Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/k7Sf99gC8XVDSXs413DxS72tCMk.roa
File: k7Sf99gC8XVDSXs413DxS72tCMk.roa (raw, json)
Hash identifier: 4a/ZkoFKmd3uYJlXFokH9c44K/H1WhQY1aIfkr5Giuw=
Subject key identifier: 93:B4:9F:F7:D8:02:F1:75:43:49:7B:38:D7:70:F1:4B:BD:AD:08:C9
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 01856B935F1C9013BCE966E52313C39DE840
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/k7Sf99gC8XVDSXs413DxS72tCMk.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 2a00:a080::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5f:1c:90:13:bc:e9:66:e5:23:13:c3:9d:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b49ff7d802f17543497b38d770f14bbdad08c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:96:2e:fe:6e:5c:f1:76:39:f4:17:41:78:
b6:ba:6f:a6:b4:86:f6:7c:dc:61:76:3d:70:d6:19:
a2:c1:a2:dc:f3:a1:25:75:1f:d5:43:c1:46:34:bb:
5e:72:9d:d9:cc:0f:2f:f9:56:3c:cd:59:f7:07:9f:
49:bf:7e:6c:81:9b:7f:04:a6:ad:e8:ac:e9:c3:b8:
18:dc:e6:af:ae:ba:94:99:46:59:41:28:54:a2:a2:
8f:c8:71:59:c9:00:f3:e4:48:6c:9e:3c:b3:9b:af:
43:6a:33:dc:6c:14:34:f8:7c:69:0c:6a:58:70:07:
8c:d2:94:ff:e0:21:70:3e:49:51:c8:52:b7:af:19:
08:ea:aa:bc:64:4e:3b:74:b6:8d:b5:1f:ee:fe:54:
0a:19:cc:cf:70:67:7f:82:a2:0c:9c:06:c4:18:62:
a6:d5:14:e1:55:1f:85:4b:b5:06:89:2a:fa:54:7f:
97:57:a1:17:2c:ea:41:93:be:7e:dd:92:24:d6:f0:
1c:2a:09:6c:ee:b9:a2:da:a8:e2:ae:5c:ef:af:ce:
7f:f6:df:c6:79:de:1b:c4:73:de:af:03:a0:92:05:
c5:6d:1a:f1:d0:93:df:1f:cd:64:c5:4f:41:1a:2b:
14:ce:2b:87:b9:a2:e8:d4:68:ff:41:64:a7:b3:b2:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:9F:F7:D8:02:F1:75:43:49:7B:38:D7:70:F1:4B:BD:AD:08:C9
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/k7Sf99gC8XVDSXs413DxS72tCMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
38:c6:71:b6:ef:3e:b8:9a:9d:f4:3f:69:70:fd:75:20:01:41:
0d:de:50:66:99:18:a3:56:47:cf:7b:b4:90:87:a9:05:af:05:
66:c7:cc:d6:07:18:5f:ca:ff:33:42:54:7a:a4:e9:c3:41:db:
e2:20:80:78:44:c3:aa:86:06:64:dd:24:05:b5:87:3f:57:ed:
f8:b3:70:e9:36:a3:22:e4:88:c9:50:80:bc:25:92:c9:5c:d1:
27:c6:72:be:41:3d:4d:bc:3c:b2:f2:0d:f9:08:a4:82:52:ae:
61:fd:93:22:53:e9:25:52:dd:18:6d:3f:92:55:fd:6a:8f:1d:
c6:3b:22:6c:5a:e3:85:15:0a:fa:1e:0f:51:c8:f5:32:81:0e:
37:1f:99:0e:7f:bd:ef:60:1f:1f:21:a1:dd:d5:81:c0:0a:89:
b5:bb:4e:b1:a0:db:bc:93:91:1d:e6:da:3e:3c:8a:20:9c:89:
1b:ad:db:65:45:2f:87:83:49:3a:a1:64:e4:74:f5:70:6e:1a:
67:50:5b:8c:9d:e5:56:2e:f3:af:3d:2c:5e:9b:0d:83:86:28:
06:c1:ff:f0:ef:ff:c0:df:f5:12:91:98:59:3e:b0:21:96:99:
b0:b3:3a:37:66:71:07:be:37:ec:45:b3:75:89:87:1d:07:67:
4b:f8:36:9b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVrk18ckBO86WblIxPDnehAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjgwZTYwYjVhZGY0NWFlYmE1YzBjOGFiY2NjNjM5OTdh
MGYxZGIwHhcNMjMwMTAxMDQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2I0OWZmN2Q4MDJmMTc1NDM0OTdiMzhkNzcwZjE0YmJkYWQwOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEKWLv5uXPF2OfQXQXi2um+mtIb2
fNxhdj1w1hmiwaLc86EldR/VQ8FGNLtecp3ZzA8v+VY8zVn3B59Jv35sgZt/BKat
6Kzpw7gY3OavrrqUmUZZQShUoqKPyHFZyQDz5Ehsnjyzm69DajPcbBQ0+HxpDGpY
cAeM0pT/4CFwPklRyFK3rxkI6qq8ZE47dLaNtR/u/lQKGczPcGd/gqIMnAbEGGKm
1RThVR+FS7UGiSr6VH+XV6EXLOpBk75+3ZIk1vAcKgls7rmi2qjirlzvr85/9t/G
ed4bxHPerwOgkgXFbRrx0JPfH81kxU9BGisUziuHuaLo1Gj/QWSns7IZWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJO0n/fYAvF1Q0l7ONdw8Uu9rQjJMB8GA1UdIwQY
MBaAFFe4DmC1rfRa66XAyKvMxjmXoPHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMt
ZTZlOGFhZTM0ODI2LzEvazdTZjk5Z0M4WFZEU1hzNDEzRHhTNzJ0Q01rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMtZTZlOGFhZTM0ODI2
LzEvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCggDAN
BgkqhkiG9w0BAQsFAAOCAQEAOMZxtu8+uJqd9D9pcP11IAFBDd5QZpkYo1ZHz3u0
kIepBa8FZsfM1gcYX8r/M0JUeqTpw0Hb4iCAeETDqoYGZN0kBbWHP1ft+LNw6Taj
IuSIyVCAvCWSyVzRJ8ZyvkE9Tbw8svIN+QikglKuYf2TIlPpJVLdGG0/klX9ao8d
xjsibFrjhRUK+h4PUcj1MoEONx+ZDn+972AfHyGh3dWBwAqJtbtOsaDbvJORHeba
PjyKIJyJG63bZUUvh4NJOqFk5HT1cG4aZ1BbjJ3lVi7zrz0sXpsNg4YoBsH/8O//
wN/1EpGYWT6wIZaZsLM6N2ZxB7437EWzdYmHHQdnS/g2mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org