Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/VvzmbhxitL8GJx4Snwq0Kn0yq_w.roa
File: VvzmbhxitL8GJx4Snwq0Kn0yq_w.roa (raw, json)
Hash identifier: R4JM18jF2MGZCbXwa1aiSm71nTMzWPcXJkt+EjhwSLg=
Subject key identifier: 56:FC:E6:6E:1C:62:B4:BF:06:27:1E:12:9F:0A:B4:2A:7D:32:AB:FC
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 01856F1D8E237BB497133EF59C33D5BF988C
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/VvzmbhxitL8GJx4Snwq0Kn0yq_w.roa
Signing time: Sun 01 Jan 2023 20:54:45 +0000
ROA not before: Sun 01 Jan 2023 20:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46997
IP address blocks: 2a02:7080::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:8e:23:7b:b4:97:13:3e:f5:9c:33:d5:bf:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 20:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56fce66e1c62b4bf06271e129f0ab42a7d32abfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:b2:d6:92:ed:d1:01:90:12:b2:eb:3d:e6:
11:e5:91:71:e1:2a:5d:a3:25:97:b5:9e:fa:53:a4:
60:4c:57:24:a4:e4:7e:cf:49:cf:f3:b5:3d:17:8a:
70:48:32:0d:9d:18:c5:9c:93:6c:7c:18:62:0b:d0:
e4:92:b5:65:43:3f:56:0d:ba:0d:9d:4a:24:6d:eb:
86:46:0e:13:63:fd:29:39:b1:e2:3c:23:ef:12:23:
54:5e:40:24:9d:ba:6a:df:5e:15:3d:05:76:12:7c:
90:67:3e:f6:4d:89:e5:65:0e:7c:c0:43:a1:00:88:
19:ec:4a:c0:89:a5:84:6c:6f:e0:e5:ca:d3:3e:95:
10:e4:87:90:ca:72:e3:d1:92:ed:5d:68:2f:e1:1a:
33:be:1b:88:b4:6f:6b:be:54:d0:91:64:ed:17:11:
2f:ea:d7:4c:e8:9b:aa:b6:05:35:7d:a0:2d:42:f0:
9d:21:6e:c9:44:aa:52:d8:bc:c7:86:2b:6e:8b:d5:
bf:71:3f:aa:97:da:7e:75:32:21:15:61:40:94:40:
45:c5:ed:19:57:87:ef:25:f5:df:7d:32:42:e1:f1:
16:28:0f:1b:02:41:f9:eb:00:7a:f2:c7:3a:8f:3b:
e2:5a:f4:b7:f0:b6:28:76:e4:33:b5:5e:7e:a9:90:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:E6:6E:1C:62:B4:BF:06:27:1E:12:9F:0A:B4:2A:7D:32:AB:FC
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/VvzmbhxitL8GJx4Snwq0Kn0yq_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080::/48
Signature Algorithm: sha256WithRSAEncryption
45:d4:17:45:85:ef:7f:a3:8a:1d:15:8b:0e:2f:d5:36:79:fd:
36:bf:34:ae:90:ca:cf:5d:92:bc:41:b0:fe:32:a0:95:29:03:
5c:70:2e:e4:0e:ae:58:d5:ce:56:03:f0:2f:c9:7f:bd:60:14:
3c:09:2f:9f:2c:dc:81:ba:7a:d1:53:e0:12:74:13:24:f5:18:
b0:2f:42:d6:f2:d4:14:36:f7:d5:cc:92:fe:c3:f3:81:a2:92:
bb:c1:c5:97:49:11:ad:31:98:2e:3f:ce:fb:b1:82:9d:e5:89:
39:8e:a7:7c:52:ad:b2:cb:37:cd:c5:fa:09:3b:da:bc:35:1c:
f1:bf:36:2b:00:31:a0:37:db:6b:54:08:32:f0:bb:40:98:80:
c9:c0:e6:dc:02:b5:6e:b2:54:99:06:3e:a4:35:9f:78:8b:02:
5b:1c:ff:dc:93:5a:81:da:34:b0:a5:84:2b:cb:aa:a0:c0:0c:
63:a3:03:f7:dd:cb:0e:63:f0:af:a3:2d:ac:92:ff:2b:d2:ed:
a4:d1:6e:b0:7d:62:9a:ca:0c:57:0d:38:a9:f6:b0:0c:4d:2f:
ef:9a:f7:20:b2:ef:9a:4b:48:12:d4:40:c9:b4:01:91:b3:9a:
05:92:68:f8:64:02:19:62:0e:21:2c:8f:db:5c:a6:dd:03:a1:
9f:e3:86:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvHY4je7SXEz71nDPVv5iMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw
OTBhMjEwHhcNMjMwMTAxMjA1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmZjZTY2ZTFjNjJiNGJmMDYyNzFlMTI5ZjBhYjQyYTdkMzJhYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOCy1pLt0QGQErLrPeYR5ZFx4Spd
oyWXtZ76U6RgTFckpOR+z0nP87U9F4pwSDINnRjFnJNsfBhiC9DkkrVlQz9WDboN
nUokbeuGRg4TY/0pObHiPCPvEiNUXkAknbpq314VPQV2EnyQZz72TYnlZQ58wEOh
AIgZ7ErAiaWEbG/g5crTPpUQ5IeQynLj0ZLtXWgv4RozvhuItG9rvlTQkWTtFxEv
6tdM6JuqtgU1faAtQvCdIW7JRKpS2LzHhitui9W/cT+ql9p+dTIhFWFAlEBFxe0Z
V4fvJfXffTJC4fEWKA8bAkH56wB68sc6jzviWvS38LYoduQztV5+qZC93QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFb85m4cYrS/BiceEp8KtCp9Mqv8MB8GA1UdIwQY
MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt
M2M5ZWJjNDU2NjIzLzEvVnZ6bWJoeGl0TDhHSng0U253cTBLbjB5cV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz
LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJwgAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBF1BdFhe9/o4odFYsOL9U2ef02vzSukMrPXZK8
QbD+MqCVKQNccC7kDq5Y1c5WA/AvyX+9YBQ8CS+fLNyBunrRU+ASdBMk9RiwL0LW
8tQUNvfVzJL+w/OBopK7wcWXSRGtMZguP877sYKd5Yk5jqd8Uq2yyzfNxfoJO9q8
NRzxvzYrADGgN9trVAgy8LtAmIDJwObcArVuslSZBj6kNZ94iwJbHP/ck1qB2jSw
pYQry6qgwAxjowP33csOY/Cvoy2skv8r0u2k0W6wfWKaygxXDTip9rAMTS/vmvcg
su+aS0gS1EDJtAGRs5oFkmj4ZAIZYg4hLI/bXKbdA6Gf44bm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:47 2024 by rpki-client on console-fra.rpki-client.org