Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/zg0kDN9GYBZp0CtUgluY66mRoFM.roa
File: zg0kDN9GYBZp0CtUgluY66mRoFM.roa (raw, json)
Hash identifier: e8RLP/picXkooNUzqNcV4H900HxCjlc+aewCHt9lpkY=
Subject key identifier: CE:0D:24:0C:DF:46:60:16:69:D0:2B:54:82:5B:98:EB:A9:91:A0:53
Certificate issuer: /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial: 01856ED49CE757CA6134F5C85BB4C1F695BE
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/zg0kDN9GYBZp0CtUgluY66mRoFM.roa
Signing time: Sun 01 Jan 2023 19:35:05 +0000
ROA not before: Sun 01 Jan 2023 19:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201909
IP address blocks: 2001:67c:624::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:9c:e7:57:ca:61:34:f5:c8:5b:b4:c1:f6:95:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Validity
Not Before: Jan 1 19:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce0d240cdf46601669d02b54825b98eba991a053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:e5:cf:26:f5:b1:8f:5a:71:b2:b6:4a:ef:
20:25:a6:2f:7c:d8:3c:75:37:36:c9:84:70:10:9a:
c5:c0:18:60:f6:f3:10:60:60:ae:ad:20:a1:8b:8b:
63:e2:cb:4f:56:30:e9:01:f3:aa:f4:09:bd:9c:50:
03:1d:37:d8:2f:9f:bf:1b:dd:1c:9b:da:17:e1:1c:
4b:cd:07:71:d7:ab:32:cf:8d:7c:e1:ad:62:e2:0b:
11:ae:9a:57:56:d4:1d:12:9f:65:da:93:f2:b8:b6:
4a:1e:14:84:47:f9:15:6a:1f:74:11:e2:c1:46:1e:
b4:98:19:67:3a:99:02:01:de:1e:e9:0f:8f:0a:ae:
d8:bb:c2:e7:ea:a6:67:58:01:cf:11:3e:eb:f1:1f:
0b:40:46:ad:39:40:4d:73:d6:9d:9f:56:85:76:33:
c9:e1:63:2d:4d:ce:32:2b:d9:59:64:0b:33:5a:7c:
f1:c6:15:60:a8:29:2c:47:fa:5d:30:48:c9:8c:80:
61:cf:35:c1:a0:d8:fa:3c:10:52:f7:e5:2d:27:21:
a4:44:94:07:ad:2a:20:1f:fc:d6:86:cc:f4:4d:cc:
11:91:7b:c8:d3:94:de:e4:b6:4a:7d:8b:2a:08:6e:
5f:3a:18:a3:f2:0f:c6:41:1e:c8:f3:55:aa:7f:cc:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:24:0C:DF:46:60:16:69:D0:2B:54:82:5B:98:EB:A9:91:A0:53
X509v3 Authority Key Identifier:
keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/zg0kDN9GYBZp0CtUgluY66mRoFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:624::/48
Signature Algorithm: sha256WithRSAEncryption
9c:98:18:f7:1b:b9:64:ce:18:88:27:44:00:89:91:73:44:27:
e3:65:ff:70:76:01:b3:47:b5:d9:6a:96:ab:a6:ab:5b:48:28:
8f:78:a2:53:66:9b:67:2b:14:7a:08:e7:3f:f2:c6:5b:2d:4b:
31:ee:19:a9:30:a6:08:97:89:8d:6e:27:37:09:9b:61:a7:64:
ef:e0:eb:44:f2:8c:78:0d:c8:4d:c0:2a:bf:c1:58:5a:94:18:
77:1f:ac:ce:49:c3:7b:0e:4a:8b:09:a4:7a:85:85:ab:af:fc:
84:05:35:cb:4b:ca:77:a3:56:b7:37:df:e6:6b:96:a9:eb:00:
ac:b5:15:d8:31:77:61:15:21:8c:9d:1f:08:b1:04:d4:a4:37:
13:e1:ce:4e:cd:8d:2a:52:30:6c:c2:95:31:ec:81:1a:d4:69:
aa:ea:34:68:0b:eb:3e:7a:cf:32:5d:9f:59:a4:32:01:76:10:
88:ec:24:71:10:e3:9e:6e:df:1b:32:86:67:39:83:30:30:41:
7f:ef:9d:88:9c:09:3a:4a:2d:84:66:f3:a7:a7:84:6c:c7:45:
f7:67:d9:59:a2:27:99:cf:85:43:70:99:29:df:44:89:af:55:
67:11:f4:41:77:d8:e9:39:46:63:c7:a0:fb:84:6b:7d:de:0d:
d6:06:a7:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVu1JznV8phNPXIW7TB9pW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTU2YWJkY2I0ZjZmMGM4NmI4MzJlY2MxM2Y1ZTI0OTcy
MWQ2ZjgwHhcNMjMwMTAxMTkzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTBkMjQwY2RmNDY2MDE2NjlkMDJiNTQ4MjViOThlYmE5OTFhMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTjlzyb1sY9acbK2Su8gJaYvfNg8
dTc2yYRwEJrFwBhg9vMQYGCurSChi4tj4stPVjDpAfOq9Am9nFADHTfYL5+/G90c
m9oX4RxLzQdx16syz4184a1i4gsRrppXVtQdEp9l2pPyuLZKHhSER/kVah90EeLB
Rh60mBlnOpkCAd4e6Q+PCq7Yu8Ln6qZnWAHPET7r8R8LQEatOUBNc9adn1aFdjPJ
4WMtTc4yK9lZZAszWnzxxhVgqCksR/pdMEjJjIBhzzXBoNj6PBBS9+UtJyGkRJQH
rSogH/zWhsz0TcwRkXvI05Te5LZKfYsqCG5fOhij8g/GQR7I81Wqf8ydJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM4NJAzfRmAWadArVIJbmOupkaBTMB8GA1UdIwQY
MBaAFAular3LT28Mhrgy7ME/XiSXIdb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgt
NjAzY2IwODM3MTRiLzEvemcwa0ROOUdZQlpwMEN0VWdsdVk2Nm1Sb0ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83OGE4NjEtYjkxOC00ZWE3LTg4YTgtNjAzY2IwODM3MTRi
LzEvQzZWcXZjdFBid3lHdURMc3dUOWVKSmNoMXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYk
MA0GCSqGSIb3DQEBCwUAA4IBAQCcmBj3G7lkzhiIJ0QAiZFzRCfjZf9wdgGzR7XZ
aparpqtbSCiPeKJTZptnKxR6COc/8sZbLUsx7hmpMKYIl4mNbic3CZthp2Tv4OtE
8ox4DchNwCq/wVhalBh3H6zOScN7DkqLCaR6hYWrr/yEBTXLS8p3o1a3N9/ma5ap
6wCstRXYMXdhFSGMnR8IsQTUpDcT4c5OzY0qUjBswpUx7IEa1Gmq6jRoC+s+es8y
XZ9ZpDIBdhCI7CRxEOOebt8bMoZnOYMwMEF/752InAk6Si2EZvOnp4Rsx0X3Z9lZ
oieZz4VDcJkp30SJr1VnEfRBd9jpOUZjx6D7hGt93g3WBqck
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:48 2024 by rpki-client on console-ams.rpki-client.org