Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Vea-w8H6DJR0lhV5AsrNd-myNN8.roa
File: Vea-w8H6DJR0lhV5AsrNd-myNN8.roa (raw, json)
Hash identifier: I7LSXK4KPn7NYc2SwSUFG8OrS9QG4R+Prd86XpKLczI=
Subject key identifier: 55:E6:BE:C3:C1:FA:0C:94:74:96:15:79:02:CA:CD:77:E9:B2:34:DF
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018B8D5FA0867DA1A42BCBDAFF237FA9F957
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Vea-w8H6DJR0lhV5AsrNd-myNN8.roa
Signing time: Thu 02 Nov 2023 00:12:16 +0000
ROA not before: Thu 02 Nov 2023 00:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216183
IP address blocks: 2a03:5840:110::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:5f:a0:86:7d:a1:a4:2b:cb:da:ff:23:7f:a9:f9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Nov 2 00:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e6bec3c1fa0c947496157902cacd77e9b234df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:cb:b5:a8:5c:a1:71:92:ab:21:2c:17:71:
9a:10:4d:b3:4e:fd:24:b0:dc:72:9d:35:1e:37:31:
41:ac:86:97:a1:f3:44:b0:41:5e:82:35:9e:b9:4a:
4b:fb:11:a0:c5:a8:56:96:ee:8e:8a:89:1f:e0:4e:
5c:9b:f0:45:72:78:f8:65:49:e1:85:e5:28:fb:ad:
32:28:b9:88:d3:02:7d:86:5b:90:0a:a9:46:01:59:
b3:b8:70:55:f4:da:d2:6b:dc:8c:f4:b9:c9:b3:c8:
25:67:06:86:e6:bf:7d:db:05:f3:f0:d5:f0:ea:a9:
f7:44:f7:cb:15:f5:84:d6:86:27:79:3c:d0:8f:53:
59:a2:f2:c4:fa:be:46:98:ce:24:b2:92:f1:5b:64:
79:13:8b:aa:5e:b5:a5:70:9f:50:f2:8b:cd:0d:8a:
2d:09:e4:83:e7:01:f2:de:e3:68:83:ff:05:05:8c:
c0:dd:68:b8:16:3f:f5:ae:38:f4:52:4b:fe:b5:8d:
8f:b1:fc:d8:58:68:8a:2d:3a:83:0d:c2:42:76:ff:
6c:e1:94:de:53:ec:35:12:dd:d7:7b:cf:84:4f:60:
d5:8b:56:8e:2e:8d:19:0b:f1:69:5b:c0:83:6f:7b:
53:f9:ad:76:2d:69:66:e9:13:ab:32:e7:7c:2c:87:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:BE:C3:C1:FA:0C:94:74:96:15:79:02:CA:CD:77:E9:B2:34:DF
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Vea-w8H6DJR0lhV5AsrNd-myNN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:110::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f8:5b:fa:a1:67:5e:5a:2a:22:9b:d2:32:50:13:35:93:03:
45:65:74:5a:3f:bb:1e:5b:2c:d9:1d:4c:f0:42:00:62:e7:cd:
e6:61:65:84:91:e5:e8:c2:01:1d:72:9f:22:52:ec:24:07:5f:
8d:b5:6d:9e:33:6f:7a:1b:4c:0d:7d:e2:ce:f8:dd:fe:69:34:
63:ff:bd:a7:99:8a:02:71:cd:a8:14:02:f1:77:98:dc:43:b3:
8b:66:28:be:ec:f2:4f:b7:5c:d9:15:f8:47:d0:99:bf:fa:34:
7c:13:26:ce:6e:02:a2:1d:d4:c0:77:97:86:8e:41:71:29:2e:
3e:dd:6c:44:bc:0c:4a:53:5e:4b:ed:1b:72:cd:75:67:54:d9:
3b:1f:6b:6c:b6:1b:f5:65:7c:fb:c4:a2:7b:3b:a3:cf:e7:f5:
b5:58:0c:01:84:c4:5e:7f:d3:3c:dc:7c:7f:82:0c:f0:b0:69:
b7:4b:9a:3c:ff:52:6a:49:20:0f:d8:af:dd:6e:f4:25:3e:65:
65:f3:87:76:23:b7:6f:68:92:9a:a0:ae:cc:b3:3c:61:f6:b8:
e2:90:f3:1c:fc:10:28:5f:9d:4a:39:0e:f5:1e:72:66:4a:22:
44:5f:7a:c7:af:c3:f7:a6:52:a7:27:e1:7e:2e:f8:15:7f:13:
9d:00:cb:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYuNX6CGfaGkK8va/yN/qflXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjMxMTAyMDAxMjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWU2YmVjM2MxZmEwYzk0NzQ5NjE1NzkwMmNhY2Q3N2U5YjIzNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0zLtahcoXGSqyEsF3GaEE2zTv0k
sNxynTUeNzFBrIaXofNEsEFegjWeuUpL+xGgxahWlu6Oiokf4E5cm/BFcnj4ZUnh
heUo+60yKLmI0wJ9hluQCqlGAVmzuHBV9NrSa9yM9LnJs8glZwaG5r992wXz8NXw
6qn3RPfLFfWE1oYneTzQj1NZovLE+r5GmM4kspLxW2R5E4uqXrWlcJ9Q8ovNDYot
CeSD5wHy3uNog/8FBYzA3Wi4Fj/1rjj0Ukv+tY2PsfzYWGiKLTqDDcJCdv9s4ZTe
U+w1Et3Xe8+ET2DVi1aOLo0ZC/FpW8CDb3tT+a12LWlm6ROrMud8LIeZ3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFXmvsPB+gyUdJYVeQLKzXfpsjTfMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvVmVhLXc4SDZESlIwbGhWNUFzck5kLW15Tk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAb+Fv6oWdeWioim9IyUBM1kwNFZXRaP7seWyzZ
HUzwQgBi583mYWWEkeXowgEdcp8iUuwkB1+NtW2eM296G0wNfeLO+N3+aTRj/72n
mYoCcc2oFALxd5jcQ7OLZii+7PJPt1zZFfhH0Jm/+jR8EybObgKiHdTAd5eGjkFx
KS4+3WxEvAxKU15L7RtyzXVnVNk7H2tsthv1ZXz7xKJ7O6PP5/W1WAwBhMRef9M8
3Hx/ggzwsGm3S5o8/1JqSSAP2K/dbvQlPmVl84d2I7dvaJKaoK7Mszxh9rjikPMc
/BAoX51KOQ71HnJmSiJEX3rHr8P3plKnJ+F+LvgVfxOdAMvb
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:22 2024 by rpki-client on console-fra.rpki-client.org