Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/w1nWZx1n_KK1ZyFRN6TTrgVbfTo.roa
File: w1nWZx1n_KK1ZyFRN6TTrgVbfTo.roa (raw, json)
Hash identifier: 270w7eg2nhW5ib0fQ2KlPVtE5/skV9/FM0KjKqsGd+8=
Subject key identifier: C3:59:D6:67:1D:67:FC:A2:B5:67:21:51:37:A4:D3:AE:05:5B:7D:3A
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 01856F79888A3DC370E330825430514DC6EE
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/w1nWZx1n_KK1ZyFRN6TTrgVbfTo.roa
Signing time: Sun 01 Jan 2023 22:35:13 +0000
ROA not before: Sun 01 Jan 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210490
IP address blocks: 2a11:4e07:f001::/48 maxlen: 48
2a11:4e07:f000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:88:8a:3d:c3:70:e3:30:82:54:30:51:4d:c6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Jan 1 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c359d6671d67fca2b567215137a4d3ae055b7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:22:ce:d7:18:92:91:b4:c7:47:62:f5:b2:
fb:18:60:ed:04:3e:31:98:45:9f:15:81:6f:57:7a:
0d:84:ea:1e:20:05:fd:c4:6a:52:a7:7e:3f:21:b1:
78:24:e1:e1:87:41:4b:65:e8:fc:88:0f:9c:c1:a4:
f6:70:df:94:41:dc:3d:d4:84:4c:69:d2:76:b4:8e:
eb:2d:48:ab:a6:3c:9a:0a:62:44:63:a3:dc:d4:b2:
21:e0:cb:c3:16:b4:1b:ca:5c:71:bd:1c:d9:38:a9:
a9:b8:68:a3:9b:33:d6:4c:0e:45:7f:29:7d:d2:dc:
9f:df:13:fb:83:cc:78:2d:d0:e9:db:d0:62:18:07:
f3:6a:9f:f8:73:8d:a0:83:b1:a7:7a:cd:af:b9:db:
d3:d3:16:2d:86:9b:11:4b:ac:bc:30:e6:0a:40:de:
c4:16:c4:02:1d:ee:cc:fc:7a:e6:b0:34:89:94:f3:
a8:8c:9d:f0:fa:e1:77:4f:13:80:5a:7b:3a:00:f6:
55:0a:bb:cc:ea:67:ed:cd:1f:7b:05:ad:eb:61:d9:
a3:7b:66:1a:1e:c9:59:6a:99:d1:f4:6e:aa:35:dc:
65:c2:b0:a2:c1:5f:b3:4b:08:ae:b9:45:76:6b:18:
e8:fb:96:16:76:cb:34:bd:47:56:80:c5:fc:e7:16:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:D6:67:1D:67:FC:A2:B5:67:21:51:37:A4:D3:AE:05:5B:7D:3A
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/w1nWZx1n_KK1ZyFRN6TTrgVbfTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4e07:f000::/47
Signature Algorithm: sha256WithRSAEncryption
88:19:68:66:b3:e2:36:50:e0:a7:cd:5c:f2:06:d7:d8:db:80:
d5:50:3a:06:ba:04:f2:bd:fe:fe:29:cd:1c:6a:fc:fa:8f:3c:
6f:99:56:5f:99:a5:00:ba:8b:04:75:83:a2:5b:55:10:73:fc:
c3:f4:f7:7f:23:8a:c0:88:c6:ab:1b:c7:0c:7b:fb:54:2b:8d:
b4:c7:c3:5a:73:25:91:59:0f:54:04:35:2d:f9:7c:01:cd:4d:
f3:e3:06:50:5e:1d:7c:24:de:0e:db:f8:14:20:58:db:16:b1:
3e:2d:06:07:e1:63:53:71:f2:58:bc:35:71:d2:c4:53:e8:67:
78:28:fa:64:2e:0f:8a:0b:99:c8:1e:e6:75:53:9c:1e:a0:29:
23:c8:4a:23:31:93:5c:f9:43:f8:2a:8f:11:51:cb:c5:1b:5c:
53:2b:a2:78:f3:56:e8:35:db:e7:35:6b:ba:46:18:cb:2f:a3:
c4:f3:22:6a:59:3c:7c:65:4b:bd:41:d4:08:9a:eb:58:f5:87:
c7:d6:e2:c5:bd:f6:ce:11:d3:9b:40:86:43:1b:3e:d7:1a:1a:
e1:ba:8c:54:9b:35:dd:64:37:15:c0:dd:68:9a:be:05:24:6b:
26:ba:7d:66:be:f7:97:73:c2:e4:bd:96:b7:fd:d6:bb:af:2e:
91:8d:6e:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVveYiKPcNw4zCCVDBRTcbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2YzNTZhMDJkOTY3OWNlODkwYjVkNTFlMGRlYzJmM2Yz
NjMzNjEwHhcNMjMwMTAxMjIzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU5ZDY2NzFkNjdmY2EyYjU2NzIxNTEzN2E0ZDNhZTA1NWI3ZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLsiztcYkpG0x0di9bL7GGDtBD4x
mEWfFYFvV3oNhOoeIAX9xGpSp34/IbF4JOHhh0FLZej8iA+cwaT2cN+UQdw91IRM
adJ2tI7rLUirpjyaCmJEY6Pc1LIh4MvDFrQbylxxvRzZOKmpuGijmzPWTA5Ffyl9
0tyf3xP7g8x4LdDp29BiGAfzap/4c42gg7Gnes2vudvT0xYthpsRS6y8MOYKQN7E
FsQCHe7M/HrmsDSJlPOojJ3w+uF3TxOAWns6APZVCrvM6mftzR97Ba3rYdmje2Ya
HslZapnR9G6qNdxlwrCiwV+zSwiuuUV2axjo+5YWdss0vUdWgMX85xbCcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMNZ1mcdZ/yitWchUTek064FW306MB8GA1UdIwQY
MBaAFI0/NWoC2Wec6JC11R4N7C8/NjNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAt
NmI5M2FmNjEzZDdkLzEvdzFuV1p4MW5fS0sxWnlGUk42VFRyZ1ZiZlRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81NjZjYjEtNzkxNS00ZmZkLTg1NzAtNmI5M2FmNjEzZDdk
LzEvalQ4MWFnTFpaNXpva0xYVkhnM3NMejgyTTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhFOB/AA
MA0GCSqGSIb3DQEBCwUAA4IBAQCIGWhms+I2UOCnzVzyBtfY24DVUDoGugTyvf7+
Kc0cavz6jzxvmVZfmaUAuosEdYOiW1UQc/zD9Pd/I4rAiMarG8cMe/tUK420x8Na
cyWRWQ9UBDUt+XwBzU3z4wZQXh18JN4O2/gUIFjbFrE+LQYH4WNTcfJYvDVx0sRT
6Gd4KPpkLg+KC5nIHuZ1U5weoCkjyEojMZNc+UP4Ko8RUcvFG1xTK6J481boNdvn
NWu6RhjLL6PE8yJqWTx8ZUu9QdQImutY9YfH1uLFvfbOEdObQIZDGz7XGhrhuoxU
mzXdZDcVwN1omr4FJGsmun1mvveXc8LkvZa3/da7ry6RjW6G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:26 2024 by rpki-client on console-ams.rpki-client.org