Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/WzL7NFlKhQZnA5Ul0c53awea9yM.roa
File: WzL7NFlKhQZnA5Ul0c53awea9yM.roa (raw, json)
Hash identifier: m0pv5VbDmjLXjukJaIPw67oPcHrajGbvV0JcJnRx/m8=
Subject key identifier: 5B:32:FB:34:59:4A:85:06:67:03:95:25:D1:CE:77:6B:07:9A:F7:23
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA8299EF13DF939A1771C4A626769E
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/WzL7NFlKhQZnA5Ul0c53awea9yM.roa
Signing time: Mon 02 Jan 2023 13:45:03 +0000
ROA not before: Mon 02 Jan 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210881
IP address blocks: 2a0f:5707:abd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:82:99:ef:13:df:93:9a:17:71:c4:a6:26:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b32fb34594a850667039525d1ce776b079af723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:bf:11:c7:f9:5d:b1:7f:82:1b:81:39:2a:
47:08:53:b8:2c:77:d5:de:ab:56:45:b6:05:14:04:
2f:b0:89:ee:36:66:23:f6:48:99:0c:cf:ec:63:a7:
49:11:07:28:46:c1:7d:6e:7c:a1:99:39:af:61:95:
d8:a3:99:44:5b:33:a1:e2:5b:60:c9:5b:3d:e0:a2:
e3:68:9b:c3:13:17:7a:46:f2:67:cf:e7:e2:b0:ca:
66:e0:e9:14:06:3e:d0:28:b9:48:f5:54:d2:f8:10:
f0:59:92:59:de:11:0f:c9:40:6b:27:d5:66:61:bd:
48:24:04:84:a2:01:88:aa:b6:ad:dd:93:10:55:ae:
d6:8c:af:85:ad:cc:06:71:ab:f4:64:e1:4b:39:60:
27:21:9f:46:48:b7:96:04:3b:77:a2:ed:a8:63:25:
ca:2b:97:da:b3:3d:a8:43:21:42:8f:7e:89:07:d0:
d3:b1:4c:52:63:dd:24:68:24:51:6f:cd:c1:0e:8e:
b7:3f:c9:28:c9:97:14:a9:b6:38:0a:da:c3:e3:6d:
09:59:44:f0:94:e9:e8:ee:18:3c:2f:24:b7:a6:8e:
58:37:41:56:ce:37:8f:38:fa:e3:0a:e4:b0:7a:98:
d4:e6:a6:33:9c:39:3a:70:91:5f:d4:03:66:72:19:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:FB:34:59:4A:85:06:67:03:95:25:D1:CE:77:6B:07:9A:F7:23
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/WzL7NFlKhQZnA5Ul0c53awea9yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abd0::/44
Signature Algorithm: sha256WithRSAEncryption
2b:e1:43:00:51:00:bd:09:f4:c1:46:75:46:a8:a3:35:5a:a4:
59:97:c7:b7:7a:de:68:6e:a0:0d:06:4a:b0:72:03:ae:3e:cf:
17:93:b1:48:0b:3a:c7:ee:73:63:d1:9c:07:e2:06:03:ec:a0:
93:57:58:29:7e:64:b3:b4:db:e8:6b:1f:a5:7a:ad:5d:69:8e:
45:f1:ac:c6:af:a7:45:5e:e6:76:b6:0c:4c:db:fb:79:66:c8:
af:71:31:05:77:bb:0b:b7:32:a1:e3:57:cc:bf:c5:9a:26:19:
a2:26:37:25:f4:98:73:35:2f:9b:6b:c0:8b:3d:cd:2a:78:c8:
e5:bd:f5:62:e9:7a:65:5e:a4:e2:e9:7b:46:f8:89:d1:a8:17:
68:25:be:fc:af:1b:61:9e:e7:f4:32:35:4d:ea:72:38:f8:0f:
63:11:38:87:d1:58:22:4f:06:6d:2a:e2:f2:45:d8:61:cd:00:
a6:fd:f2:7b:c0:27:44:7e:e1:b7:5c:2f:d6:6d:e2:74:a7:c9:
31:13:6b:f4:08:86:09:10:b9:c5:c2:38:28:26:fd:c9:6d:f7:
ea:a8:a1:a1:00:6a:1c:19:0b:d0:3a:8d:34:8c:34:34:6a:00:
81:ca:7e:63:8d:46:20:46:56:ef:e8:8b:3b:d8:a9:bd:b1:b8:
b1:81:4a:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyuoKZ7xPfk5oXccSmJnaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjMyZmIzNDU5NGE4NTA2NjcwMzk1MjVkMWNlNzc2YjA3OWFmNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42/Ecf5XbF/ghuBOSpHCFO4LHfV
3qtWRbYFFAQvsInuNmYj9kiZDM/sY6dJEQcoRsF9bnyhmTmvYZXYo5lEWzOh4ltg
yVs94KLjaJvDExd6RvJnz+fisMpm4OkUBj7QKLlI9VTS+BDwWZJZ3hEPyUBrJ9Vm
Yb1IJASEogGIqrat3ZMQVa7WjK+FrcwGcav0ZOFLOWAnIZ9GSLeWBDt3ou2oYyXK
K5fasz2oQyFCj36JB9DTsUxSY90kaCRRb83BDo63P8koyZcUqbY4CtrD420JWUTw
lOno7hg8LyS3po5YN0FWzjePOPrjCuSwepjU5qYznDk6cJFf1ANmchnU9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFsy+zRZSoUGZwOVJdHOd2sHmvcjMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvV3pMN05GbEtoUVpuQTVVbDBjNTNhd2VhOXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6vQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAr4UMAUQC9CfTBRnVGqKM1WqRZl8e3et5obqAN
BkqwcgOuPs8Xk7FICzrH7nNj0ZwH4gYD7KCTV1gpfmSztNvoax+leq1daY5F8azG
r6dFXuZ2tgxM2/t5ZsivcTEFd7sLtzKh41fMv8WaJhmiJjcl9JhzNS+ba8CLPc0q
eMjlvfVi6XplXqTi6XtG+InRqBdoJb78rxthnuf0MjVN6nI4+A9jETiH0VgiTwZt
KuLyRdhhzQCm/fJ7wCdEfuG3XC/WbeJ0p8kxE2v0CIYJELnFwjgoJv3JbffqqKGh
AGocGQvQOo00jDQ0agCByn5jjUYgRlbv6Is72Km9sbixgUpn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org