Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4o1YpuMx-NYZr7YwSETosnvAFh4.roa
File: 4o1YpuMx-NYZr7YwSETosnvAFh4.roa (raw, json)
Hash identifier: m4qN641M8RrOTFUZysKnUwEPJ/xkwM/SdP0R6WYeGOI=
Subject key identifier: E2:8D:58:A6:E3:31:F8:D6:19:AF:B6:30:48:44:E8:B2:7B:C0:16:1E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBB67C8809E4AB6511B47C2A10B52C
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4o1YpuMx-NYZr7YwSETosnvAFh4.roa
Signing time: Mon 02 Jan 2023 05:37:02 +0000
ROA not before: Mon 02 Jan 2023 05:37:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a09:e1c1:f000::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 01 Dec 2023 14:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:b6:7c:88:09:e4:ab:65:11:b4:7c:2a:10:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e28d58a6e331f8d619afb6304844e8b27bc0161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:77:6e:55:60:ef:39:63:28:81:67:9f:ef:
4a:46:85:8a:28:24:32:0a:6d:c2:29:3f:cb:e4:9f:
0e:b1:c6:d5:8d:b5:51:c6:8a:d8:c2:a4:7c:28:bb:
a5:07:70:97:47:83:9b:46:ef:bc:17:3d:4c:8b:7d:
13:83:91:07:35:69:4c:01:05:93:00:be:6b:be:62:
55:99:47:30:78:36:f2:cc:72:e0:8d:d2:71:dd:31:
73:5d:b5:9e:a7:56:ee:9f:a7:e4:97:81:f0:13:6e:
ac:56:dd:a9:55:73:01:a8:a9:1f:a4:48:33:ce:10:
a7:7e:93:78:63:f9:40:7b:5f:a7:22:62:a6:b0:33:
62:5a:a4:bd:10:90:6e:4b:b3:e8:fa:68:e4:f1:82:
d6:d6:51:2b:8c:09:38:69:7e:23:89:73:86:92:47:
8f:28:75:68:42:2f:46:57:7e:f8:ac:69:90:37:61:
f7:1c:63:a1:e1:c3:19:c6:38:6f:43:f8:7d:9c:d4:
ff:c2:82:d6:04:84:a2:6a:53:9a:3d:31:75:1e:fd:
ef:12:4a:85:2c:82:9d:1a:98:a5:61:73:bb:95:69:
d9:61:6e:1d:2b:98:05:10:ae:e9:3f:a2:db:43:7b:
db:b2:a2:8c:81:c9:f5:6a:42:34:e1:1a:8d:2a:67:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8D:58:A6:E3:31:F8:D6:19:AF:B6:30:48:44:E8:B2:7B:C0:16:1E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/4o1YpuMx-NYZr7YwSETosnvAFh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:f000::/44
Signature Algorithm: sha256WithRSAEncryption
25:fc:93:a4:87:00:65:0c:9d:ed:0c:16:50:f5:ed:25:af:f6:
9f:47:14:5a:4e:1c:61:99:88:2b:7b:84:2e:80:5a:9f:c4:dc:
41:9b:66:cf:c7:51:71:21:90:20:5c:79:83:29:b7:08:2c:f7:
99:ad:fe:10:73:df:25:cd:c1:8d:56:7a:a3:7c:2e:68:83:a2:
d6:a7:2c:54:45:f0:37:80:b0:60:a4:16:ca:d2:62:73:1c:7d:
90:e8:46:ab:5d:9d:40:f3:8b:65:ba:b2:1f:22:f8:ac:d2:d5:
e7:0b:9d:54:b3:6b:97:0b:e6:92:e4:39:b4:93:a7:d6:e9:3e:
0d:24:26:95:7b:c3:e0:02:03:d7:1f:e4:a3:69:1e:77:d0:83:
46:9b:18:78:2a:99:3c:a3:2b:07:26:bf:ac:09:87:b7:46:72:
3b:9d:d7:69:4f:42:a3:70:6f:1a:20:e6:51:9f:ea:00:df:f3:
0e:66:e9:5c:a5:a6:25:63:00:c4:00:ef:dc:58:1b:3b:7d:8e:
5b:fd:79:5a:15:23:73:d8:a4:53:87:13:33:de:a1:6d:58:fb:
71:64:4e:cc:45:d0:97:84:a3:a5:f3:ac:5b:0b:c8:40:7d:7c:
ea:0a:e3:2e:44:36:7f:c8:82:3a:c0:36:3e:cf:67:20:6b:a7:
a7:55:4d:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw+7Z8iAnkq2URtHwqELUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjMwMTAyMDUzNzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjhkNThhNmUzMzFmOGQ2MTlhZmI2MzA0ODQ0ZThiMjdiYzAxNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiJ3blVg7zljKIFnn+9KRoWKKCQy
Cm3CKT/L5J8OscbVjbVRxorYwqR8KLulB3CXR4ObRu+8Fz1Mi30Tg5EHNWlMAQWT
AL5rvmJVmUcweDbyzHLgjdJx3TFzXbWep1bun6fkl4HwE26sVt2pVXMBqKkfpEgz
zhCnfpN4Y/lAe1+nImKmsDNiWqS9EJBuS7Po+mjk8YLW1lErjAk4aX4jiXOGkkeP
KHVoQi9GV374rGmQN2H3HGOh4cMZxjhvQ/h9nNT/woLWBISialOaPTF1Hv3vEkqF
LIKdGpilYXO7lWnZYW4dK5gFEK7pP6LbQ3vbsqKMgcn1akI04RqNKmd6hQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOKNWKbjMfjWGa+2MEhE6LJ7wBYeMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvNG8xWXB1TXgtTllacjdZd1NFVG9zbnZBRmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgnhwfAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAl/JOkhwBlDJ3tDBZQ9e0lr/afRxRaThxhmYgr
e4QugFqfxNxBm2bPx1FxIZAgXHmDKbcILPeZrf4Qc98lzcGNVnqjfC5og6LWpyxU
RfA3gLBgpBbK0mJzHH2Q6EarXZ1A84tlurIfIvis0tXnC51Us2uXC+aS5Dm0k6fW
6T4NJCaVe8PgAgPXH+SjaR530INGmxh4Kpk8oysHJr+sCYe3RnI7nddpT0KjcG8a
IOZRn+oA3/MOZulcpaYlYwDEAO/cWBs7fY5b/XlaFSNz2KRThxMz3qFtWPtxZE7M
RdCXhKOl86xbC8hAfXzqCuMuRDZ/yII6wDY+z2cga6enVU3Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org