Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzzXCDjVhAUgGq1hbXQReQBeUb8.roa
File: bzzXCDjVhAUgGq1hbXQReQBeUb8.roa (raw, json)
Hash identifier: gbV8rv5sOoynLxJ3dlTp+sBgFv/Xfu+n/EGhdCWavtc=
Subject key identifier: 6F:3C:D7:08:38:D5:84:05:20:1A:AD:61:6D:74:11:79:00:5E:51:BF
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DEF3C856A3C192768E9D4618185FB
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzzXCDjVhAUgGq1hbXQReQBeUb8.roa
Signing time: Sun 01 Jan 2023 22:05:05 +0000
ROA not before: Sun 01 Jan 2023 22:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205749
IP address blocks: 2a04:92c7:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ef:3c:85:6a:3c:19:27:68:e9:d4:61:81:85:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f3cd70838d58405201aad616d741179005e51bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:fb:4d:7c:90:94:de:3b:89:12:e4:3d:eb:
55:19:b2:5e:8e:5f:03:64:07:f9:73:c9:30:3f:09:
51:c5:b6:14:8c:a0:2b:c6:d3:62:7d:da:c6:42:61:
67:80:6c:b8:6f:ef:74:2a:69:e7:ce:53:88:da:52:
6d:3d:2e:31:71:8f:da:0b:c6:3d:78:4c:9b:8b:01:
7d:9d:5d:c0:72:e1:f1:a7:cf:64:8d:45:e9:86:40:
b7:19:bb:a2:34:d1:70:5b:47:27:90:01:ca:85:3d:
1d:5d:da:4e:cd:06:14:8f:e7:38:91:30:23:0c:a2:
01:55:74:b4:ed:c1:d5:5e:09:24:86:94:70:cb:3d:
79:36:57:a2:42:ef:81:df:b2:5b:e6:88:39:87:88:
16:50:69:f2:70:b0:75:23:75:9b:ce:d9:a9:b4:67:
f8:a0:31:4f:2e:92:c5:f1:3c:8e:86:40:7e:09:d9:
b6:ee:56:37:b9:d5:58:62:b9:8c:4f:5e:ee:8a:11:
d0:2f:62:75:f4:fb:f0:65:b9:15:5b:64:d4:09:a4:
38:03:35:a0:74:df:05:c4:fb:2a:f4:57:1f:27:7c:
f3:e0:11:28:f8:c2:8e:27:b8:fd:42:80:e8:ed:3f:
0c:08:73:c8:48:b9:78:4d:63:3d:68:ab:5a:b1:9b:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:D7:08:38:D5:84:05:20:1A:AD:61:6D:74:11:79:00:5E:51:BF
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzzXCDjVhAUgGq1hbXQReQBeUb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:31::/48
Signature Algorithm: sha256WithRSAEncryption
03:6d:94:4e:54:c6:48:7d:5c:2b:4e:05:52:27:9b:2c:f9:78:
cf:3d:17:fa:7d:25:e3:c6:2b:d0:46:9f:01:12:53:67:7f:10:
da:54:16:f6:18:5a:87:5b:a1:dd:77:c7:7d:c1:e4:e4:83:c6:
99:f9:db:f8:9f:9c:a5:e1:ab:c9:fd:3f:d2:31:9b:0b:ec:f5:
da:29:a4:2c:0c:db:fc:29:45:df:3f:f8:e2:ed:f7:ab:39:62:
21:30:6f:9e:7a:74:ff:0c:03:d3:b2:4a:30:ab:ad:7e:88:81:
07:b0:73:ad:3a:bf:99:7e:0f:40:06:b3:9a:b6:67:ea:6b:90:
b6:e3:8e:b5:a7:af:ea:dd:ac:4a:1f:ff:ee:95:b1:ca:a0:bb:
8f:68:5d:96:50:ad:dd:33:00:77:1b:62:ac:3a:8f:91:61:02:
17:d0:01:0f:12:0c:ab:f4:a9:8c:53:64:04:01:2b:32:b7:69:
de:03:8e:91:ae:f1:3f:2b:52:03:b0:bf:d4:b4:a4:80:cd:b6:
c3:53:1c:88:c7:8c:1d:07:4e:4e:1f:93:77:d3:11:33:49:65:
61:f4:1c:38:66:84:9a:28:48:56:97:a6:ed:1a:ff:b8:ae:ef:
11:ee:3c:d1:e4:6a:d1:be:59:ce:b0:51:0c:87:35:f8:a5:22:
7a:b6:9f:5d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvXe88hWo8GSdo6dRhgYX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjMwMTAxMjIwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjNjZDcwODM4ZDU4NDA1MjAxYWFkNjE2ZDc0MTE3OTAwNWU1MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszj7TXyQlN47iRLkPetVGbJejl8D
ZAf5c8kwPwlRxbYUjKArxtNifdrGQmFngGy4b+90KmnnzlOI2lJtPS4xcY/aC8Y9
eEybiwF9nV3AcuHxp89kjUXphkC3GbuiNNFwW0cnkAHKhT0dXdpOzQYUj+c4kTAj
DKIBVXS07cHVXgkkhpRwyz15NleiQu+B37Jb5og5h4gWUGnycLB1I3WbztmptGf4
oDFPLpLF8TyOhkB+Cdm27lY3udVYYrmMT17uihHQL2J19PvwZbkVW2TUCaQ4AzWg
dN8FxPsq9FcfJ3zz4BEo+MKOJ7j9QoDo7T8MCHPISLl4TWM9aKtasZtAmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG881wg41YQFIBqtYW10EXkAXlG/MB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvYnp6WENEalZoQVVnR3ExaGJYUVJlUUJlVWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSSxwAx
MA0GCSqGSIb3DQEBCwUAA4IBAQADbZROVMZIfVwrTgVSJ5ss+XjPPRf6fSXjxivQ
Rp8BElNnfxDaVBb2GFqHW6Hdd8d9weTkg8aZ+dv4n5yl4avJ/T/SMZsL7PXaKaQs
DNv8KUXfP/ji7ferOWIhMG+eenT/DAPTskowq61+iIEHsHOtOr+Zfg9ABrOatmfq
a5C24461p6/q3axKH//ulbHKoLuPaF2WUK3dMwB3G2KsOo+RYQIX0AEPEgyr9KmM
U2QEASsyt2neA46RrvE/K1IDsL/UtKSAzbbDUxyIx4wdB05OH5N30xEzSWVh9Bw4
ZoSaKEhWl6btGv+4ru8R7jzR5GrRvlnOsFEMhzX4pSJ6tp9d
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org