Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa
File: VoXytln2yi8hQymhxbisJywbuMc.roa (raw, json)
Hash identifier: ucSaj/3kEizragt3PlaWmBggPsK2hwdoS57Z+F/PkrI=
Subject key identifier: 56:85:F2:B6:59:F6:CA:2F:21:43:29:A1:C5:B8:AC:27:2C:1B:B8:C7
Certificate issuer: /CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Certificate serial: 01856F8251B583F135FC13F4984191158C22
Authority key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa
Signing time: Sun 01 Jan 2023 22:44:49 +0000
ROA not before: Sun 01 Jan 2023 22:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24956
IP address blocks: 2001:67c:1978::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:51:b5:83:f1:35:fc:13:f4:98:41:91:15:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Validity
Not Before: Jan 1 22:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5685f2b659f6ca2f214329a1c5b8ac272c1bb8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:a7:7e:13:ea:fa:5b:f9:15:d5:81:51:6d:
96:c5:c6:8c:fa:72:78:f2:b2:a3:8a:e7:90:55:25:
97:c0:f5:b2:4d:a8:8d:d0:16:3d:08:f3:9f:19:29:
93:65:a4:70:14:08:27:34:df:b8:4e:52:f9:bb:19:
b0:33:65:da:e7:54:dc:65:a8:ce:7e:c9:36:60:74:
85:2a:78:e5:aa:ad:2f:85:ce:44:e3:21:64:16:51:
e7:91:3a:9d:54:7d:6c:de:67:b4:6a:af:de:5e:7d:
1d:7e:10:9b:3f:a4:fe:9d:e6:28:5a:34:c4:c3:9e:
47:b2:e8:29:f5:22:ef:92:fd:24:2b:84:04:fe:2c:
ef:63:5b:f2:36:df:cf:65:56:5b:fb:02:5c:82:d2:
b4:57:04:5b:d5:4c:38:ec:09:d0:55:a0:8b:6b:3f:
45:9b:1a:4a:09:31:77:62:e1:26:b3:f6:fb:05:a5:
50:c1:b5:ef:45:5b:54:04:09:44:3e:ea:d2:88:7c:
16:2d:45:7e:70:0a:29:aa:2a:72:a9:e1:28:fb:df:
c9:1f:39:18:04:08:fb:4c:db:15:d9:cb:d1:b3:f5:
26:f8:0a:11:d7:e6:a9:9d:10:f5:07:36:88:1a:06:
76:cd:7e:b6:da:14:af:c7:70:62:f1:26:95:9d:51:
f4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:F2:B6:59:F6:CA:2F:21:43:29:A1:C5:B8:AC:27:2C:1B:B8:C7
X509v3 Authority Key Identifier:
keyid:57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/VoXytln2yi8hQymhxbisJywbuMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1978::/48
Signature Algorithm: sha256WithRSAEncryption
0d:26:7d:45:34:87:01:34:e8:fd:f8:29:d2:09:be:13:76:25:
4a:bd:18:5f:fe:92:8f:fe:72:29:d8:16:07:50:73:8b:14:6d:
f7:fa:f1:cb:4a:0e:01:8a:d6:1a:bb:82:9d:e7:bf:3c:99:d8:
ef:a6:d2:09:3f:2e:2d:5d:be:73:4a:d0:b4:7f:f8:8b:42:16:
30:58:53:b6:67:20:db:37:e2:b5:58:c4:36:65:87:bb:34:94:
36:4c:92:55:f2:19:a5:41:10:e5:30:0f:33:b6:76:cc:36:f8:
6a:b0:62:6a:da:6b:32:21:11:3c:1b:29:74:4e:28:fb:4f:24:
34:fa:a0:97:88:fc:e9:de:cd:a2:ec:bf:a2:9f:24:6f:63:5c:
51:1b:42:38:8c:6b:d4:de:06:12:45:72:f2:3b:55:49:eb:f6:
f9:8b:f4:c0:87:85:2e:54:8b:2e:23:e4:33:d2:6f:e1:40:27:
5c:c1:23:5c:cc:b7:8b:a4:51:48:68:82:f2:8c:77:b8:17:65:
bb:dd:4c:11:a0:95:b3:f7:84:f7:bd:19:10:67:92:6a:7d:1c:
71:97:93:03:13:4d:9c:e8:08:9f:7e:ac:44:73:8d:b9:7b:46:
e2:72:d2:31:4f:79:6a:35:d2:d5:6f:92:1d:65:eb:e3:e4:1c:
de:c0:be:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvglG1g/E1/BP0mEGRFYwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Mjk2MjZmYTkxMzEzZDU2ZTRkNzY0NTU3MmZmNTgwNjFm
ZDRmOGMwHhcNMjMwMTAxMjI0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg1ZjJiNjU5ZjZjYTJmMjE0MzI5YTFjNWI4YWMyNzJjMWJiOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusunfhPq+lv5FdWBUW2WxcaM+nJ4
8rKjiueQVSWXwPWyTaiN0BY9CPOfGSmTZaRwFAgnNN+4TlL5uxmwM2Xa51TcZajO
fsk2YHSFKnjlqq0vhc5E4yFkFlHnkTqdVH1s3me0aq/eXn0dfhCbP6T+neYoWjTE
w55Hsugp9SLvkv0kK4QE/izvY1vyNt/PZVZb+wJcgtK0VwRb1Uw47AnQVaCLaz9F
mxpKCTF3YuEms/b7BaVQwbXvRVtUBAlEPurSiHwWLUV+cAopqipyqeEo+9/JHzkY
BAj7TNsV2cvRs/Um+AoR1+apnRD1BzaIGgZ2zX622hSvx3Bi8SaVnVH0pwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFaF8rZZ9sovIUMpocW4rCcsG7jHMB8GA1UdIwQY
MBaAFFcpYm+pExPVbk12RVcv9YBh/U+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnlsaWI2a1RFOVZ1VFhaRlZ5XzFnR0g5VDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZDM1YTktZTgwMi00MTVjLWJhNTYt
N2I3YjVkNGY1OGZiLzEvVm9YeXRsbjJ5aThoUXltaHhiaXNKeXdidU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yZDM1YTktZTgwMi00MTVjLWJhNTYtN2I3YjVkNGY1OGZi
LzEvVnlsaWI2a1RFOVZ1VFhaRlZ5XzFnR0g5VDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBl4
MA0GCSqGSIb3DQEBCwUAA4IBAQANJn1FNIcBNOj9+CnSCb4TdiVKvRhf/pKP/nIp
2BYHUHOLFG33+vHLSg4BitYau4Kd5788mdjvptIJPy4tXb5zStC0f/iLQhYwWFO2
ZyDbN+K1WMQ2ZYe7NJQ2TJJV8hmlQRDlMA8ztnbMNvhqsGJq2msyIRE8Gyl0Tij7
TyQ0+qCXiPzp3s2i7L+inyRvY1xRG0I4jGvU3gYSRXLyO1VJ6/b5i/TAh4UuVIsu
I+Qz0m/hQCdcwSNczLeLpFFIaILyjHe4F2W73UwRoJWz94T3vRkQZ5JqfRxxl5MD
E02c6AiffqxEc425e0bictIxT3lqNdLVb5IdZevj5BzewL69
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:52 2024 by rpki-client on console-ams.rpki-client.org