Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/zqVDg9v5x_2_Q0i-yWDhW7paGVc.roa
File: zqVDg9v5x_2_Q0i-yWDhW7paGVc.roa (raw, json)
Hash identifier: aHpsf4TQDV4Y35tzPdCBXQVFTPgKrHGKOco0oUphGC4=
Subject key identifier: CE:A5:43:83:DB:F9:C7:FD:BF:43:48:BE:C9:60:E1:5B:BA:5A:19:57
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 0187C1DD581A99EC61C21BF7229BB440BA51
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/zqVDg9v5x_2_Q0i-yWDhW7paGVc.roa
Signing time: Thu 27 Apr 2023 08:38:41 +0000
ROA not before: Thu 27 Apr 2023 08:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a09:4bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Oct 2023 19:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:dd:58:1a:99:ec:61:c2:1b:f7:22:9b:b4:40:ba:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Apr 27 08:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea54383dbf9c7fdbf4348bec960e15bba5a1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:ae:89:e9:9b:ae:13:88:ed:10:80:b9:20:
b0:ab:e6:28:8f:91:8a:8f:e9:db:c4:34:de:ba:22:
c7:1b:3a:40:c0:f4:3e:eb:d2:86:e5:37:d2:62:75:
2c:b0:1d:45:92:b3:e9:04:59:99:7a:00:65:f1:d5:
d1:d3:8c:da:37:a0:43:95:1b:93:32:08:6f:4f:d2:
37:4a:5e:bb:d0:d3:8a:cd:eb:3d:bf:4b:bd:93:3e:
20:98:c2:cc:ec:1e:e6:34:49:66:76:1f:9a:bf:73:
1b:0b:37:64:64:9c:bf:c0:bb:b3:42:af:fa:c4:3c:
65:ba:19:db:61:b0:e9:ce:58:df:7e:f3:7e:e2:35:
b2:d8:3f:18:58:26:aa:2f:30:87:d5:c3:92:43:f6:
96:27:74:c2:56:35:4b:5d:f7:d2:0a:aa:a6:ad:9f:
61:a3:1a:93:63:5e:69:b1:0b:ea:ab:d1:ee:57:b1:
70:34:ee:74:c4:01:d1:81:8a:bf:b5:88:62:9f:5c:
16:33:0c:53:4d:b6:2f:dd:56:0b:49:a0:72:3f:d1:
71:13:34:02:55:65:bd:b3:b7:14:d8:77:ca:c5:7c:
21:11:64:5b:65:1e:9c:a8:47:fe:8f:96:22:96:65:
7a:a0:d1:3d:b5:12:33:d9:da:50:b7:a1:dc:25:ef:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:43:83:DB:F9:C7:FD:BF:43:48:BE:C9:60:E1:5B:BA:5A:19:57
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/zqVDg9v5x_2_Q0i-yWDhW7paGVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:10:76:7c:89:8a:81:e7:1d:ea:23:22:03:34:3c:ad:be:4b:
bf:1c:d0:7c:1c:9f:c4:c3:38:f5:45:ab:4c:e9:1f:23:6d:e0:
d3:60:bf:bd:32:ed:cd:80:57:13:3c:34:9b:dd:cf:1e:c1:54:
c7:00:09:23:6f:01:e7:88:d7:49:56:74:74:5a:b7:74:36:bf:
08:d8:3f:69:a4:7c:0a:8d:55:1b:31:88:b5:bd:27:95:dd:f3:
26:16:38:d5:a7:14:cc:6d:ee:31:e5:06:7d:3a:39:4e:c8:ab:
81:00:0a:9b:30:22:94:8a:6b:a9:01:8d:6c:90:c1:0d:85:9f:
31:64:6a:6b:11:d9:c4:ca:9c:89:31:56:df:f7:4a:52:e2:c4:
75:9c:ac:21:aa:32:45:c2:b7:ff:b5:89:5c:ca:ff:a3:48:3d:
3a:7c:68:67:94:54:eb:37:70:b9:78:d2:76:99:97:41:19:c9:
22:1f:fb:2a:bb:f6:f9:da:76:82:44:4a:03:d8:e8:71:0e:ec:
03:32:1a:a4:fa:2f:60:ac:42:8c:74:77:74:94:3e:f5:10:84:
05:5b:2d:cb:79:36:34:39:af:06:5a:8d:67:fc:bb:61:69:33:
60:13:f8:0a:14:39:0e:9b:12:27:05:5d:09:f3:e9:cf:83:49:
a7:8b:f1:c8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYfB3Vgamexhwhv3Ipu0QLpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NzY1MGQwOTUxNTI5YjFhODE3MjMyYzEyYzQyZTQ5Yjg4
OWUxYjgwHhcNMjMwNDI3MDgzODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWE1NDM4M2RiZjljN2ZkYmY0MzQ4YmVjOTYwZTE1YmJhNWExOTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfyuiembrhOI7RCAuSCwq+Yoj5GK
j+nbxDTeuiLHGzpAwPQ+69KG5TfSYnUssB1FkrPpBFmZegBl8dXR04zaN6BDlRuT
MghvT9I3Sl670NOKzes9v0u9kz4gmMLM7B7mNElmdh+av3MbCzdkZJy/wLuzQq/6
xDxluhnbYbDpzljffvN+4jWy2D8YWCaqLzCH1cOSQ/aWJ3TCVjVLXffSCqqmrZ9h
oxqTY15psQvqq9HuV7FwNO50xAHRgYq/tYhin1wWMwxTTbYv3VYLSaByP9FxEzQC
VWW9s7cU2HfKxXwhEWRbZR6cqEf+j5YilmV6oNE9tRIz2dpQt6HcJe9akwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM6lQ4Pb+cf9v0NIvslg4Vu6WhlXMB8GA1UdIwQY
MBaAFHh2UNCVFSmxqBcjLBLELkm4ieG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhaUTBKVVZLYkdvRnlNc0VzUXVTYmlKNGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNzM1ZTMtMDBhYS00MDVkLTg5YmIt
OTZhNDA0Yzc5MGI3LzEvenFWRGc5djV4XzJfUTBpLXlXRGhXN3BhR1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wNzM1ZTMtMDBhYS00MDVkLTg5YmItOTZhNDA0Yzc5MGI3
LzEvZUhaUTBKVVZLYkdvRnlNc0VzUXVTYmlKNGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKglLwDAN
BgkqhkiG9w0BAQsFAAOCAQEAKxB2fImKgecd6iMiAzQ8rb5LvxzQfByfxMM49UWr
TOkfI23g02C/vTLtzYBXEzw0m93PHsFUxwAJI28B54jXSVZ0dFq3dDa/CNg/aaR8
Co1VGzGItb0nld3zJhY41acUzG3uMeUGfTo5TsirgQAKmzAilIprqQGNbJDBDYWf
MWRqaxHZxMqciTFW3/dKUuLEdZysIaoyRcK3/7WJXMr/o0g9OnxoZ5RU6zdwuXjS
dpmXQRnJIh/7Krv2+dp2gkRKA9jocQ7sAzIapPovYKxCjHR3dJQ+9RCEBVsty3k2
NDmvBlqNZ/y7YWkzYBP4ChQ5DpsSJwVdCfPpz4NJp4vxyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:53 2024 by rpki-client on console-ams.rpki-client.org