:
b0:99:8b:dc:f5:b4:8c:53:72:08:9b:c3:d2:eb:ec:
45:f7:d8:94:a4:73:e1:37:8f:f8:46:5f:81:62:23:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:EF:53:3A:55:E0:F5:B6:70:02:12:60:9E:F2:BE:5F:7A:53:9D
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/TODvUzpV4PW2cAISYJ7yvl96U50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:b382::/32
Signature Algorithm: sha256WithRSAEncryption
5f:99:88:7b:91:d4:ba:62:c9:8a:08:12:02:87:55:dd:93:71:
ba:d5:da:a6:16:c6:d1:60:56:bc:04:8c:e8:f4:08:2c:32:9c:
c2:3f:42:84:fa:36:55:1b:44:d7:bd:ec:a8:4a:10:aa:1c:c3:
99:45:3e:4e:74:46:67:c1:0b:04:c9:66:6b:e8:a1:f2:a2:98:
73:a6:52:8e:86:80:cf:f4:97:e6:14:00:5d:96:f3:95:f0:36:
61:4d:73:90:6f:42:58:88:6b:af:a1:10:2a:7e:ab:bd:93:b1:
44:a4:1f:3a:21:8f:3f:14:0a:3a:90:5a:7d:8b:0e:eb:da:dd:
d6:ff:6f:91:07:04:15:d5:dc:0f:d1:c9:0a:8f:6a:5b:d5:77:
9d:33:38:a2:d3:5c:64:9d:be:ea:34:92:78:cf:dd:1d:31:08:
3e:dd:f6:32:12:a1:69:f4:a9:a5:12:cf:0b:6a:0f:ee:63:cf:
30:c3:18:fd:15:52:36:55:c9:eb:41:f1:65:8a:b2:41:53:ba:
9d:c6:c4:32:e7:76:f1:34:02:ce:f4:0f:12:50:dc:a4:59:a8:
c4:e4:fa:d9:b5:f3:2f:17:d0:ab:52:a5:53:09:22:a7:18:4b:
4e:bf:fe:e8:74:b6:a7:e8:73:b7:20:4e:d6:54:c5:6e:a5:bb:
3e:cf:3f:4e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVw1VKgSQh5DF2AU1zLgtf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjMwMTAyMDQ1NTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2UwZWY1MzNhNTVlMGY1YjY3MDAyMTI2MDllZjJiZTVmN2E1MzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxicxusHB+eQ4Vb7fKV1OMPD6lm0
uQTqaMXfs9Ao4rEgNsXxDIoRGuLOzQ+FzXtwV7XdEUTmstFTTiAJDFd7xqte9E5O
q69bZO3lVTDEdrMOx6lBWRF3DySYMqugLX+c21Cp1IShUluiUMJ09vBzszNnoyVg
c5nDZcL9MuYZ47S/wShV5bx4i1RCaQa0Lno+m+gEGKQtiTn21DkzTyL1auSd1RR3
C/Qh3WOr//RoyxFvS5lHye702bcIKAhgEAqkL/3HNPlLB8AO8eaiOmFwWfXnFYuY
dsl5KGMCFk0QtWqwmYvc9bSMU3IIm8PS6+xF99iUpHPhN4/4Rl+BYiPOzQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEzg71M6VeD1tnACEmCe8r5felOdMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvVE9EdlV6cFY0UFcyY0FJU1lKN3l2bDk2VTUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgqzgjAN
BgkqhkiG9w0BAQsFAAOCAQEAX5mIe5HUumLJiggSAodV3ZNxutXaphbG0WBWvASM
6PQILDKcwj9ChPo2VRtE173sqEoQqhzDmUU+TnRGZ8ELBMlma+ih8qKYc6ZSjoaA
z/SX5hQAXZbzlfA2YU1zkG9CWIhrr6EQKn6rvZOxRKQfOiGPPxQKOpBafYsO69rd
1v9vkQcEFdXcD9HJCo9qW9V3nTM4otNcZJ2+6jSSeM/dHTEIPt32MhKhafSppRLP
C2oP7mPPMMMY/RVSNlXJ60HxZYqyQVO6ncbEMud28TQCzvQPElDcpFmoxOT62bXz
LxfQq1KlUwkipxhLTr/+6HS2p+hztyBO1lTFbqW7Ps8/Tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org