Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ycCZHk6qW558J5p6T8lF0vnwxzE.roa
File: ycCZHk6qW558J5p6T8lF0vnwxzE.roa (raw, json)
Hash identifier: ZO3iaCFGeG+RsnhRCcCtv5pWsgW7L7TdGrPN/aGAKMQ=
Subject key identifier: C9:C0:99:1E:4E:AA:5B:9E:7C:27:9A:7A:4F:C9:45:D2:F9:F0:C7:31
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 01856B00AC7F8BD9519E1B7C79D56FEFA1A2
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ycCZHk6qW558J5p6T8lF0vnwxzE.roa
Signing time: Sun 01 Jan 2023 01:44:44 +0000
ROA not before: Sun 01 Jan 2023 01:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400587
IP address blocks: 2a07:e04::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:ac:7f:8b:d9:51:9e:1b:7c:79:d5:6f:ef:a1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 01:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9c0991e4eaa5b9e7c279a7a4fc945d2f9f0c731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:d4:9f:32:af:dd:fa:f3:6b:c5:63:ba:0f:
7c:f3:b4:63:61:83:9e:fa:9c:20:c4:2f:8e:24:3a:
2e:12:96:dd:dd:0c:9e:d5:b0:dc:c7:3e:ad:5d:7a:
20:db:3b:dc:41:74:6a:91:d3:92:66:5e:bd:15:33:
fb:41:57:d2:63:8d:83:6e:0e:7f:a6:1e:50:71:b2:
08:06:d8:8b:02:26:6a:02:1c:a1:7a:fd:1e:1e:6a:
09:b5:b5:6e:b6:b4:fb:52:b5:3f:af:59:c2:64:89:
2b:97:a5:ed:4e:35:74:e9:9b:d8:b6:3c:2f:07:de:
b3:fe:de:cf:14:d0:58:cd:97:08:7c:d9:a0:d4:bf:
87:2e:31:06:dd:6a:3b:d6:7f:fe:24:b3:1f:5f:71:
0a:f3:94:71:7f:58:36:02:91:89:81:24:88:cb:1f:
e5:51:af:2a:2b:86:87:3d:69:0b:08:81:4d:f6:06:
40:36:33:c6:b1:3d:7a:d4:c4:64:f9:2a:48:80:89:
e6:78:56:d7:62:d0:33:e4:fd:de:ab:85:7e:6f:12:
1a:7f:72:03:a5:92:06:83:76:69:76:20:aa:fa:1f:
dd:6a:4e:2d:28:02:2e:63:03:5e:a3:d9:37:68:97:
86:eb:4a:86:56:ee:03:3e:5a:c4:ed:7f:ee:59:a8:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:99:1E:4E:AA:5B:9E:7C:27:9A:7A:4F:C9:45:D2:F9:F0:C7:31
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/ycCZHk6qW558J5p6T8lF0vnwxzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e04::/36
Signature Algorithm: sha256WithRSAEncryption
ba:d6:34:a5:4a:47:84:91:bc:13:31:ab:dc:1a:ff:2b:8f:1d:
ec:46:6a:a1:0d:80:82:6a:eb:bf:fc:5d:43:ff:82:23:2b:02:
c6:43:7b:bc:df:27:55:01:df:97:79:82:29:c6:5a:0a:8e:e9:
cb:9f:ce:39:17:3d:d4:79:22:46:f5:70:d9:09:ae:01:87:d3:
51:80:b7:3b:ca:53:f0:5a:12:c2:d7:8f:0e:f2:df:14:e3:bf:
71:2d:91:23:77:47:5e:6d:36:43:83:50:57:b0:4a:9e:b8:9d:
93:27:ea:aa:1e:3b:42:d3:0d:bb:1f:4c:cf:d9:41:9a:06:61:
89:8d:c5:67:ab:48:a0:47:3c:1c:66:35:e6:5c:d8:4b:8a:36:
07:d9:c7:81:88:80:9a:c5:5c:d1:ca:29:b7:90:f4:f6:99:98:
d7:81:7e:27:a6:dc:8c:de:f8:29:f6:25:85:58:da:ca:1f:1e:
ad:b2:97:05:7a:b9:a1:ba:16:97:04:c8:17:af:4f:d8:b5:6b:
7e:1f:54:47:28:ef:c4:2d:23:79:e9:8c:3a:12:85:e0:68:16:
31:fa:39:e5:48:37:4a:00:e3:53:ba:e3:05:42:7d:54:9d:6d:
26:43:af:79:53:8e:ec:13:c0:55:d3:68:1a:8d:cb:45:a6:33:
25:a0:ae:80
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVrAKx/i9lRnht8edVv76GiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx
ODA1MTYwHhcNMjMwMTAxMDE0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWMwOTkxZTRlYWE1YjllN2MyNzlhN2E0ZmM5NDVkMmY5ZjBjNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf3UnzKv3frza8Vjug9887RjYYOe
+pwgxC+OJDouEpbd3Qye1bDcxz6tXXog2zvcQXRqkdOSZl69FTP7QVfSY42Dbg5/
ph5QcbIIBtiLAiZqAhyhev0eHmoJtbVutrT7UrU/r1nCZIkrl6XtTjV06ZvYtjwv
B96z/t7PFNBYzZcIfNmg1L+HLjEG3Wo71n/+JLMfX3EK85Rxf1g2ApGJgSSIyx/l
Ua8qK4aHPWkLCIFN9gZANjPGsT161MRk+SpIgInmeFbXYtAz5P3eq4V+bxIaf3ID
pZIGg3ZpdiCq+h/dak4tKAIuYwNeo9k3aJeG60qGVu4DPlrE7X/uWahotQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMnAmR5OqluefCeaek/JRdL58McxMB8GA1UdIwQY
MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt
ZjFmODAyZTY2MTNiLzEveWNDWkhrNnFXNTU4SjVwNlQ4bEYwdm53eHpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi
LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgcOBAAw
DQYJKoZIhvcNAQELBQADggEBALrWNKVKR4SRvBMxq9wa/yuPHexGaqENgIJq67/8
XUP/giMrAsZDe7zfJ1UB35d5ginGWgqO6cufzjkXPdR5Ikb1cNkJrgGH01GAtzvK
U/BaEsLXjw7y3xTjv3EtkSN3R15tNkODUFewSp64nZMn6qoeO0LTDbsfTM/ZQZoG
YYmNxWerSKBHPBxmNeZc2EuKNgfZx4GIgJrFXNHKKbeQ9PaZmNeBfiem3Ize+Cn2
JYVY2sofHq2ylwV6uaG6FpcEyBevT9i1a34fVEco78QtI3npjDoSheBoFjH6OeVI
N0oA41O64wVCfVSdbSZDr3lTjuwTwFXTaBqNy0WmMyWgroA=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:45 2024 by rpki-client on console-ams.rpki-client.org