Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/arQyimxuRj7SJtZkL05bj1HJ0Bk.roa
File: arQyimxuRj7SJtZkL05bj1HJ0Bk.roa (raw, json)
Hash identifier: 4cc4gY5D9NvTW4oWTD7YXYgI15OfPXPi0clRw6zu9H0=
Subject key identifier: 6A:B4:32:8A:6C:6E:46:3E:D2:26:D6:64:2F:4E:5B:8F:51:C9:D0:19
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 01856FF049F6E5E985E5131F043D8F2A2A6A
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/arQyimxuRj7SJtZkL05bj1HJ0Bk.roa
Signing time: Mon 02 Jan 2023 00:44:56 +0000
ROA not before: Mon 02 Jan 2023 00:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200533
IP address blocks: 2001:67c:21bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:49:f6:e5:e9:85:e5:13:1f:04:3d:8f:2a:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jan 2 00:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab4328a6c6e463ed226d6642f4e5b8f51c9d019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:fd:bc:dc:82:46:0a:22:58:b6:cc:c2:4e:
dc:19:6c:1c:82:f9:05:0f:99:e6:5c:1a:8a:b0:80:
33:b8:f6:81:22:1b:99:3d:bb:19:e4:e0:96:84:7f:
8c:95:92:08:3c:95:c3:ca:7f:f9:2f:0a:03:2b:1b:
c4:88:ba:5c:51:09:8b:92:ec:28:1b:d1:87:f4:f1:
9d:b0:d0:00:fd:a0:3a:85:ce:18:29:26:64:16:16:
b9:41:80:18:d9:a1:ef:9e:eb:35:4d:fd:7f:de:58:
ac:20:18:13:12:74:63:bc:d5:b5:7b:14:81:6c:6e:
8e:31:e6:d1:a2:c2:80:10:0b:ce:ed:6a:3d:98:fa:
ea:42:8e:9b:fc:63:b3:e0:a4:b1:08:92:24:f1:56:
b0:d8:3b:0d:c6:f7:f3:e6:e3:e7:57:ee:7d:b6:8d:
50:52:a0:d9:af:e7:ce:2f:4f:25:49:8c:43:8a:e8:
6e:1c:5f:8c:68:14:45:2b:ce:f6:6d:0d:3b:4e:53:
2c:cc:c0:bf:83:21:22:3d:3c:f9:2e:d9:86:4c:2f:
2c:23:ce:43:f5:03:0b:fd:20:22:00:4d:15:8d:1e:
db:86:58:34:87:83:f0:7c:d8:37:21:3b:ef:6a:7c:
16:11:e2:06:03:82:86:1d:e1:71:85:29:5d:26:5d:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B4:32:8A:6C:6E:46:3E:D2:26:D6:64:2F:4E:5B:8F:51:C9:D0:19
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/arQyimxuRj7SJtZkL05bj1HJ0Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21bc::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e3:89:8f:05:b7:68:ea:bd:a2:06:63:57:ee:58:39:10:2f:
1a:27:bd:2d:a6:4a:c2:d3:0a:e4:54:6c:2c:48:59:9b:08:b8:
d9:9d:a5:58:b0:76:46:80:57:ce:bd:a0:b6:4f:fc:40:97:cd:
95:ab:85:75:db:4f:a6:29:68:4a:9c:70:dd:db:2c:8a:b4:20:
d6:d2:3c:a1:1f:1e:e8:31:d9:fb:bd:96:bf:a4:da:3b:3c:fd:
2b:86:13:7a:b8:e9:84:28:fe:4a:bb:54:ef:1e:eb:68:1d:b7:
8d:b0:fe:98:6d:d3:14:06:71:73:59:46:e3:1c:51:a4:49:32:
53:b8:be:9d:dd:56:fb:26:c5:5d:f7:b7:e3:33:bf:be:be:dd:
2a:e0:70:df:ec:55:24:b6:b2:4b:ac:2f:de:3d:ae:37:7d:9c:
1a:67:b1:5e:62:8e:18:b6:aa:97:67:a9:a2:da:25:90:56:ac:
31:10:72:4f:c0:6b:84:72:da:b1:ce:00:55:16:a6:52:87:57:
c5:9a:10:56:e1:37:97:d5:8f:04:42:b0:5c:8a:93:f0:9f:0b:
fc:9d:f5:2f:a5:ea:ca:c7:51:2c:d7:b0:47:91:14:5d:b7:bf:
28:d1:5c:49:7c:ab:74:d2:12:90:45:81:39:e6:29:20:30:b6:
ea:db:77:3b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVv8En25emF5RMfBD2PKipqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTA1OTdhNjA2NGM4ODJhZTJhZjNmYTU3NTlmMTNmOGJk
MWRkZmMwHhcNMjMwMTAyMDA0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWI0MzI4YTZjNmU0NjNlZDIyNmQ2NjQyZjRlNWI4ZjUxYzlkMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXv9vNyCRgoiWLbMwk7cGWwcgvkF
D5nmXBqKsIAzuPaBIhuZPbsZ5OCWhH+MlZIIPJXDyn/5LwoDKxvEiLpcUQmLkuwo
G9GH9PGdsNAA/aA6hc4YKSZkFha5QYAY2aHvnus1Tf1/3lisIBgTEnRjvNW1exSB
bG6OMebRosKAEAvO7Wo9mPrqQo6b/GOz4KSxCJIk8Vaw2DsNxvfz5uPnV+59to1Q
UqDZr+fOL08lSYxDiuhuHF+MaBRFK872bQ07TlMszMC/gyEiPTz5LtmGTC8sI85D
9QML/SAiAE0VjR7bhlg0h4PwfNg3ITvvanwWEeIGA4KGHeFxhSldJl0S4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGq0MopsbkY+0ibWZC9OW49RydAZMB8GA1UdIwQY
MBaAFIVQWXpgZMiCrirz+ldZ8T+L0d38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMt
MjVjNWYwNWFlYjVmLzEvYXJReWlteHVSajdTSnRaa0wwNWJqMUhKMEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMtMjVjNWYwNWFlYjVm
LzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCG8
MA0GCSqGSIb3DQEBCwUAA4IBAQCl44mPBbdo6r2iBmNX7lg5EC8aJ70tpkrC0wrk
VGwsSFmbCLjZnaVYsHZGgFfOvaC2T/xAl82Vq4V120+mKWhKnHDd2yyKtCDW0jyh
Hx7oMdn7vZa/pNo7PP0rhhN6uOmEKP5Ku1TvHutoHbeNsP6YbdMUBnFzWUbjHFGk
STJTuL6d3Vb7JsVd97fjM7++vt0q4HDf7FUktrJLrC/ePa43fZwaZ7FeYo4YtqqX
Z6mi2iWQVqwxEHJPwGuEctqxzgBVFqZSh1fFmhBW4TeX1Y8EQrBcipPwnwv8nfUv
perKx1Es17BHkRRdt78o0VxJfKt00hKQRYE55ikgMLbq23c7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:11 2024 by rpki-client on console-ams.rpki-client.org