Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vJ_aOtYFAd6HZDOlWMJUvSCsh0Q.roa
File: vJ_aOtYFAd6HZDOlWMJUvSCsh0Q.roa (raw, json)
Hash identifier: o6uITGZamqQyM+bxnPITtgMKNg5LdLnhR/gq7lD9KMY=
Subject key identifier: BC:9F:DA:3A:D6:05:01:DE:87:64:33:A5:58:C2:54:BD:20:AC:87:44
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA6AD81E115580EAA0E225E7DB2CB3
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vJ_aOtYFAd6HZDOlWMJUvSCsh0Q.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43959
IP address blocks: 2a0f:5701:fe11::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6a:d8:1e:11:55:80:ea:a0:e2:25:e7:db:2c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc9fda3ad60501de876433a558c254bd20ac8744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:f0:e6:9d:e3:52:d7:39:60:75:54:7b:ee:
5c:22:53:70:17:e9:19:28:bb:84:a5:3c:14:72:3c:
bd:54:35:87:23:6e:56:ab:1f:ab:21:d5:4f:c5:e1:
e4:ed:dd:ae:c9:b3:d3:00:0c:c6:0e:ba:17:ad:bb:
d9:d0:69:29:b5:86:59:e9:12:79:fd:26:dc:07:fd:
30:97:28:7b:b0:5a:4c:d1:0d:41:6c:1c:fc:ca:cb:
4d:63:21:c1:f9:64:6e:92:d6:ca:7c:d5:e6:87:80:
1e:4e:b2:f1:fa:0c:47:f0:df:db:6e:0e:04:d8:e9:
e1:72:00:ad:6f:4d:e3:5f:e1:66:68:cd:15:77:15:
c2:38:da:7d:17:cc:4f:b3:aa:9f:e6:07:04:4f:f6:
63:2d:ee:c5:04:f7:ae:19:06:ec:cb:60:ea:24:f0:
41:06:3d:00:64:64:13:07:eb:93:e7:55:e0:49:97:
53:08:78:79:45:04:f8:a3:07:25:84:4f:26:49:38:
53:1c:8d:e4:60:70:ae:f9:ca:44:60:f2:8f:51:79:
e5:73:0c:6b:8f:1c:83:cf:01:a0:3d:51:46:f3:c5:
0f:22:4a:c1:e0:11:8d:70:2a:cd:62:9a:74:31:58:
f8:0d:ee:46:1a:ad:29:90:27:0d:64:44:48:66:cf:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:DA:3A:D6:05:01:DE:87:64:33:A5:58:C2:54:BD:20:AC:87:44
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/vJ_aOtYFAd6HZDOlWMJUvSCsh0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5701:fe11::/48
Signature Algorithm: sha256WithRSAEncryption
33:b8:87:f4:ab:be:9a:47:a0:10:c2:07:fc:14:c9:d0:86:65:
aa:cd:a0:5c:45:b2:7c:59:bd:0a:f5:86:ce:33:e0:c6:56:aa:
55:53:16:b2:cb:df:b6:2f:db:c7:5b:e3:bf:f9:c8:33:ff:a9:
99:5e:0c:16:f4:24:e2:ff:de:a8:0e:61:4c:f4:4d:64:16:6c:
80:bc:c8:fc:6d:d1:68:bb:36:63:d1:78:85:fc:29:69:c2:e7:
7d:5f:c4:21:b9:11:74:26:46:22:7e:57:5d:79:ca:8b:e7:3c:
4c:32:67:80:21:f9:60:85:06:45:42:a0:24:62:eb:83:a4:ba:
76:bf:c8:8e:eb:fb:fe:d4:08:af:61:66:9f:24:24:ed:3f:8c:
d2:64:2a:9f:69:9c:12:4d:6d:06:bf:98:69:c8:5f:e0:10:2e:
2f:c9:54:ca:f1:e4:41:0b:04:9c:d3:d2:fb:58:ce:a2:c1:e8:
6f:ef:fe:45:9b:5f:dc:7e:69:dc:03:32:8f:55:14:ce:31:ff:
06:61:6f:99:2b:de:3e:95:5e:0b:4d:20:b4:96:db:9f:5c:91:
2b:0b:7c:06:62:c9:b7:62:2d:8e:a7:3f:1e:ca:b9:05:45:ad:
47:9b:a3:10:ab:01:3c:f1:87:07:8a:9c:81:8e:4c:a0:05:97:
a3:2f:ce:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyumrYHhFVgOqg4iXn2yyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzlmZGEzYWQ2MDUwMWRlODc2NDMzYTU1OGMyNTRiZDIwYWM4NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDDw5p3jUtc5YHVUe+5cIlNwF+kZ
KLuEpTwUcjy9VDWHI25Wqx+rIdVPxeHk7d2uybPTAAzGDroXrbvZ0GkptYZZ6RJ5
/SbcB/0wlyh7sFpM0Q1BbBz8ystNYyHB+WRuktbKfNXmh4AeTrLx+gxH8N/bbg4E
2OnhcgCtb03jX+FmaM0VdxXCONp9F8xPs6qf5gcET/ZjLe7FBPeuGQbsy2DqJPBB
Bj0AZGQTB+uT51XgSZdTCHh5RQT4owclhE8mSThTHI3kYHCu+cpEYPKPUXnlcwxr
jxyDzwGgPVFG88UPIkrB4BGNcCrNYpp0MVj4De5GGq0pkCcNZERIZs+NqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLyf2jrWBQHeh2QzpVjCVL0grIdEMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvdkpfYU90WUZBZDZIWkRPbFdNSlV2U0NzaDBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XAf4R
MA0GCSqGSIb3DQEBCwUAA4IBAQAzuIf0q76aR6AQwgf8FMnQhmWqzaBcRbJ8Wb0K
9YbOM+DGVqpVUxayy9+2L9vHW+O/+cgz/6mZXgwW9CTi/96oDmFM9E1kFmyAvMj8
bdFouzZj0XiF/Clpwud9X8QhuRF0JkYiflddecqL5zxMMmeAIflghQZFQqAkYuuD
pLp2v8iO6/v+1AivYWafJCTtP4zSZCqfaZwSTW0Gv5hpyF/gEC4vyVTK8eRBCwSc
09L7WM6iwehv7/5Fm1/cfmncAzKPVRTOMf8GYW+ZK94+lV4LTSC0ltufXJErC3wG
Ysm3Yi2Opz8eyrkFRa1Hm6MQqwE88YcHipyBjkygBZejL87Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org