Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/92P7-wshB30akTi0Jxmh7ql32UQ.roa
File: 92P7-wshB30akTi0Jxmh7ql32UQ.roa (raw, json)
Hash identifier: HMG48K9tGsjSnWrWMrSdYNA8RM8MeB0HRmw/flbUQ2M=
Subject key identifier: F7:63:FB:FB:0B:21:07:7D:1A:91:38:B4:27:19:A1:EE:A9:77:D9:44
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01856FC2930223E4169F3FAE93D29E3073E3
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/92P7-wshB30akTi0Jxmh7ql32UQ.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41151
IP address blocks: 2a01:4700::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:93:02:23:e4:16:9f:3f:ae:93:d2:9e:30:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f763fbfb0b21077d1a9138b42719a1eea977d944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:6a:e0:b8:59:2b:4f:f8:f6:ae:a2:25:96:
be:d3:0f:e7:23:f7:0c:23:e0:45:3f:12:ef:be:b2:
88:fe:26:a3:65:16:71:a3:a7:fe:81:21:94:fb:b6:
3f:81:db:43:7a:46:d7:93:d8:e2:27:01:07:51:ec:
56:39:55:55:9e:46:16:0d:d2:13:72:0a:da:2a:88:
c8:73:f6:f7:6a:8a:53:08:2e:ee:62:fb:18:a3:f4:
ed:34:51:43:95:e0:08:93:52:10:b6:28:e7:3d:b0:
e0:d9:8d:b9:12:48:13:55:2a:d3:89:9a:80:7d:e6:
e0:11:67:1c:4f:c7:62:49:1d:78:07:10:bf:e5:3f:
f6:69:1e:1e:24:0a:6e:6f:c2:86:e6:ec:e7:73:b6:
80:7d:af:93:53:3e:79:bc:01:27:b7:a9:37:34:7d:
67:21:75:b6:35:b4:e7:01:1e:fc:10:46:ca:96:6b:
cb:0f:7e:5e:bd:be:5d:73:79:10:3f:19:0e:b6:30:
6a:25:ff:ae:4f:dc:4b:b1:29:7d:bd:30:d6:ac:57:
8d:0e:3d:5f:3d:42:75:ab:d3:9a:75:9d:4b:63:84:
00:88:d8:f0:d6:08:ec:97:8d:2e:01:17:88:53:5c:
f1:1b:cc:12:23:9d:bb:37:f2:d2:e2:14:6c:d3:d4:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:FB:FB:0B:21:07:7D:1A:91:38:B4:27:19:A1:EE:A9:77:D9:44
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/92P7-wshB30akTi0Jxmh7ql32UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4700::/48
Signature Algorithm: sha256WithRSAEncryption
4c:16:a0:5d:89:76:f2:51:6d:6b:15:be:41:50:cb:25:f5:c5:
29:4a:f5:8b:d6:4f:34:e4:3c:e9:10:7a:c6:1e:ae:1e:b6:f5:
79:16:f0:9a:51:60:c3:07:47:d8:d6:d2:cf:61:5a:e7:a1:5a:
96:84:ec:9f:28:50:f2:c5:03:38:6f:b1:63:cc:09:ab:56:ad:
a7:d6:d7:66:12:15:ac:cc:d8:5a:ec:e1:32:b1:60:1c:a2:2e:
37:c8:a2:81:19:ef:1c:b2:76:12:64:91:39:b1:b9:0f:38:72:
b7:e3:6b:3d:db:1e:c5:9b:63:f8:ef:5d:db:64:b4:a4:0c:a4:
ac:46:bc:f4:54:00:2e:40:b5:39:a0:e2:c6:5c:6b:54:97:9c:
66:1b:92:1c:1c:ce:a5:1f:32:ab:cc:50:38:67:5a:5a:7f:57:
4d:27:19:04:ec:c0:4b:a8:47:1c:33:10:00:ca:4e:9c:a9:6e:
d3:d0:b0:d9:3f:af:ff:08:77:b6:fd:d6:33:5d:cd:ed:ec:ce:
8f:bd:3e:83:1e:94:21:f8:3a:39:76:fc:02:32:4d:18:21:2e:
01:bd:c3:32:43:5f:d4:9a:b0:11:58:b8:40:68:5e:08:6f:14:
43:58:9c:d7:b6:41:62:f8:de:d1:56:5b:cf:7b:5c:4e:0b:76:
07:b2:14:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvwpMCI+QWnz+uk9KeMHPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3
OWRjMTYwHhcNMjMwMTAxMjM1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzYzZmJmYjBiMjEwNzdkMWE5MTM4YjQyNzE5YTFlZWE5NzdkOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryVq4LhZK0/49q6iJZa+0w/nI/cM
I+BFPxLvvrKI/iajZRZxo6f+gSGU+7Y/gdtDekbXk9jiJwEHUexWOVVVnkYWDdIT
cgraKojIc/b3aopTCC7uYvsYo/TtNFFDleAIk1IQtijnPbDg2Y25EkgTVSrTiZqA
febgEWccT8diSR14BxC/5T/2aR4eJApub8KG5uznc7aAfa+TUz55vAEnt6k3NH1n
IXW2NbTnAR78EEbKlmvLD35evb5dc3kQPxkOtjBqJf+uT9xLsSl9vTDWrFeNDj1f
PUJ1q9OadZ1LY4QAiNjw1gjsl40uAReIU1zxG8wSI527N/LS4hRs09TwaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPdj+/sLIQd9GpE4tCcZoe6pd9lEMB8GA1UdIwQY
MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt
ZDJiYmYzN2RhYmI0LzEvOTJQNy13c2hCMzBha1RpMEp4bWg3cWwzMlVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0
LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFHAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBMFqBdiXbyUW1rFb5BUMsl9cUpSvWL1k805Dzp
EHrGHq4etvV5FvCaUWDDB0fY1tLPYVrnoVqWhOyfKFDyxQM4b7FjzAmrVq2n1tdm
EhWszNha7OEysWAcoi43yKKBGe8csnYSZJE5sbkPOHK342s92x7Fm2P4713bZLSk
DKSsRrz0VAAuQLU5oOLGXGtUl5xmG5IcHM6lHzKrzFA4Z1paf1dNJxkE7MBLqEcc
MxAAyk6cqW7T0LDZP6//CHe2/dYzXc3t7M6PvT6DHpQh+Do5dvwCMk0YIS4BvcMy
Q1/UmrARWLhAaF4IbxRDWJzXtkFi+N7RVlvPe1xOC3YHshRa
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org