Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XMB9URgFC5ujxdKggGWlu0W_ung.roa
File: XMB9URgFC5ujxdKggGWlu0W_ung.roa (raw, json)
Hash identifier: T0yyNpmnIbgO5P7S/FAmU9J651ygbkcVDsD+MdWfr44=
Subject key identifier: 5C:C0:7D:51:18:05:0B:9B:A3:C5:D2:A0:80:65:A5:BB:45:BF:BA:78
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019122B702958B8B7E1610F1B205D58650F4
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XMB9URgFC5ujxdKggGWlu0W_ung.roa
Signing time: Mon 05 Aug 2024 13:25:04 +0000
ROA not before: Mon 05 Aug 2024 13:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 2a05:9080:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 10 Aug 2024 14:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:22:b7:02:95:8b:8b:7e:16:10:f1:b2:05:d5:86:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 5 13:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cc07d5118050b9ba3c5d2a08065a5bb45bfba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:bd:f5:4e:0d:5e:11:da:f9:f1:8b:e6:2c:
35:e4:bc:70:91:6a:fc:6f:07:d7:3f:e9:74:12:32:
e0:e3:d8:a6:17:a9:7a:bb:6c:82:7b:ea:7f:6f:7e:
84:53:c6:5c:d0:11:62:45:92:16:48:e0:85:a8:8a:
b8:6a:3e:bf:ea:44:90:79:9e:aa:8b:3f:95:ad:25:
75:e9:12:5a:85:be:21:09:8e:85:9d:c5:30:24:c2:
cf:f6:ad:98:44:3a:ac:0e:ce:0d:61:50:0b:40:fe:
d0:2a:2c:3c:45:fd:a2:62:28:57:26:f5:a2:8b:ff:
a1:4a:48:ad:0f:c3:9c:34:25:49:5e:1d:d9:a8:dd:
78:9d:cb:b7:4a:82:64:2f:fa:07:3b:d9:0b:20:31:
ad:ab:f3:98:bb:06:48:7e:ef:93:31:b9:56:37:49:
c9:a3:7e:d3:8e:73:82:7e:06:45:32:2b:ff:49:21:
3a:99:55:92:b8:6e:47:a5:de:a8:2b:3e:e1:b5:42:
7e:9e:a8:1b:82:3f:bd:2d:26:c7:c3:99:c9:1f:1f:
82:03:35:a1:44:33:09:85:a4:c7:29:43:1e:c0:15:
63:0e:3f:7b:49:eb:33:91:1b:82:02:43:a0:56:e9:
10:a1:07:79:00:8e:36:9a:ba:e2:99:b3:dd:02:e5:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:7D:51:18:05:0B:9B:A3:C5:D2:A0:80:65:A5:BB:45:BF:BA:78
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/XMB9URgFC5ujxdKggGWlu0W_ung.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:6::/48
Signature Algorithm: sha256WithRSAEncryption
09:11:a4:6e:ab:94:e6:0e:52:ed:72:f2:86:09:18:0e:30:d5:
59:1b:6d:f1:9e:d5:67:55:5e:b4:fd:c4:9a:a0:8a:52:06:a2:
30:4c:67:6e:95:8f:3c:b8:20:ff:14:55:1f:fd:3a:5a:d7:ce:
ab:6f:b0:b2:c7:df:dd:d1:f3:4f:0c:da:f7:0a:92:32:14:30:
65:b4:30:08:40:39:2f:da:3d:49:54:61:f3:13:54:4e:e4:00:
ef:0f:40:1e:97:74:22:65:5a:16:ff:7b:ec:95:c7:1b:12:b0:
06:dd:7b:cd:99:b9:65:90:bb:4d:c8:82:08:e7:87:56:a5:e5:
91:b6:01:38:58:1b:2d:5a:b3:00:c1:50:7e:5a:1d:99:0c:56:
e3:aa:e2:48:40:97:44:8a:b8:4d:21:2c:3b:6f:f9:dc:d0:67:
bd:e8:b9:a8:6e:95:7d:f4:7e:85:d0:5c:10:44:63:b3:b3:88:
e4:13:b3:d6:2c:39:28:ac:8f:b7:4b:5a:eb:28:6b:63:f4:cc:
44:b0:91:41:93:4d:6b:14:fe:bb:65:66:56:06:ee:8b:6a:b1:
e4:1c:4b:50:da:e7:24:b6:df:0d:19:71:a7:4e:c8:cd:55:5d:
50:a3:f7:a5:ba:84:12:6d:73:84:14:9d:7d:5b:2c:59:66:59:
4e:af:f8:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZEitwKVi4t+FhDxsgXVhlD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwODA1MTMyNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2MwN2Q1MTE4MDUwYjliYTNjNWQyYTA4MDY1YTViYjQ1YmZiYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1G99U4NXhHa+fGL5iw15LxwkWr8
bwfXP+l0EjLg49imF6l6u2yCe+p/b36EU8Zc0BFiRZIWSOCFqIq4aj6/6kSQeZ6q
iz+VrSV16RJahb4hCY6FncUwJMLP9q2YRDqsDs4NYVALQP7QKiw8Rf2iYihXJvWi
i/+hSkitD8OcNCVJXh3ZqN14ncu3SoJkL/oHO9kLIDGtq/OYuwZIfu+TMblWN0nJ
o37TjnOCfgZFMiv/SSE6mVWSuG5Hpd6oKz7htUJ+nqgbgj+9LSbHw5nJHx+CAzWh
RDMJhaTHKUMewBVjDj97SeszkRuCAkOgVukQoQd5AI42mrrimbPdAuVjXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFzAfVEYBQubo8XSoIBlpbtFv7p4MB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvWE1COVVSZ0ZDNXVqeGRLZ2dHV2x1MFdfdW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWQgAAG
MA0GCSqGSIb3DQEBCwUAA4IBAQAJEaRuq5TmDlLtcvKGCRgOMNVZG23xntVnVV60
/cSaoIpSBqIwTGdulY88uCD/FFUf/Tpa186rb7Cyx9/d0fNPDNr3CpIyFDBltDAI
QDkv2j1JVGHzE1RO5ADvD0Ael3QiZVoW/3vslccbErAG3XvNmbllkLtNyIII54dW
peWRtgE4WBstWrMAwVB+Wh2ZDFbjquJIQJdEirhNISw7b/nc0Ge96LmobpV99H6F
0FwQRGOzs4jkE7PWLDkorI+3S1rrKGtj9MxEsJFBk01rFP67ZWZWBu6LarHkHEtQ
2ucktt8NGXGnTsjNVV1Qo/eluoQSbXOEFJ19WyxZZllOr/ie
Generated at Sat Aug 10 17:04:31 2024 by rpki-client on console-ams.rpki-client.org