Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Z8LS9Ei9xyt2PQhvY-EmUUmGwq4.roa
File: Z8LS9Ei9xyt2PQhvY-EmUUmGwq4.roa (raw, json)
Hash identifier: iHSmgnZ/Lxqu0gzfspJgakk9Qd92u+7hG8alxEy39dE=
Subject key identifier: 67:C2:D2:F4:48:BD:C7:2B:76:3D:08:6F:63:E1:26:51:49:86:C2:AE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA87C133C1238620F1C012418AF4A1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Z8LS9Ei9xyt2PQhvY-EmUUmGwq4.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212592
IP address blocks: 2a0f:5707:aa90::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:87:c1:33:c1:23:86:20:f1:c0:12:41:8a:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67c2d2f448bdc72b763d086f63e126514986c2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:dd:df:99:9a:61:0d:5d:5a:70:e9:47:73:
e9:ce:8a:b7:eb:7c:84:a7:61:10:28:95:e5:13:fd:
5f:dc:62:fd:d9:ea:11:af:15:ad:ae:11:f4:b3:3d:
ed:0d:cb:b8:85:89:e4:30:55:20:1b:23:2a:10:71:
22:88:aa:3d:65:71:bf:fd:29:ff:0c:a9:c8:56:d5:
5d:5d:97:ad:ad:25:7a:a9:e9:90:d4:ed:c7:00:24:
64:8c:a7:42:05:17:12:7d:c4:f6:6b:f1:ff:a0:96:
9c:86:19:e6:d5:98:fe:af:5f:ce:dd:7b:5a:ca:2f:
ee:47:11:a0:14:84:28:42:29:2b:09:9c:be:22:e5:
cd:00:8e:6b:9f:ba:25:57:55:54:21:ec:79:3c:37:
0f:11:e5:b9:50:43:61:57:65:99:56:4f:14:8d:05:
07:aa:c5:9a:e7:84:cd:cf:12:7f:83:94:90:89:08:
a2:ce:3c:82:c6:bb:21:37:04:16:55:16:fe:7b:9e:
67:d9:30:0b:ec:e2:8a:ae:87:cf:7e:7d:0b:6a:d0:
da:be:22:8e:54:51:33:5f:e9:70:a0:bc:3c:da:38:
6a:06:02:93:fa:07:3e:f0:42:0c:64:33:ed:b6:aa:
43:d4:8f:e3:99:c4:d8:cc:66:6c:9e:58:d3:b8:38:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:D2:F4:48:BD:C7:2B:76:3D:08:6F:63:E1:26:51:49:86:C2:AE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Z8LS9Ei9xyt2PQhvY-EmUUmGwq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa90::/44
Signature Algorithm: sha256WithRSAEncryption
8c:1d:9f:98:e3:54:60:b8:96:74:e0:0d:70:33:79:59:c8:0d:
20:32:a3:8d:fe:d5:53:f7:78:2a:7a:c2:e9:c0:ce:a4:39:66:
18:22:8a:a7:58:0d:24:d7:62:f8:f8:82:b8:37:56:22:dc:a0:
af:0c:57:b9:05:f6:53:da:d0:21:b6:16:03:aa:a2:09:47:9c:
5c:bb:6e:22:ea:4d:7b:e6:0c:90:bc:1e:f5:b7:53:5d:d1:69:
ac:cb:76:fa:cb:58:3b:61:fb:d8:a5:ee:81:4d:31:d1:0d:f7:
79:0b:7c:7e:d3:59:50:e6:c4:fa:30:f7:e0:b9:88:f6:f8:60:
b1:29:b0:ea:20:60:9a:60:52:1c:6e:7d:71:cd:d3:b4:a1:4a:
a2:91:74:ad:1c:6d:2c:71:d6:dc:27:39:fc:ca:9d:ee:02:69:
dd:ce:2d:4c:b5:7a:98:e5:97:5f:56:d0:74:b3:2a:e7:36:34:
1c:c5:da:2c:b1:fa:75:6b:05:0e:cd:c2:55:be:f0:80:d8:c4:
6a:00:69:c8:09:3a:84:7d:1e:d9:d0:fa:0b:d9:14:8e:78:fc:
a6:d5:2a:db:d2:f3:73:04:d8:6d:f5:4a:9a:30:5b:06:5f:67:
ee:e9:60:ff:05:58:f5:1d:77:6b:33:87:e8:db:5d:46:4f:e0:
68:0e:fd:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyuofBM8EjhiDxwBJBivShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2MyZDJmNDQ4YmRjNzJiNzYzZDA4NmY2M2UxMjY1MTQ5ODZjMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLTd35maYQ1dWnDpR3Ppzoq363yE
p2EQKJXlE/1f3GL92eoRrxWtrhH0sz3tDcu4hYnkMFUgGyMqEHEiiKo9ZXG//Sn/
DKnIVtVdXZetrSV6qemQ1O3HACRkjKdCBRcSfcT2a/H/oJachhnm1Zj+r1/O3Xta
yi/uRxGgFIQoQikrCZy+IuXNAI5rn7olV1VUIex5PDcPEeW5UENhV2WZVk8UjQUH
qsWa54TNzxJ/g5SQiQiizjyCxrshNwQWVRb+e55n2TAL7OKKrofPfn0LatDaviKO
VFEzX+lwoLw82jhqBgKT+gc+8EIMZDPttqpD1I/jmcTYzGZsnljTuDgygwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGfC0vRIvccrdj0Ib2PhJlFJhsKuMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvWjhMUzlFaTl4eXQyUFFodlktRW1VVW1Hd3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6qQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCMHZ+Y41RguJZ04A1wM3lZyA0gMqON/tVT93gq
esLpwM6kOWYYIoqnWA0k12L4+IK4N1Yi3KCvDFe5BfZT2tAhthYDqqIJR5xcu24i
6k175gyQvB71t1Nd0Wmsy3b6y1g7YfvYpe6BTTHRDfd5C3x+01lQ5sT6MPfguYj2
+GCxKbDqIGCaYFIcbn1xzdO0oUqikXStHG0scdbcJzn8yp3uAmndzi1MtXqY5Zdf
VtB0syrnNjQcxdossfp1awUOzcJVvvCA2MRqAGnICTqEfR7Z0PoL2RSOePym1Srb
0vNzBNht9UqaMFsGX2fu6WD/BVj1HXdrM4fo211GT+BoDv0e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org