Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/SV-EmvtL6_EfDegYQMQ85MTMacU.roa
File: SV-EmvtL6_EfDegYQMQ85MTMacU.roa (raw, json)
Hash identifier: C4k8cTmre6PSfcsBDTG4EqKai4R0Lg6x8dzbKC0Zmdw=
Subject key identifier: 49:5F:84:9A:FB:4B:EB:F1:1F:0D:E8:18:40:C4:3C:E4:C4:CC:69:C5
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 01856CB82632CB2D9A2D11AA6513E005AEAF
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/SV-EmvtL6_EfDegYQMQ85MTMacU.roa
Signing time: Sun 01 Jan 2023 09:44:45 +0000
ROA not before: Sun 01 Jan 2023 09:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 141.33.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:26:32:cb:2d:9a:2d:11:aa:65:13:e0:05:ae:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: Jan 1 09:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=495f849afb4bebf11f0de81840c43ce4c4cc69c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:80:f8:60:b4:f1:38:a3:a6:88:17:79:82:
8b:ee:e7:83:ed:40:61:f1:74:61:b6:73:2e:94:e5:
a0:b3:11:8f:27:a4:5b:45:0e:6a:d2:90:25:9d:93:
31:69:f5:35:2d:0a:41:4c:cf:4f:72:63:a4:41:fd:
bc:81:ec:50:5d:7f:d9:8f:e4:0e:26:44:f2:bc:a2:
c7:e5:5c:9b:6f:e8:a4:b5:9d:5f:d7:22:80:ce:b9:
a6:8a:2f:8c:88:57:a4:42:73:31:ff:3d:be:ba:35:
5f:46:f9:dd:dd:72:dd:38:c5:a3:4c:af:42:6a:17:
4c:2d:27:6b:d7:4b:11:a1:4c:67:7e:e1:34:e7:b9:
c9:f0:da:dc:47:8d:17:01:74:44:e8:e1:03:bf:1a:
b6:de:23:26:76:92:44:b6:92:96:e8:07:36:00:52:
d5:81:71:07:a5:20:f4:00:89:cc:4c:96:b2:fb:c9:
cc:9c:f0:26:54:c8:86:cb:f3:87:db:92:25:ab:97:
09:9a:af:c3:49:1f:52:49:46:0a:0c:89:e5:4d:25:
ea:aa:68:7f:43:fe:04:55:16:05:03:c9:ff:2d:3d:
da:83:f8:56:e7:9f:59:1d:27:34:3a:f1:81:e9:85:
ff:d6:b9:45:40:ca:f8:17:d3:be:16:41:ce:18:5f:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:84:9A:FB:4B:EB:F1:1F:0D:E8:18:40:C4:3C:E4:C4:CC:69:C5
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/SV-EmvtL6_EfDegYQMQ85MTMacU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.33.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:6a:40:ec:58:5d:ee:81:58:1f:d6:9c:a7:b7:45:3a:f7:65:
b5:76:66:90:4d:7c:4c:a6:23:a4:77:81:d2:8b:1a:eb:c0:26:
57:c6:b5:85:72:e3:76:d0:7e:b9:ba:7e:37:e2:bf:62:12:4d:
81:0d:87:f2:95:9c:6f:94:14:bc:f8:4d:59:3d:e5:5c:b5:fd:
4b:77:12:03:6a:ac:0b:3f:53:3c:d1:97:ba:7c:49:79:59:30:
5d:cc:b1:b4:3b:22:b0:47:17:7d:01:55:90:df:9f:3a:9e:7d:
da:c8:2b:9f:5f:ed:a9:06:cd:9c:75:ca:cc:3c:e5:dd:74:f7:
3c:9d:5b:0b:be:62:e2:1c:db:26:ff:39:ba:8f:24:6d:95:48:
93:24:76:91:9b:6e:ec:d1:fb:44:9d:a8:bd:21:e7:92:e1:4a:
1f:5f:79:8e:4f:52:3b:29:1d:7c:be:92:39:16:79:ef:14:a3:
61:56:10:68:9b:f3:87:14:2c:30:f1:4f:01:c1:d3:ee:54:9e:
a0:b8:45:c4:cf:fb:0b:01:ab:52:78:70:f1:e7:50:c5:4c:2e:
e7:a5:e8:60:ae:d8:08:54:db:7e:e3:5d:4b:0a:7e:cc:3b:f8:
f3:f6:cc:0e:db:fe:59:a5:a4:33:10:05:4d:c0:1f:47:e9:bf:
cb:ae:84:0f
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVsuCYyyy2aLRGqZRPgBa6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODFlNTc3N2NjZTk5MGMwYjJiMGY0YzI5Y2M4ZDJjZjlh
ZmU4M2IwHhcNMjMwMTAxMDk0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTVmODQ5YWZiNGJlYmYxMWYwZGU4MTg0MGM0M2NlNGM0Y2M2OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7yA+GC08TijpogXeYKL7ueD7UBh
8XRhtnMulOWgsxGPJ6RbRQ5q0pAlnZMxafU1LQpBTM9PcmOkQf28gexQXX/Zj+QO
JkTyvKLH5Vybb+iktZ1f1yKAzrmmii+MiFekQnMx/z2+ujVfRvnd3XLdOMWjTK9C
ahdMLSdr10sRoUxnfuE057nJ8NrcR40XAXRE6OEDvxq23iMmdpJEtpKW6Ac2AFLV
gXEHpSD0AInMTJay+8nMnPAmVMiGy/OH25Ilq5cJmq/DSR9SSUYKDInlTSXqqmh/
Q/4EVRYFA8n/LT3ag/hW559ZHSc0OvGB6YX/1rlFQMr4F9O+FkHOGF9NsQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFElfhJr7S+vxHw3oGEDEPOTEzGnFMB8GA1UdIwQY
MBaAFNiB5Xd8zpkMCysPTCnMjSz5r+g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDct
ZDgzNWRlMDhiY2Y2LzEvU1YtRW12dEw2X0VmRGVnWVFNUTg1TVRNYWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zYzk1ZjMtZGMzZC00OGViLWI2ZDctZDgzNWRlMDhiY2Y2
LzEvMklIbGQzek9tUXdMS3c5TUtjeU5MUG12NkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjSEwDQYJ
KoZIhvcNAQELBQADggEBAJ1qQOxYXe6BWB/WnKe3RTr3ZbV2ZpBNfEymI6R3gdKL
GuvAJlfGtYVy43bQfrm6fjfiv2ISTYENh/KVnG+UFLz4TVk95Vy1/Ut3EgNqrAs/
UzzRl7p8SXlZMF3MsbQ7IrBHF30BVZDfnzqefdrIK59f7akGzZx1ysw85d109zyd
Wwu+YuIc2yb/ObqPJG2VSJMkdpGbbuzR+0SdqL0h55LhSh9feY5PUjspHXy+kjkW
ee8Uo2FWEGib84cULDDxTwHB0+5UnqC4RcTP+wsBq1J4cPHnUMVMLuel6GCu2AhU
237jXUsKfsw7+PP2zA7b/lmlpDMQBU3AH0fpv8uuhA8=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:53 2024 by rpki-client on console-ams.rpki-client.org