Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/7XVcvpOvYAOw2amzulhcAVGzUdQ.roa
File: 7XVcvpOvYAOw2amzulhcAVGzUdQ.roa (raw, json)
Hash identifier: OaotLLDrotxO0tYQXQeze6z8F0sNEP3j9wQC7QZbuIg=
Subject key identifier: ED:75:5C:BE:93:AF:60:03:B0:D9:A9:B3:BA:58:5C:01:51:B3:51:D4
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 018C5A225A738B13D9B323657E0C5AD2E556
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/7XVcvpOvYAOw2amzulhcAVGzUdQ.roa
Signing time: Mon 11 Dec 2023 18:27:29 +0000
ROA not before: Mon 11 Dec 2023 18:27:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0e:fd80:a03::/48 maxlen: 48
2a0e:fd80:a04::/48 maxlen: 48
2a0e:fd80:a05::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:22:5a:73:8b:13:d9:b3:23:65:7e:0c:5a:d2:e5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Dec 11 18:27:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed755cbe93af6003b0d9a9b3ba585c0151b351d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:6b:1d:3f:0b:dc:76:05:73:df:9d:75:56:
20:41:70:20:79:86:6f:a5:42:62:b2:a4:df:37:30:
26:b6:5d:8b:9c:d4:51:d5:ee:a9:63:13:04:2c:ea:
cb:4f:75:1a:5b:7e:1d:fa:47:2a:14:86:8f:79:a6:
41:e2:32:44:ad:30:5d:c1:b1:5f:31:3e:1e:cd:4f:
d7:9d:3f:33:21:6d:ae:ec:0c:ba:52:10:a3:40:20:
e4:e0:52:c1:04:28:8c:a9:75:d2:46:00:a8:10:ce:
ba:5f:5a:50:39:ee:80:66:be:25:1a:d1:8f:f1:12:
14:ad:fb:1c:1d:24:f0:95:01:82:82:01:c3:0c:d8:
58:01:01:6d:3c:9e:8c:1d:55:e7:d4:15:f3:05:e7:
4f:7f:9f:69:de:15:0d:35:02:67:c4:79:fe:11:d5:
30:f0:fc:a5:7d:26:2f:a9:5d:59:1b:b1:40:4f:43:
d0:1b:01:f2:53:d8:e7:16:a7:a3:86:7f:1f:55:50:
de:cb:20:8a:5f:5d:16:0d:e4:30:7c:f8:ba:8e:46:
11:d7:eb:d0:4c:c0:b6:cc:3b:c1:45:53:46:96:4b:
1d:7c:33:37:81:d1:db:b1:64:84:2b:88:8f:76:e7:
a9:d0:09:2f:ad:f4:42:38:0d:aa:91:ab:e4:65:be:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:5C:BE:93:AF:60:03:B0:D9:A9:B3:BA:58:5C:01:51:B3:51:D4
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/7XVcvpOvYAOw2amzulhcAVGzUdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fd80:a03::-2a0e:fd80:a05:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:66:69:ed:1f:59:33:7d:64:03:6f:08:44:af:9e:63:8c:38:
ec:bf:6d:76:04:24:df:3e:d4:29:c8:2f:b0:73:34:c1:a1:7e:
fb:b2:a5:a0:59:81:04:5a:b2:15:ae:19:aa:1e:57:7d:5c:0e:
83:1f:c2:69:a5:9f:ec:51:93:0a:ea:9e:6c:91:db:87:ae:93:
5f:50:1b:ab:96:e7:0e:5d:e8:3a:0a:47:68:e3:d9:2b:11:18:
41:c3:d3:cc:91:9a:f9:6b:b4:3a:f1:67:ac:a5:cd:5f:37:4c:
e9:38:8a:63:a2:df:6c:13:fa:96:77:66:56:7c:98:dd:00:e3:
a8:bd:ef:3b:70:05:c2:05:31:05:c9:22:2a:03:d1:01:d5:10:
ed:09:16:9f:03:e2:c8:c8:86:f1:f6:b8:24:18:57:75:75:49:
c4:95:d2:a9:95:89:34:9e:fe:af:59:e2:f8:5e:07:06:3a:70:
91:13:12:4c:fb:91:05:3a:3b:f6:69:47:8e:10:a8:2b:ad:0d:
7d:b1:d7:2f:31:c0:9b:f0:33:9b:65:f4:57:bf:40:aa:2a:1a:
2c:d5:f7:b4:4f:09:23:28:6a:24:2a:3e:a6:28:7b:3c:4f:e5:
e2:05:bf:54:c2:e1:3f:68:f5:0e:9f:2d:0d:37:2e:6d:25:b6:
ef:e6:34:63
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYxaIlpzixPZsyNlfgxa0uVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2
NGRlMTAwHhcNMjMxMjExMTgyNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDc1NWNiZTkzYWY2MDAzYjBkOWE5YjNiYTU4NWMwMTUxYjM1MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5lrHT8L3HYFc9+ddVYgQXAgeYZv
pUJisqTfNzAmtl2LnNRR1e6pYxMELOrLT3UaW34d+kcqFIaPeaZB4jJErTBdwbFf
MT4ezU/XnT8zIW2u7Ay6UhCjQCDk4FLBBCiMqXXSRgCoEM66X1pQOe6AZr4lGtGP
8RIUrfscHSTwlQGCggHDDNhYAQFtPJ6MHVXn1BXzBedPf59p3hUNNQJnxHn+EdUw
8PylfSYvqV1ZG7FAT0PQGwHyU9jnFqejhn8fVVDeyyCKX10WDeQwfPi6jkYR1+vQ
TMC2zDvBRVNGlksdfDM3gdHbsWSEK4iPduep0AkvrfRCOA2qkavkZb6AcQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFO11XL6Tr2ADsNmps7pYXAFRs1HUMB8GA1UdIwQY
MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt
MjY3MDFiMTYyZmMzLzEvN1hWY3ZwT3ZZQU93MmFtenVsaGNBVkd6VWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz
LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDv2A
CgMDBwEqDv2ACgQwDQYJKoZIhvcNAQELBQADggEBAK1mae0fWTN9ZANvCESvnmOM
OOy/bXYEJN8+1CnIL7BzNMGhfvuypaBZgQRashWuGaoeV31cDoMfwmmln+xRkwrq
nmyR24euk19QG6uW5w5d6DoKR2jj2SsRGEHD08yRmvlrtDrxZ6ylzV83TOk4imOi
32wT+pZ3ZlZ8mN0A46i97ztwBcIFMQXJIioD0QHVEO0JFp8D4sjIhvH2uCQYV3V1
ScSV0qmViTSe/q9Z4vheBwY6cJETEkz7kQU6O/ZpR44QqCutDX2x1y8xwJvwM5tl
9Fe/QKoqGizV97RPCSMoaiQqPqYoezxP5eIFv1TC4T9o9Q6fLQ03Lm0ltu/mNGM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:14 2024 by rpki-client on console-ams.rpki-client.org