Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xdZibdayaB-OUB998EalU1VV7Gs.roa
File: xdZibdayaB-OUB998EalU1VV7Gs.roa (raw, json)
Hash identifier: wy2si6HsWlA7oWJQ16s1FKy1oupx+jjO42pD3+U1CgA=
Subject key identifier: C5:D6:62:6D:D6:B2:68:1F:8E:50:1F:7D:F0:46:A5:53:55:55:EC:6B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0186249DD7AAB56EB3B26CC417B5B4A36265
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xdZibdayaB-OUB998EalU1VV7Gs.roa
Signing time: Mon 06 Feb 2023 02:46:09 +0000
ROA not before: Mon 06 Feb 2023 02:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200021
IP address blocks: 2a0e:aa07:e060::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:24:9d:d7:aa:b5:6e:b3:b2:6c:c4:17:b5:b4:a3:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Feb 6 02:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5d6626dd6b2681f8e501f7df046a5535555ec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a7:1a:de:26:c2:8c:6a:62:24:e7:42:f3:af:
0a:b7:1f:6f:39:59:f0:82:16:0c:e6:28:25:da:a5:
70:df:52:e0:f2:12:9f:59:10:5f:9b:63:24:68:27:
d5:e7:d6:39:ed:d3:53:af:a3:72:64:22:61:f9:fd:
1c:d8:42:ee:16:08:e5:47:3d:98:1a:17:1f:8c:17:
17:3a:b5:9c:f9:50:5e:0f:a5:51:b9:54:1d:f2:eb:
8b:51:c2:08:33:ee:d5:be:7a:17:a3:c4:db:49:a6:
ea:8b:c2:95:f2:b8:5a:f2:33:da:1e:35:db:43:6f:
68:92:c4:ca:01:44:03:b8:72:6f:29:3c:1a:98:6e:
95:e8:07:63:8b:db:25:1e:72:27:af:65:b3:1c:5f:
c1:71:d1:d8:67:a0:1f:58:ec:71:e7:ed:bb:18:de:
27:45:62:3d:a4:c6:98:c5:d9:f2:6f:19:1c:3b:d9:
4d:90:cc:83:cc:f9:44:eb:94:a2:0b:3f:fe:14:ca:
b8:db:87:96:5f:2e:8e:09:6c:fe:92:14:8e:21:68:
41:2d:87:79:83:e5:b3:1a:8a:fd:2a:d4:2b:ff:fe:
b6:4e:42:6c:ee:f4:af:8c:c7:f2:11:96:0e:81:22:
18:03:4c:e9:33:6e:94:7f:38:cd:4c:bd:b0:20:65:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:62:6D:D6:B2:68:1F:8E:50:1F:7D:F0:46:A5:53:55:55:EC:6B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/xdZibdayaB-OUB998EalU1VV7Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e060::/48
Signature Algorithm: sha256WithRSAEncryption
89:dd:3d:be:1d:15:15:d2:35:ac:66:b4:04:21:69:2b:85:10:
18:10:9c:fd:9c:c7:2f:09:ba:68:95:08:fb:5e:db:98:30:ce:
74:c7:65:b5:86:9b:79:56:70:47:9f:40:b3:89:90:d0:d4:be:
5d:17:d4:45:87:0d:39:9a:3f:bc:2a:c3:33:be:f7:66:c7:57:
b7:ff:59:88:3a:5f:58:67:22:44:01:9b:a5:85:c0:d0:59:45:
bc:a6:5a:69:44:a5:c2:cd:b6:e7:a2:7b:bf:60:29:3a:b5:f2:
a5:38:b9:a1:20:d1:07:08:47:3b:89:21:a2:90:66:6d:6a:ba:
6b:2f:a1:aa:f5:30:b3:52:05:f4:c7:13:59:9d:aa:35:9c:bb:
c2:62:3b:38:e2:20:77:62:68:94:16:56:ef:61:4b:f9:9a:77:
72:a4:bf:57:12:71:74:01:b9:a3:d5:bb:3c:d8:c0:08:fa:9b:
18:67:66:b7:95:99:dc:fb:41:40:b6:e4:bd:60:d3:e7:1d:ad:
0f:16:0a:2f:75:92:5e:76:ba:d5:22:09:b8:17:54:bc:0e:40:
13:29:4c:02:d0:17:6a:04:51:12:57:e5:7e:57:9f:37:11:74:
eb:00:f2:54:d6:0d:c3:c4:5c:a7:be:11:46:a7:ad:59:03:e2:
73:b2:1a:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYkndeqtW6zsmzEF7W0o2JlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjMwMjA2MDI0NjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWQ2NjI2ZGQ2YjI2ODFmOGU1MDFmN2RmMDQ2YTU1MzU1NTVlYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6ca3ibCjGpiJOdC868Ktx9vOVnw
ghYM5igl2qVw31Lg8hKfWRBfm2MkaCfV59Y57dNTr6NyZCJh+f0c2ELuFgjlRz2Y
GhcfjBcXOrWc+VBeD6VRuVQd8uuLUcIIM+7VvnoXo8TbSabqi8KV8rha8jPaHjXb
Q29oksTKAUQDuHJvKTwamG6V6Adji9slHnInr2WzHF/BcdHYZ6AfWOxx5+27GN4n
RWI9pMaYxdnybxkcO9lNkMyDzPlE65SiCz/+FMq424eWXy6OCWz+khSOIWhBLYd5
g+WzGor9KtQr//62TkJs7vSvjMfyEZYOgSIYA0zpM26UfzjNTL2wIGWf+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMXWYm3WsmgfjlAfffBGpVNVVexrMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEveGRaaWJkYXlhQi1PVUI5OThFYWxVMVZWN0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Bg
MA0GCSqGSIb3DQEBCwUAA4IBAQCJ3T2+HRUV0jWsZrQEIWkrhRAYEJz9nMcvCbpo
lQj7XtuYMM50x2W1hpt5VnBHn0CziZDQ1L5dF9RFhw05mj+8KsMzvvdmx1e3/1mI
Ol9YZyJEAZulhcDQWUW8plppRKXCzbbnonu/YCk6tfKlOLmhINEHCEc7iSGikGZt
arprL6Gq9TCzUgX0xxNZnao1nLvCYjs44iB3YmiUFlbvYUv5mndypL9XEnF0Abmj
1bs82MAI+psYZ2a3lZnc+0FAtuS9YNPnHa0PFgovdZJedrrVIgm4F1S8DkATKUwC
0BdqBFESV+V+V583EXTrAPJU1g3DxFynvhFGp61ZA+JzshqG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:31 2023 by rpki-client on console-fra.rpki-client.org