Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/VHkkGzFbYnfQFSwErKOAvABY59c.roa
File: VHkkGzFbYnfQFSwErKOAvABY59c.roa (raw, json)
Hash identifier: S9mskCjv1/e3iNFbEVp44ir6P6BmWZoIB1n67z33w0M=
Subject key identifier: 54:79:24:1B:31:5B:62:77:D0:15:2C:04:AC:A3:80:BC:00:58:E7:D7
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C530103FD463550DE493D70C62DDB
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/VHkkGzFbYnfQFSwErKOAvABY59c.roa
Signing time: Mon 02 Jan 2023 10:34:48 +0000
ROA not before: Mon 02 Jan 2023 10:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210281
IP address blocks: 2a0d:f407:1033::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:53:01:03:fd:46:35:50:de:49:3d:70:c6:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5479241b315b6277d0152c04aca380bc0058e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:54:50:7d:1a:63:33:ff:f3:b4:62:40:bf:
72:1b:a6:1c:fb:3d:47:dd:73:0e:53:73:dc:fa:f5:
09:ee:03:d0:99:be:e9:40:a6:b0:f0:11:48:99:6d:
42:29:79:f2:05:8b:c5:77:2a:62:d3:95:80:55:03:
77:94:61:c5:b4:e3:7d:1f:35:9b:3a:86:5f:ca:07:
fa:0e:73:70:f9:c3:d0:37:74:5a:9d:3e:8c:a4:8a:
98:59:7f:43:dc:2e:24:a2:7e:bd:52:36:13:73:f6:
df:af:44:e8:88:06:e2:df:34:b4:09:8c:21:51:9d:
df:92:16:6f:3e:08:dd:3c:8a:d0:ae:be:cf:df:4a:
97:f1:90:a5:bb:c0:72:9a:7e:f6:ff:a0:65:66:3b:
82:b0:43:15:44:9e:92:ed:72:51:b2:5a:80:72:67:
c4:1c:59:d8:62:2d:75:ad:8b:c9:59:b5:bd:ca:20:
77:4f:e8:49:88:d8:1c:4f:32:77:b5:22:bd:40:02:
55:95:28:4b:91:ca:45:7c:87:66:d6:fe:29:fb:a2:
a2:28:32:cf:81:e8:82:96:51:36:51:9b:89:68:9d:
6f:36:26:9a:82:29:c9:22:c4:b9:c5:fd:53:e9:e6:
03:fd:a8:91:ca:83:f2:54:43:3d:85:83:59:69:f5:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:24:1B:31:5B:62:77:D0:15:2C:04:AC:A3:80:BC:00:58:E7:D7
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/VHkkGzFbYnfQFSwErKOAvABY59c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1033::/48
Signature Algorithm: sha256WithRSAEncryption
2b:30:7c:f7:42:01:a4:66:2f:d9:3d:63:c3:86:17:49:37:c5:
06:38:c9:8c:fe:9a:d3:ad:b3:66:a9:42:a0:d4:d4:95:7a:1c:
7c:40:fd:cf:31:c4:29:8d:62:01:49:59:54:0f:44:8e:f8:69:
60:0c:fc:db:b4:69:4e:68:99:ca:9b:c3:01:dc:05:09:3c:35:
bf:05:3b:14:7b:99:d7:97:65:14:a2:a3:23:32:bc:0e:72:3a:
eb:89:2f:1f:87:d6:dc:3b:bb:37:03:25:c3:4d:d5:83:be:2d:
22:49:b9:e8:fc:64:bc:9b:b0:28:58:58:31:a3:23:92:e6:58:
e5:1a:93:b3:c1:0a:3b:bb:5c:cb:a0:54:e9:24:55:99:06:3b:
67:b4:a2:55:0d:7e:62:47:29:fb:8f:2c:90:b0:a1:0a:74:88:
67:1b:dd:db:9f:1e:b1:ca:03:9c:63:61:14:82:cc:e6:82:3d:
c3:cb:c8:d6:76:6f:79:b4:e6:b8:72:43:f9:9f:14:6a:de:25:
67:fb:f1:9d:be:a2:e8:da:5c:c0:5c:2f:ad:d4:25:a6:d7:20:
36:95:fa:8c:bc:d3:a8:d2:5a:61:73:f1:d8:c6:e9:e3:1d:f4:
2a:17:e3:7d:1d:55:9e:c9:7f:8b:ef:28:cf:bc:25:6d:4f:70:
8c:cc:4e:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyDFMBA/1GNVDeST1wxi3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjMwMTAyMTAzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDc5MjQxYjMxNWI2Mjc3ZDAxNTJjMDRhY2EzODBiYzAwNThlN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZUUH0aYzP/87RiQL9yG6Yc+z1H
3XMOU3Pc+vUJ7gPQmb7pQKaw8BFImW1CKXnyBYvFdypi05WAVQN3lGHFtON9HzWb
OoZfygf6DnNw+cPQN3RanT6MpIqYWX9D3C4kon69UjYTc/bfr0ToiAbi3zS0CYwh
UZ3fkhZvPgjdPIrQrr7P30qX8ZClu8Bymn72/6BlZjuCsEMVRJ6S7XJRslqAcmfE
HFnYYi11rYvJWbW9yiB3T+hJiNgcTzJ3tSK9QAJVlShLkcpFfIdm1v4p+6KiKDLP
geiCllE2UZuJaJ1vNiaaginJIsS5xf1T6eYD/aiRyoPyVEM9hYNZafVDqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFR5JBsxW2J30BUsBKyjgLwAWOfXMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvVkhra0d6RmJZbmZRRlN3RXJLT0F2QUJZNTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg30BxAz
MA0GCSqGSIb3DQEBCwUAA4IBAQArMHz3QgGkZi/ZPWPDhhdJN8UGOMmM/prTrbNm
qUKg1NSVehx8QP3PMcQpjWIBSVlUD0SO+GlgDPzbtGlOaJnKm8MB3AUJPDW/BTsU
e5nXl2UUoqMjMrwOcjrriS8fh9bcO7s3AyXDTdWDvi0iSbno/GS8m7AoWFgxoyOS
5ljlGpOzwQo7u1zLoFTpJFWZBjtntKJVDX5iRyn7jyyQsKEKdIhnG93bnx6xygOc
Y2EUgszmgj3Dy8jWdm95tOa4ckP5nxRq3iVn+/GdvqLo2lzAXC+t1CWm1yA2lfqM
vNOo0lphc/HYxunjHfQqF+N9HVWeyX+L7yjPvCVtT3CMzE73
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:18 2024 by rpki-client on console-fra.rpki-client.org