Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZV1OsAU3_Y3dcK7sPShvrl8GTtA.roa
File: ZV1OsAU3_Y3dcK7sPShvrl8GTtA.roa (raw, json)
Hash identifier: BNWamvOb/1PZy0exVeFLxGH4lIlNv3qdVXkE7tiOyWw=
Subject key identifier: 65:5D:4E:B0:05:37:FD:8D:DD:70:AE:EC:3D:28:6F:AE:5F:06:4E:D0
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BD3B9BEF9BA4222E9D97F6DA8E1D
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZV1OsAU3_Y3dcK7sPShvrl8GTtA.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61050
IP address blocks: 2a00:ece1:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bd:3b:9b:ef:9b:a4:22:2e:9d:97:f6:da:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655d4eb00537fd8ddd70aeec3d286fae5f064ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:1d:f8:79:14:04:b8:49:11:db:d8:28:af:
48:10:d1:a4:03:02:78:c9:b8:54:72:14:10:e4:db:
f1:10:5c:63:c6:53:6f:21:4a:3d:c0:51:81:a7:c9:
d9:38:be:8a:4c:57:55:77:79:25:36:96:43:04:c8:
5e:c8:06:7f:01:44:fb:ae:27:c2:fa:2d:b2:c1:78:
ab:7e:5a:0a:04:f9:3c:38:1a:68:d6:e9:0e:64:c8:
7a:fb:8f:c5:82:e2:4a:51:1f:45:a7:8a:1b:21:76:
d7:18:22:3f:f3:0c:4b:fb:99:c6:ba:f1:1e:b8:c6:
62:fd:8f:94:70:39:e1:0e:87:22:e9:21:39:cc:11:
09:52:fc:65:a8:55:48:92:cd:37:ea:40:a0:c6:5e:
92:2c:ca:1d:82:84:9d:29:ef:0c:f1:ff:ed:a2:81:
b6:ff:bf:3c:78:1b:02:38:bc:9c:53:2b:3f:66:3a:
de:6d:a5:d3:06:19:4c:1c:ef:5b:f0:f7:47:7a:45:
b2:fe:ad:ef:a3:26:ca:01:46:f7:be:86:93:b4:0f:
bd:58:3e:d7:e9:b1:08:30:23:d1:67:8d:9a:4b:8c:
44:cd:9d:65:b9:04:85:c0:f2:1c:f1:b6:9f:0e:99:
fc:4b:4c:24:d4:19:61:cb:5f:91:38:22:e5:43:64:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:4E:B0:05:37:FD:8D:DD:70:AE:EC:3D:28:6F:AE:5F:06:4E:D0
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ZV1OsAU3_Y3dcK7sPShvrl8GTtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:1::/48
Signature Algorithm: sha256WithRSAEncryption
79:3b:65:e1:6b:5e:57:09:54:c9:4a:fd:1c:ac:a2:61:02:a9:
e4:e4:67:9d:84:26:60:9c:3b:98:2c:e5:9a:23:04:72:dd:cf:
9b:fb:ec:e7:f6:34:eb:08:84:1e:8b:f3:2b:1a:d1:dd:2b:39:
a2:1f:a3:b9:b3:e7:15:5d:a7:b3:43:c1:1f:57:bc:bd:dc:8a:
c7:48:52:21:5a:78:66:47:06:b2:af:70:55:0b:79:d5:e3:45:
e3:c4:6f:2f:b7:22:95:87:6e:d1:c1:63:ff:b5:68:d5:2d:da:
ba:0d:a8:0b:c5:ea:f7:3b:0f:3d:71:d0:16:24:58:f1:c4:e3:
c5:90:49:f4:5b:03:fd:7a:e8:9b:e8:2b:00:8e:21:71:d4:6c:
fc:2c:56:7d:9f:99:9c:9e:9a:70:49:fe:cb:c3:12:57:42:59:
01:95:b2:dc:5d:79:29:3a:b9:41:1c:dc:64:fe:7c:04:79:c0:
47:54:70:6d:1e:68:c5:c6:44:d3:7d:8a:66:78:90:fa:b6:9c:
5d:20:d6:e0:36:dd:ca:1d:9c:7f:e0:b4:81:e1:20:b2:b8:5c:
fb:fa:da:fd:e4:e5:48:82:fc:db:c1:7f:d7:f5:d6:32:7f:3f:
87:0a:23:72:f9:66:e9:2b:9a:5b:66:31:ce:01:9d:5f:d3:56:
25:9d:81:97
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxOb07m++bpCIunZf22o4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjMwMTAyMDY0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTVkNGViMDA1MzdmZDhkZGQ3MGFlZWMzZDI4NmZhZTVmMDY0ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPgd+HkUBLhJEdvYKK9IENGkAwJ4
ybhUchQQ5NvxEFxjxlNvIUo9wFGBp8nZOL6KTFdVd3klNpZDBMheyAZ/AUT7rifC
+i2ywXirfloKBPk8OBpo1ukOZMh6+4/FguJKUR9Fp4obIXbXGCI/8wxL+5nGuvEe
uMZi/Y+UcDnhDoci6SE5zBEJUvxlqFVIks036kCgxl6SLModgoSdKe8M8f/tooG2
/788eBsCOLycUys/ZjrebaXTBhlMHO9b8PdHekWy/q3voybKAUb3voaTtA+9WD7X
6bEIMCPRZ42aS4xEzZ1luQSFwPIc8bafDpn8S0wk1Blhy1+ROCLlQ2QMeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGVdTrAFN/2N3XCu7D0ob65fBk7QMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvWlYxT3NBVTNfWTNkY0s3c1BTaHZybDhHVHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDs4QAB
MA0GCSqGSIb3DQEBCwUAA4IBAQB5O2Xha15XCVTJSv0crKJhAqnk5GedhCZgnDuY
LOWaIwRy3c+b++zn9jTrCIQei/MrGtHdKzmiH6O5s+cVXaezQ8EfV7y93IrHSFIh
WnhmRwayr3BVC3nV40XjxG8vtyKVh27RwWP/tWjVLdq6DagLxer3Ow89cdAWJFjx
xOPFkEn0WwP9euib6CsAjiFx1Gz8LFZ9n5mcnppwSf7LwxJXQlkBlbLcXXkpOrlB
HNxk/nwEecBHVHBtHmjFxkTTfYpmeJD6tpxdINbgNt3KHZx/4LSB4SCyuFz7+tr9
5OVIgvzbwX/X9dYyfz+HCiNy+WbpK5pbZjHOAZ1f01YlnYGX
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:39 2024 by rpki-client on console-fra.rpki-client.org