Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/Re-TFORwe8VhHfovLht8CgBpItg.roa
File: Re-TFORwe8VhHfovLht8CgBpItg.roa (raw, json)
Hash identifier: 9Rep3HTNnAQbV4rlmssmq/VkyKJSVh1+6zgKlStX45E=
Subject key identifier: 45:EF:93:14:E4:70:7B:C5:61:1D:FA:2F:2E:1B:7C:0A:00:69:22:D8
Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial: 018572C36751EC1B68A313F0FE2CA4D096D0
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/Re-TFORwe8VhHfovLht8CgBpItg.roa
Signing time: Mon 02 Jan 2023 13:54:46 +0000
ROA not before: Mon 02 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208985
IP address blocks: 2001:67c:914::/48 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:67:51:ec:1b:68:a3:13:f0:fe:2c:a4:d0:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Validity
Not Before: Jan 2 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ef9314e4707bc5611dfa2f2e1b7c0a006922d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:bb:0e:ee:85:e1:b5:2a:74:5a:07:d0:a4:
e9:c3:29:d0:24:2a:6f:33:37:b9:57:7b:40:a9:d5:
b0:41:3f:cc:96:1d:6e:3d:f5:d7:f6:cb:5d:8b:46:
a8:f8:36:96:0e:f3:21:a3:ab:55:ee:75:10:13:d0:
2e:82:bc:14:81:81:e0:fd:6b:66:ee:28:7c:6b:a6:
ce:42:a8:b9:84:1d:fd:74:ab:8c:66:56:90:81:fd:
5a:86:92:81:a8:d8:43:1b:64:6b:87:db:fd:3b:f0:
fe:f3:61:a8:34:eb:8a:6b:7a:5d:6d:60:c7:d4:ee:
cf:e5:45:9e:d9:1b:b0:5f:c0:ab:c4:2d:e4:54:2d:
b7:81:99:39:64:9e:d8:ad:18:10:ce:db:2a:a1:75:
15:1b:22:bf:24:aa:9a:e0:5f:54:7d:a9:fa:19:5f:
9a:0f:c6:bc:1d:11:48:e9:4f:18:80:23:63:46:79:
aa:4a:f4:6e:b7:9a:d2:45:28:02:34:2b:8a:10:16:
6c:6a:7f:ee:b2:8d:de:d1:90:81:70:bd:19:3a:f5:
26:d3:57:8f:ae:67:ea:4d:2a:46:fb:97:0c:41:25:
a8:58:fc:7a:a8:5c:40:cb:58:3f:9a:11:bf:53:80:
8c:9c:7b:f8:c6:6a:34:09:a6:d8:fc:e9:d1:10:9e:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EF:93:14:E4:70:7B:C5:61:1D:FA:2F:2E:1B:7C:0A:00:69:22:D8
X509v3 Authority Key Identifier:
keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/Re-TFORwe8VhHfovLht8CgBpItg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:914::/48
Signature Algorithm: sha256WithRSAEncryption
26:20:76:de:7a:ad:e9:7e:8d:71:f9:79:6a:25:64:23:55:6c:
f2:7d:79:8e:4a:7e:bf:39:a5:64:9e:c7:ae:82:e6:db:fa:66:
24:30:70:4b:4f:24:1a:d0:31:90:b8:39:82:60:38:e0:b9:62:
12:a7:06:0c:37:1b:ec:e8:bf:93:cc:a9:fb:45:76:c0:21:fd:
a8:43:9a:01:db:f5:fe:cb:a1:a1:a7:db:52:0c:81:42:2c:e3:
9e:c1:d7:ed:00:bb:3d:1a:02:dc:0d:d9:15:1a:96:9a:94:62:
62:69:f6:80:1e:b0:b7:23:b7:a8:6d:e6:58:c3:9b:1d:7f:59:
e5:60:b0:be:9a:4d:07:f4:81:46:4d:6c:d1:91:07:77:69:c7:
dc:85:cc:43:e8:88:3d:d7:bb:f5:44:87:a4:2d:d5:b1:e4:b5:
9c:21:ab:8e:71:27:02:b0:7f:73:ce:f7:83:d1:53:6b:16:4e:
97:9e:28:75:87:29:d0:23:97:22:de:3e:fc:c4:05:be:70:31:
71:1b:9d:17:af:9b:71:b3:f7:f6:44:94:2d:f9:01:4b:d1:ee:
8a:13:04:9c:d0:f8:29:64:0b:2a:70:32:18:6b:8e:89:fd:40:
55:fb:71:90:04:a7:29:ae:35:7d:6c:e4:19:24:62:9e:94:e6:
56:96:bb:db
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyw2dR7BtooxPw/iyk0JbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjMwMTAyMTM1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVmOTMxNGU0NzA3YmM1NjExZGZhMmYyZTFiN2MwYTAwNjkyMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNi7Du6F4bUqdFoH0KTpwynQJCpv
Mze5V3tAqdWwQT/Mlh1uPfXX9stdi0ao+DaWDvMho6tV7nUQE9AugrwUgYHg/Wtm
7ih8a6bOQqi5hB39dKuMZlaQgf1ahpKBqNhDG2Rrh9v9O/D+82GoNOuKa3pdbWDH
1O7P5UWe2RuwX8CrxC3kVC23gZk5ZJ7YrRgQztsqoXUVGyK/JKqa4F9Ufan6GV+a
D8a8HRFI6U8YgCNjRnmqSvRut5rSRSgCNCuKEBZsan/uso3e0ZCBcL0ZOvUm01eP
rmfqTSpG+5cMQSWoWPx6qFxAy1g/mhG/U4CMnHv4xmo0CabY/OnREJ78FQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEXvkxTkcHvFYR36Ly4bfAoAaSLYMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvUmUtVEZPUndlOFZoSGZvdkxodDhDZ0JwSXRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAkU
MA0GCSqGSIb3DQEBCwUAA4IBAQAmIHbeeq3pfo1x+XlqJWQjVWzyfXmOSn6/OaVk
nseugubb+mYkMHBLTyQa0DGQuDmCYDjguWISpwYMNxvs6L+TzKn7RXbAIf2oQ5oB
2/X+y6Ghp9tSDIFCLOOewdftALs9GgLcDdkVGpaalGJiafaAHrC3I7eobeZYw5sd
f1nlYLC+mk0H9IFGTWzRkQd3acfchcxD6Ig917v1RIekLdWx5LWcIauOcScCsH9z
zveD0VNrFk6Xnih1hynQI5ci3j78xAW+cDFxG50Xr5txs/f2RJQt+QFL0e6KEwSc
0PgpZAsqcDIYa46J/UBV+3GQBKcprjV9bOQZJGKelOZWlrvb
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:18 2024 by rpki-client on console-fra.rpki-client.org