Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/7SfDHt41P2Gkr7KDp6ucIdBItOA.roa
File: 7SfDHt41P2Gkr7KDp6ucIdBItOA.roa (raw, json)
Hash identifier: 1iy2SW5H6oTAOiTuAMataFsruwyozFReQXYp4SjqboE=
Subject key identifier: ED:27:C3:1E:DE:35:3F:61:A4:AF:B2:83:A7:AB:9C:21:D0:48:B4:E0
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 018CC87007AEA1660574AA3F709CD308E9F7
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/7SfDHt41P2Gkr7KDp6ucIdBItOA.roa
Signing time: Tue 02 Jan 2024 04:30:34 +0000
ROA not before: Tue 02 Jan 2024 04:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 2001:678:730::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Apr 2024 14:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:07:ae:a1:66:05:74:aa:3f:70:9c:d3:08:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jan 2 04:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed27c31ede353f61a4afb283a7ab9c21d048b4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:55:fd:9c:61:4f:d4:35:ad:fe:ef:aa:83:
49:83:27:53:c4:26:45:4a:3d:a9:5c:2a:29:17:fd:
45:d6:54:06:66:5d:95:26:54:fe:47:61:74:81:f2:
b5:5b:3e:0d:0b:56:ce:22:94:0a:dd:91:ac:5a:64:
e8:3f:0e:83:61:99:f3:01:ed:47:30:e0:00:6e:9a:
0a:56:c2:af:54:ce:76:a1:fc:c4:d5:ab:83:51:a9:
42:52:6b:6c:dc:54:54:0b:b3:73:62:ec:fd:1f:d4:
51:3a:1c:19:16:d8:b5:ab:df:e8:41:7e:17:07:69:
9b:94:f9:7b:9e:5c:c4:f1:b7:7d:71:e7:7c:fd:e4:
bd:66:20:24:83:77:b2:26:fe:34:c1:16:ba:5f:7f:
63:ad:55:b0:ed:2b:16:1f:f4:cc:84:38:cf:27:d6:
34:a3:37:84:dd:1e:8d:13:ce:18:fe:dd:02:c2:44:
37:09:7c:44:14:ed:f9:f6:46:4b:9c:a0:ed:7b:c3:
27:48:18:00:95:ee:c5:6d:23:15:9d:44:fb:ac:80:
09:cb:88:59:e5:ef:9f:a3:f0:b1:f3:90:bd:3f:c6:
9d:0f:14:59:ff:15:2e:58:ba:05:83:cd:55:be:7d:
1a:f3:6d:1a:4e:fa:b7:2a:75:cd:46:71:b0:a4:de:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:27:C3:1E:DE:35:3F:61:A4:AF:B2:83:A7:AB:9C:21:D0:48:B4:E0
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/7SfDHt41P2Gkr7KDp6ucIdBItOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:730::/48
Signature Algorithm: sha256WithRSAEncryption
22:95:f5:d9:09:85:03:ea:d2:9b:84:45:67:bb:1c:1b:39:5d:
37:5e:91:80:9e:f0:47:22:83:1f:70:13:3e:41:a6:1f:69:71:
23:b0:4a:48:5d:36:08:6b:f6:80:68:62:c7:ce:c1:e3:6d:79:
91:ac:93:33:bd:6b:72:96:a3:53:c8:32:7b:86:e1:5d:0e:cf:
cb:b6:8e:64:23:33:74:a2:f5:1f:1d:10:5d:ac:36:1a:ab:5f:
e9:85:24:ab:c7:96:52:cf:75:a8:20:69:b5:bc:af:81:ba:e9:
e3:a4:e6:48:90:18:00:6f:5b:b7:bd:d7:f8:7d:43:e0:f8:3e:
02:e0:68:e6:ef:3a:10:14:3c:71:2d:5c:92:72:0b:30:0e:4c:
f4:e3:9c:99:8c:d3:37:5b:28:71:04:85:b4:3e:e8:5f:4e:27:
02:23:79:62:67:69:01:03:72:5e:88:6b:2d:d3:6d:9c:c8:e3:
6f:20:4c:01:a5:b6:ae:4c:66:f5:6e:3c:72:37:fb:fc:2e:43:
68:8a:2a:af:98:9c:7e:f1:be:a6:82:5f:ae:d1:8f:10:48:1c:
74:25:56:f6:89:59:e0:a0:87:b3:ea:a4:2d:1b:c6:75:6c:d5:
70:ed:bf:04:9e:9d:56:f1:68:28:71:95:88:26:9c:ac:30:e4:
db:60:93:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIcAeuoWYFdKo/cJzTCOn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDE5NGY4MjQ5NzczZDNjZDZmYjY1NGIyMzlkZTc2OWM0
MmU4NjQwHhcNMjQwMTAyMDQzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI3YzMxZWRlMzUzZjYxYTRhZmIyODNhN2FiOWMyMWQwNDhiNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0hV/ZxhT9Q1rf7vqoNJgydTxCZF
Sj2pXCopF/1F1lQGZl2VJlT+R2F0gfK1Wz4NC1bOIpQK3ZGsWmToPw6DYZnzAe1H
MOAAbpoKVsKvVM52ofzE1auDUalCUmts3FRUC7NzYuz9H9RROhwZFti1q9/oQX4X
B2mblPl7nlzE8bd9ced8/eS9ZiAkg3eyJv40wRa6X39jrVWw7SsWH/TMhDjPJ9Y0
ozeE3R6NE84Y/t0CwkQ3CXxEFO359kZLnKDte8MnSBgAle7FbSMVnUT7rIAJy4hZ
5e+fo/Cx85C9P8adDxRZ/xUuWLoFg81Vvn0a820aTvq3KnXNRnGwpN7E0QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO0nwx7eNT9hpK+yg6ernCHQSLTgMB8GA1UdIwQY
MBaAFFRBlPgkl3PTzW+2VLI53nacQuhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYt
ZDYxZGYzM2M0MzFiLzEvN1NmREh0NDFQMkdrcjdLRHA2dWNJZEJJdE9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kZDFlYTYtY2NiZi00ZGYxLTkyZWYtZDYxZGYzM2M0MzFi
LzEvVkVHVS1DU1hjOVBOYjdaVXNqbmVkcHhDNkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAcw
MA0GCSqGSIb3DQEBCwUAA4IBAQAilfXZCYUD6tKbhEVnuxwbOV03XpGAnvBHIoMf
cBM+QaYfaXEjsEpIXTYIa/aAaGLHzsHjbXmRrJMzvWtylqNTyDJ7huFdDs/Lto5k
IzN0ovUfHRBdrDYaq1/phSSrx5ZSz3WoIGm1vK+BuunjpOZIkBgAb1u3vdf4fUPg
+D4C4Gjm7zoQFDxxLVyScgswDkz045yZjNM3WyhxBIW0PuhfTicCI3liZ2kBA3Je
iGst022cyONvIEwBpbauTGb1bjxyN/v8LkNoiiqvmJx+8b6mgl+u0Y8QSBx0JVb2
iVngoIez6qQtG8Z1bNVw7b8Enp1W8WgocZWIJpysMOTbYJMN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:22 2024 by rpki-client on console-ams.rpki-client.org