Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7VseWRNMpvhcwC9xLrKK1LlrUiU.roa
File: 7VseWRNMpvhcwC9xLrKK1LlrUiU.roa (raw, json)
Hash identifier: 2ynpiHalqbXFWJJeIC8AD7PAtVFP1KsvLgdgAZH4Ats=
Subject key identifier: ED:5B:1E:59:13:4C:A6:F8:5C:C0:2F:71:2E:B2:8A:D4:B9:6B:52:25
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C51FB6626A6FCE41D81D83EE918A2
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7VseWRNMpvhcwC9xLrKK1LlrUiU.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209504
IP address blocks: 2a0d:f407:1015::/48 maxlen: 48
2a0d:f407:1016::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:51:fb:66:26:a6:fc:e4:1d:81:d8:3e:e9:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed5b1e59134ca6f85cc02f712eb28ad4b96b5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:ca:bc:8f:2e:82:25:f7:99:de:de:c3:81:
e9:18:67:22:79:43:df:3f:1a:21:59:fd:12:29:2b:
b0:e8:13:cc:a1:79:de:0f:52:f3:5e:ea:48:a6:5c:
8a:2c:1c:23:66:83:31:01:b3:37:0f:08:76:bd:36:
97:30:f3:77:ce:7c:52:eb:06:71:8a:61:41:e5:0b:
76:67:94:4b:43:ea:68:ec:00:99:7a:0e:1b:ce:5f:
c1:e6:6e:32:a0:4e:5e:6c:a9:72:9b:0e:45:be:62:
cb:6e:e0:6c:e3:e5:96:8d:ae:3d:1a:aa:3e:85:1e:
e3:cd:5d:e0:2c:fd:b7:f6:c5:b2:d9:c2:93:4d:f5:
66:92:a6:c1:87:86:b5:19:f9:a6:4e:d8:3b:27:0f:
6a:98:d6:e6:72:61:8a:9a:70:ff:3c:32:a5:6b:da:
db:c0:0d:0e:5f:f0:da:37:5f:49:22:86:8e:7d:c1:
6b:73:e7:34:75:09:c0:28:41:9b:5a:f5:c4:ed:aa:
8b:63:82:4d:c3:cd:ca:fc:95:cd:bf:5b:a3:d4:23:
18:08:e3:2e:de:36:4c:ad:51:00:1f:12:7d:26:d2:
44:27:a0:48:78:69:3a:77:7a:87:41:82:38:54:f0:
11:ee:bd:46:24:70:a2:55:86:f5:29:af:df:18:c4:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:1E:59:13:4C:A6:F8:5C:C0:2F:71:2E:B2:8A:D4:B9:6B:52:25
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7VseWRNMpvhcwC9xLrKK1LlrUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1015::-2a0d:f407:1016:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:02:be:fb:55:15:01:99:f3:07:d6:f9:79:d4:5e:86:68:e9:
b7:a5:a8:09:d2:6c:83:62:f7:43:06:dc:41:39:fd:ed:27:89:
53:fe:17:be:65:6b:82:6c:ed:c1:fb:05:43:9a:5c:16:68:0f:
68:55:47:03:69:5d:f8:22:98:0f:dc:fa:ac:1a:f4:06:57:3e:
2d:15:9d:3e:cc:ac:72:49:a7:15:66:4b:50:7d:40:43:e0:12:
9a:8e:ec:eb:89:e2:b1:1e:56:f3:36:b5:28:83:ab:2c:34:d7:
cf:30:08:24:90:01:93:18:c9:37:52:6e:59:56:8e:19:38:00:
27:15:d7:81:e8:79:50:d3:89:ae:ae:12:2a:c6:2f:0f:f7:0b:
3a:7f:c3:eb:83:24:c9:05:32:e5:e2:d7:db:ab:65:c9:65:4b:
4e:dd:9e:16:ba:3b:ee:61:e0:88:6f:1f:3b:c6:55:b4:ad:4d:
db:cc:46:12:a3:b9:6c:83:25:ee:cf:30:e4:9d:56:09:c4:57:
03:85:a4:d8:80:d3:99:70:c4:53:71:33:a1:d2:d2:01:8b:3e:
cc:f8:2f:0c:f6:95:b9:63:de:47:90:8e:2f:99:d9:b9:be:1b:
6b:93:cf:92:83:93:25:a1:25:3f:14:a8:6f:08:39:ca:39:de:
72:44:9a:e2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVyDFH7Ziam/OQdgdg+6RiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjMwMTAyMTAzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDViMWU1OTEzNGNhNmY4NWNjMDJmNzEyZWIyOGFkNGI5NmI1MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7KvI8ugiX3md7ew4HpGGcieUPf
PxohWf0SKSuw6BPMoXneD1LzXupIplyKLBwjZoMxAbM3Dwh2vTaXMPN3znxS6wZx
imFB5Qt2Z5RLQ+po7ACZeg4bzl/B5m4yoE5ebKlymw5FvmLLbuBs4+WWja49Gqo+
hR7jzV3gLP239sWy2cKTTfVmkqbBh4a1GfmmTtg7Jw9qmNbmcmGKmnD/PDKla9rb
wA0OX/DaN19JIoaOfcFrc+c0dQnAKEGbWvXE7aqLY4JNw83K/JXNv1uj1CMYCOMu
3jZMrVEAHxJ9JtJEJ6BIeGk6d3qHQYI4VPAR7r1GJHCiVYb1Ka/fGMQ0BQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFO1bHlkTTKb4XMAvcS6yitS5a1IlMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvN1ZzZVdSTk1wdmhjd0M5eExyS0sxTGxyVWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDfQH
EBUDBwAqDfQHEBYwDQYJKoZIhvcNAQELBQADggEBAGYCvvtVFQGZ8wfW+XnUXoZo
6belqAnSbINi90MG3EE5/e0niVP+F75la4Js7cH7BUOaXBZoD2hVRwNpXfgimA/c
+qwa9AZXPi0VnT7MrHJJpxVmS1B9QEPgEpqO7OuJ4rEeVvM2tSiDqyw0188wCCSQ
AZMYyTdSbllWjhk4ACcV14HoeVDTia6uEirGLw/3Czp/w+uDJMkFMuXi19urZcll
S07dnha6O+5h4IhvHzvGVbStTdvMRhKjuWyDJe7PMOSdVgnEVwOFpNiA05lwxFNx
M6HS0gGLPsz4Lwz2lblj3keQji+Z2bm+G2uTz5KDkyWhJT8UqG8IOco53nJEmuI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org