Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/i23IWlvpgtk5Xd5W2wcnuWYW6B4.roa
File: i23IWlvpgtk5Xd5W2wcnuWYW6B4.roa (raw, json)
Hash identifier: qCHZ5cCxYzQs5JGwLaasICXuFGbqm3oIPJi5Dav4+DM=
Subject key identifier: 8B:6D:C8:5A:5B:E9:82:D9:39:5D:DE:56:DB:07:27:B9:66:16:E8:1E
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 018B6866E61936F1B2F9A760B4DFEF186876
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/i23IWlvpgtk5Xd5W2wcnuWYW6B4.roa
Signing time: Wed 25 Oct 2023 19:54:15 +0000
ROA not before: Wed 25 Oct 2023 19:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45038
IP address blocks: 2001:67c:630::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:66:e6:19:36:f1:b2:f9:a7:60:b4:df:ef:18:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Oct 25 19:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b6dc85a5be982d9395dde56db0727b96616e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:87:2a:fb:16:af:75:0c:c9:df:10:70:a1:
23:6d:aa:e6:90:67:ee:8b:63:0e:92:9f:e6:75:3b:
2b:09:89:bf:f0:65:b8:77:25:b3:2c:ef:e1:5b:8e:
e8:54:ab:19:96:35:2c:8e:cc:66:a7:4d:65:62:59:
e8:8b:ae:0d:bf:d0:ad:da:cf:21:36:6b:65:e4:b6:
4c:00:a2:ef:24:1e:96:ea:e2:36:32:f6:ec:e2:83:
c0:76:3f:7d:49:aa:86:de:74:f4:23:d8:d6:06:2a:
ee:2f:d1:cd:1e:5a:2d:53:f4:e4:e1:70:3d:66:b7:
b5:d5:b5:06:2d:84:85:63:30:e1:8b:51:44:3d:55:
e8:9b:70:c3:dc:5a:f6:c9:35:4e:ec:9f:9a:bf:30:
5f:92:e0:42:07:a0:d2:d5:44:84:22:3b:9f:cc:e9:
97:65:6a:eb:88:21:19:42:24:b4:1f:a0:d1:31:80:
fd:34:d1:19:1e:cc:d4:e3:ee:c9:c5:c4:ee:cd:f5:
d0:8a:37:7c:4f:d1:4f:1c:53:0d:07:d8:cf:93:22:
fb:aa:17:8b:04:d9:c9:41:2d:29:e0:b9:44:40:16:
e1:82:31:09:71:88:bc:89:f6:3c:92:cf:16:12:98:
54:dd:de:6f:b2:36:0e:73:7f:bc:23:d7:58:bf:ac:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:C8:5A:5B:E9:82:D9:39:5D:DE:56:DB:07:27:B9:66:16:E8:1E
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/i23IWlvpgtk5Xd5W2wcnuWYW6B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:630::/48
Signature Algorithm: sha256WithRSAEncryption
df:0c:14:a5:51:0c:14:59:7b:40:3d:e6:27:ce:15:4c:20:90:
d9:d3:45:ee:ab:11:b5:9a:1f:f5:e5:b1:d5:67:fa:69:c9:b2:
70:b0:32:91:51:c6:14:45:8b:bd:ae:2f:0d:01:bd:f8:ba:2b:
c1:f4:d6:44:64:e2:b7:a5:b5:a4:c6:b9:e2:90:3f:19:a6:35:
11:40:ca:1a:c9:a4:ed:65:2d:38:e4:9a:52:3d:82:1b:37:fe:
8d:a9:33:dd:13:36:71:23:54:70:c8:5d:42:61:f8:df:ff:26:
cd:90:43:9f:94:69:d3:d7:cf:e4:b2:da:fa:98:49:e4:b3:a6:
4b:3a:d2:98:6c:8d:3f:c2:e9:0c:61:9f:67:f9:de:48:45:4c:
95:9d:1e:a2:3b:a8:1e:c9:cf:8c:85:fc:fb:5b:d2:e4:1c:88:
9d:df:7d:1b:6b:f1:c6:36:75:e7:87:bc:6f:af:d1:4c:0d:9b:
0b:7b:f9:7b:06:09:46:8f:c3:ae:68:65:a7:e3:04:a5:a6:dc:
9d:62:38:64:11:d0:c6:58:e4:61:1d:7e:8b:56:f2:5c:92:48:
d0:70:c1:c0:46:88:ca:cd:f7:a6:92:e4:df:38:01:41:4b:81:
15:cf:22:0e:46:d4:bb:80:d7:90:43:a3:6d:bb:4d:d1:52:dd:
51:3b:64:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYtoZuYZNvGy+adgtN/vGGh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw
NjMxYWYwHhcNMjMxMDI1MTk1NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjZkYzg1YTViZTk4MmQ5Mzk1ZGRlNTZkYjA3MjdiOTY2MTZlODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzKHKvsWr3UMyd8QcKEjbarmkGfu
i2MOkp/mdTsrCYm/8GW4dyWzLO/hW47oVKsZljUsjsxmp01lYlnoi64Nv9Ct2s8h
Nmtl5LZMAKLvJB6W6uI2Mvbs4oPAdj99SaqG3nT0I9jWBiruL9HNHlotU/Tk4XA9
Zre11bUGLYSFYzDhi1FEPVXom3DD3Fr2yTVO7J+avzBfkuBCB6DS1USEIjufzOmX
ZWrriCEZQiS0H6DRMYD9NNEZHszU4+7JxcTuzfXQijd8T9FPHFMNB9jPkyL7qheL
BNnJQS0p4LlEQBbhgjEJcYi8ifY8ks8WEphU3d5vsjYOc3+8I9dYv6x1vwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIttyFpb6YLZOV3eVtsHJ7lmFugeMB8GA1UdIwQY
MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt
NDg0NTlkMDdiNDFlLzEvaTIzSVdsdnBndGs1WGQ1VzJ3Y251V1lXNkI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl
LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYw
MA0GCSqGSIb3DQEBCwUAA4IBAQDfDBSlUQwUWXtAPeYnzhVMIJDZ00XuqxG1mh/1
5bHVZ/ppybJwsDKRUcYURYu9ri8NAb34uivB9NZEZOK3pbWkxrnikD8ZpjURQMoa
yaTtZS045JpSPYIbN/6NqTPdEzZxI1RwyF1CYfjf/ybNkEOflGnT18/kstr6mEnk
s6ZLOtKYbI0/wukMYZ9n+d5IRUyVnR6iO6geyc+Mhfz7W9LkHIid330ba/HGNnXn
h7xvr9FMDZsLe/l7BglGj8OuaGWn4wSlptydYjhkEdDGWORhHX6LVvJckkjQcMHA
RojKzfemkuTfOAFBS4EVzyIORtS7gNeQQ6Ntu03RUt1RO2Se
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:07 2024 by rpki-client on console-fra.rpki-client.org