Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/ZNL5zKKw5ny6Lz5h4regQW-ovW8.roa
File: ZNL5zKKw5ny6Lz5h4regQW-ovW8.roa (raw, json)
Hash identifier: tpH0Svki3IYtMPfrKInwqqYQkae8hAN3IQwu+35RqA0=
Subject key identifier: 64:D2:F9:CC:A2:B0:E6:7C:BA:2F:3E:61:E2:B7:A0:41:6F:A8:BD:6F
Certificate issuer: /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Certificate serial: 0186C79B0E2CFB5644A3F3DBBFC1ED9024D2
Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/ZNL5zKKw5ny6Lz5h4regQW-ovW8.roa
Signing time: Thu 09 Mar 2023 18:21:13 +0000
ROA not before: Thu 09 Mar 2023 18:21:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49704
IP address blocks: 2001:678:924::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:9b:0e:2c:fb:56:44:a3:f3:db:bf:c1:ed:90:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a
Validity
Not Before: Mar 9 18:21:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64d2f9cca2b0e67cba2f3e61e2b7a0416fa8bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:05:a0:88:9b:d4:0a:29:f8:f4:71:fd:b8:
82:ab:87:47:c9:74:42:0e:92:53:f8:48:f0:7c:9a:
3a:82:d0:85:a3:83:7d:b7:b6:2d:74:c0:99:3f:c9:
15:ee:16:40:17:d2:82:c7:e8:c1:36:f1:64:a3:1a:
f7:97:36:ca:1c:fd:d5:79:b1:7b:ea:d1:d5:0f:ef:
23:3e:af:c2:61:c8:3e:57:0f:91:38:09:10:21:1f:
f7:4c:c6:60:8b:5d:da:e6:e1:0f:81:5b:74:93:ec:
ec:a5:58:be:bf:8f:0e:67:db:81:01:d6:29:98:a5:
56:4e:57:4f:a4:8c:3d:a8:e5:10:b1:53:e6:bb:80:
2f:57:b0:2a:80:d6:5f:d9:46:29:af:d6:dd:77:66:
47:f6:ae:8a:1b:28:e3:c3:23:1d:81:67:87:1f:4b:
ab:df:af:29:83:04:65:93:9d:2c:b1:e5:dc:3d:59:
47:db:a2:4a:cf:c8:e7:cd:94:52:d5:ee:97:7b:0e:
bd:60:0a:6c:b3:e7:6e:a0:b8:b8:ce:78:18:1a:a7:
30:1f:bf:e9:2d:e1:81:65:86:0e:ef:7a:09:99:74:
79:58:8c:e8:a5:0b:2d:a4:a3:83:d9:85:59:02:33:
2b:86:ae:3b:ea:48:30:9d:72:68:be:9a:d5:17:f6:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:F9:CC:A2:B0:E6:7C:BA:2F:3E:61:E2:B7:A0:41:6F:A8:BD:6F
X509v3 Authority Key Identifier:
keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/ZNL5zKKw5ny6Lz5h4regQW-ovW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:924::/48
Signature Algorithm: sha256WithRSAEncryption
06:bc:f8:c7:ae:c4:66:0f:23:c0:1b:db:41:67:3e:1e:f8:9f:
6f:42:e1:08:50:0b:2e:cb:08:d1:81:31:0d:15:ee:ed:fb:9a:
a0:a2:38:d7:dc:9d:bf:86:34:69:59:61:13:09:d0:80:86:c9:
e7:8b:cd:35:81:ad:04:38:cf:be:77:9e:ef:8a:9c:ff:38:76:
3d:00:c3:cf:3b:a6:aa:c0:d0:72:74:a6:c2:07:6d:e9:d2:40:
f6:39:3d:c1:8a:26:7c:4c:fb:2e:1e:89:01:0f:50:46:e9:c9:
71:67:02:02:5b:f2:7b:d8:66:99:68:f9:05:f8:eb:fd:4e:85:
04:af:bb:fd:8f:75:50:78:66:5f:13:c1:c4:38:8e:7f:17:63:
97:08:56:f7:a2:89:94:01:40:b2:2a:0b:3d:72:b9:79:02:91:
c2:c7:72:43:4a:ae:e0:30:c5:fb:82:aa:d1:10:67:39:a1:be:
2e:07:bd:d1:95:a7:48:98:07:b6:38:83:6a:4a:97:db:bc:7e:
11:c8:59:1c:90:ff:d4:a3:e4:aa:ee:81:93:f9:e0:01:df:1e:
6d:0b:91:1a:c4:f6:99:c6:43:b1:aa:8f:68:2a:69:7c:8a:4d:
ee:39:8f:1b:23:b9:6d:1b:10:b4:77:43:7a:f5:73:e1:e7:b7:
81:85:62:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYbHmw4s+1ZEo/Pbv8HtkCTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZWY5Nzc1NTBmYTdjODEzZGVlNWMxYjkwZTk1MTFiOWM2
OGRkMGEwHhcNMjMwMzA5MTgyMTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQyZjljY2EyYjBlNjdjYmEyZjNlNjFlMmI3YTA0MTZmYThiZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIAFoIib1Aop+PRx/biCq4dHyXRC
DpJT+EjwfJo6gtCFo4N9t7YtdMCZP8kV7hZAF9KCx+jBNvFkoxr3lzbKHP3VebF7
6tHVD+8jPq/CYcg+Vw+ROAkQIR/3TMZgi13a5uEPgVt0k+zspVi+v48OZ9uBAdYp
mKVWTldPpIw9qOUQsVPmu4AvV7AqgNZf2UYpr9bdd2ZH9q6KGyjjwyMdgWeHH0ur
368pgwRlk50sseXcPVlH26JKz8jnzZRS1e6Xew69YApss+duoLi4zngYGqcwH7/p
LeGBZYYO73oJmXR5WIzopQstpKOD2YVZAjMrhq476kgwnXJovprVF/YAXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGTS+cyisOZ8ui8+YeK3oEFvqL1vMB8GA1UdIwQY
MBaAFGLvl3VQ+nyBPe5cG5DpURucaN0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAt
NTg0YTE0MGI4YjcxLzEvWk5MNXpLS3c1bnk2THo1aDRyZWdRVy1vdlc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAtNTg0YTE0MGI4Yjcx
LzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkk
MA0GCSqGSIb3DQEBCwUAA4IBAQAGvPjHrsRmDyPAG9tBZz4e+J9vQuEIUAsuywjR
gTENFe7t+5qgojjX3J2/hjRpWWETCdCAhsnni801ga0EOM++d57vipz/OHY9AMPP
O6aqwNBydKbCB23p0kD2OT3BiiZ8TPsuHokBD1BG6clxZwICW/J72GaZaPkF+Ov9
ToUEr7v9j3VQeGZfE8HEOI5/F2OXCFb3oomUAUCyKgs9crl5ApHCx3JDSq7gMMX7
gqrREGc5ob4uB73RladImAe2OINqSpfbvH4RyFkckP/Uo+Sq7oGT+eAB3x5tC5Ea
xPaZxkOxqo9oKml8ik3uOY8bI7ltGxC0d0N69XPh57eBhWL0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:39 2024 by rpki-client on console-ams.rpki-client.org