Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/Cc2bt3kfx9prLLeRoFxXRd4ePvk.roa
File: Cc2bt3kfx9prLLeRoFxXRd4ePvk.roa (raw, json)
Hash identifier: 7LDRPoh6PMRhwRVUZ7ksScdjA/tBOjNK3YvFnChsgMw=
Subject key identifier: 09:CD:9B:B7:79:1F:C7:DA:6B:2C:B7:91:A0:5C:57:45:DE:1E:3E:F9
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 018A648FEAE8C8D63F4C56E34DA3E1DE1F5D
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/Cc2bt3kfx9prLLeRoFxXRd4ePvk.roa
Signing time: Tue 05 Sep 2023 08:57:47 +0000
ROA not before: Tue 05 Sep 2023 08:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:2c3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:8f:ea:e8:c8:d6:3f:4c:56:e3:4d:a3:e1:de:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Sep 5 08:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09cd9bb7791fc7da6b2cb791a05c5745de1e3ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:c8:48:b7:49:0e:56:1a:e6:40:a4:ad:cb:
30:45:4a:9a:8c:46:bd:5d:65:5b:1e:0d:75:68:9b:
92:83:f6:79:30:cc:ef:a7:95:15:28:75:bc:ff:8e:
99:f9:d2:cf:b3:a2:ad:1f:48:f9:08:6a:3b:c5:2b:
b1:cd:ec:42:fa:85:8c:b8:59:35:0e:94:e4:06:b6:
1e:d0:99:6a:2f:a1:10:57:04:ba:8d:50:2b:15:86:
cf:ca:98:41:89:5a:97:db:fe:d1:93:11:a3:38:6e:
f7:54:a7:45:43:8d:98:5b:a9:8b:51:17:71:ef:2d:
20:d4:eb:4f:f4:d6:2f:da:e2:b2:5b:34:91:3a:0d:
31:38:1a:45:42:8e:15:58:47:57:7f:31:33:77:bf:
e8:4c:3c:d6:d6:37:19:49:af:43:70:96:ac:60:a5:
03:62:4c:75:19:8e:a0:57:c3:eb:49:30:b3:48:d6:
3b:e5:50:4f:74:20:d8:ab:45:ff:49:7d:10:de:f8:
01:49:6a:67:79:68:51:c3:f6:32:61:86:64:b4:99:
fc:52:da:b6:a7:7b:3c:4d:e1:2a:7d:1e:dc:a9:89:
1b:f1:f7:39:71:33:93:ee:db:8a:b2:d8:2f:fa:5c:
7a:d0:bf:62:a0:4d:26:0e:9d:60:ce:04:2f:cf:2a:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:9B:B7:79:1F:C7:DA:6B:2C:B7:91:A0:5C:57:45:DE:1E:3E:F9
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/Cc2bt3kfx9prLLeRoFxXRd4ePvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c3c::/48
Signature Algorithm: sha256WithRSAEncryption
79:e1:87:cd:78:fe:9b:6a:e6:bc:53:9c:7d:75:07:0e:ba:e2:
bf:aa:e6:23:f8:49:f8:cf:3d:ce:1a:01:1c:52:ac:62:b6:ef:
15:c2:1e:c7:79:81:28:60:3c:e3:a0:04:89:e9:24:d8:9d:e0:
10:81:05:f1:38:07:2f:c5:5d:e1:10:5f:90:6f:11:82:a6:0e:
77:30:65:6b:da:39:64:72:59:00:c6:8d:98:65:7a:58:5b:39:
65:96:6e:d8:6d:fd:20:18:b5:36:c4:18:84:59:ae:47:e3:74:
bb:24:bc:6f:43:f7:cf:6d:80:ea:5e:ea:16:dd:b5:cd:8d:33:
b2:cb:0e:25:37:b1:94:ab:08:fc:f9:41:3b:bb:13:2c:2b:6e:
46:66:a4:e1:3e:3e:a7:69:c3:a0:9a:86:ba:fe:16:12:92:e6:
03:7d:e7:c7:d8:07:fc:1a:00:18:8b:9f:ae:69:21:c6:b3:48:
4e:ea:c9:ea:c9:bd:f4:49:98:3e:37:29:c5:c1:31:a1:7e:2f:
ac:4b:57:8c:19:2e:d5:04:14:ca:56:18:d8:6f:03:6e:5a:37:
45:fb:f6:08:99:07:c2:31:22:3c:1c:cc:aa:07:77:f1:9d:93:
85:c7:cb:34:13:42:c6:e9:3d:53:e8:20:00:13:2b:60:ee:9d:
0d:a1:ef:6d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYpkj+royNY/TFbjTaPh3h9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjMwOTA1MDg1NzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWNkOWJiNzc5MWZjN2RhNmIyY2I3OTFhMDVjNTc0NWRlMWUzZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidLISLdJDlYa5kCkrcswRUqajEa9
XWVbHg11aJuSg/Z5MMzvp5UVKHW8/46Z+dLPs6KtH0j5CGo7xSuxzexC+oWMuFk1
DpTkBrYe0JlqL6EQVwS6jVArFYbPyphBiVqX2/7RkxGjOG73VKdFQ42YW6mLURdx
7y0g1OtP9NYv2uKyWzSROg0xOBpFQo4VWEdXfzEzd7/oTDzW1jcZSa9DcJasYKUD
Ykx1GY6gV8PrSTCzSNY75VBPdCDYq0X/SX0Q3vgBSWpneWhRw/YyYYZktJn8Utq2
p3s8TeEqfR7cqYkb8fc5cTOT7tuKstgv+lx60L9ioE0mDp1gzgQvzypogQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAnNm7d5H8faayy3kaBcV0XeHj75MB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQ2MyYnQza2Z4OXByTExlUm9GeFhSZDRlUHZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCw8
MA0GCSqGSIb3DQEBCwUAA4IBAQB54YfNeP6baua8U5x9dQcOuuK/quYj+En4zz3O
GgEcUqxitu8Vwh7HeYEoYDzjoASJ6STYneAQgQXxOAcvxV3hEF+QbxGCpg53MGVr
2jlkclkAxo2YZXpYWzlllm7Ybf0gGLU2xBiEWa5H43S7JLxvQ/fPbYDqXuoW3bXN
jTOyyw4lN7GUqwj8+UE7uxMsK25GZqThPj6nacOgmoa6/hYSkuYDfefH2Af8GgAY
i5+uaSHGs0hO6snqyb30SZg+NynFwTGhfi+sS1eMGS7VBBTKVhjYbwNuWjdF+/YI
mQfCMSI8HMyqB3fxnZOFx8s0E0LG6T1T6CAAEytg7p0Noe9t
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:12 2024 by rpki-client on console-ams.rpki-client.org