Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/izzM0jofN8ByDBqfM2B2BcW5CeA.roa
File: izzM0jofN8ByDBqfM2B2BcW5CeA.roa (raw, json)
Hash identifier: WthRxpu+yF2YDoYpGl5jb2XGfwea680L/lqRoxi/ZJU=
Subject key identifier: 8B:3C:CC:D2:3A:1F:37:C0:72:0C:1A:9F:33:60:76:05:C5:B9:09:E0
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01916F2072252418D1E7364A09038C4946B8
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/izzM0jofN8ByDBqfM2B2BcW5CeA.roa
Signing time: Tue 20 Aug 2024 09:31:22 +0000
ROA not before: Tue 20 Aug 2024 09:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 2a0c:6980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 Aug 2024 12:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:20:72:25:24:18:d1:e7:36:4a:09:03:8c:49:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 20 09:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3cccd23a1f37c0720c1a9f33607605c5b909e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:a0:0c:84:05:31:97:dd:dc:82:cf:75:aa:
14:ab:96:b1:fb:9b:c5:ee:d0:de:5e:16:8f:4a:26:
b7:54:08:20:7f:2f:b4:a8:ff:e3:76:18:50:43:ef:
40:17:86:0d:24:81:2e:c0:de:61:5f:cc:70:82:3c:
06:aa:bb:a5:8c:c7:ec:8e:9d:95:b3:03:da:48:35:
f3:50:cc:45:ee:a7:28:92:fb:ab:ca:78:f8:93:12:
98:1f:8c:84:4a:fb:25:bf:8c:e0:40:2c:87:d5:f7:
78:85:57:85:ad:25:3a:b6:f5:c7:56:88:2d:6c:76:
7f:1f:b2:68:d9:cd:ea:34:8f:30:b7:0a:2a:5f:f4:
d3:1f:94:cf:b7:2a:a5:a9:0f:9b:d6:a6:76:75:f5:
f7:fd:b9:7a:26:3d:f7:d3:aa:60:5c:86:98:c8:45:
65:e7:ef:7a:43:91:44:fa:b3:4f:8a:2c:df:ec:82:
82:b0:25:fa:ed:b6:95:c6:ef:8b:51:15:e2:b8:b8:
68:88:04:be:89:de:e5:6e:4e:27:6c:61:93:8e:30:
88:53:ca:0b:e8:d8:48:33:2d:e1:33:d9:0d:23:fb:
cc:a2:30:9e:16:42:2d:69:91:c7:c9:80:1a:1d:0f:
03:36:eb:76:2b:64:43:b8:8e:df:08:d3:bc:60:b4:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:CC:D2:3A:1F:37:C0:72:0C:1A:9F:33:60:76:05:C5:B9:09:E0
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/izzM0jofN8ByDBqfM2B2BcW5CeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b1:93:d6:a9:4d:ef:91:09:c3:ad:47:d0:82:68:5b:32:b6:
c5:77:93:b4:80:f5:1d:55:50:03:0d:b6:92:55:e4:d4:e0:1a:
e9:05:2f:3c:9b:ba:7e:ef:71:b6:6a:54:2b:e1:3b:81:db:80:
e9:18:4f:98:bc:f6:51:f3:b7:e6:68:bd:c1:11:c9:10:2d:8f:
68:89:75:02:30:db:e8:41:50:fe:74:90:6e:60:20:dd:5a:cd:
ac:b6:4b:93:da:20:e8:a5:8d:5c:66:1d:62:46:ce:85:b3:17:
00:00:3d:8e:dd:8c:0a:6b:b3:16:8a:98:71:a1:ac:a2:3f:6d:
eb:1c:d6:ff:71:1e:b7:3d:12:5a:3b:49:82:a7:c2:fc:12:36:
f7:46:37:69:c3:e9:3d:83:86:e2:2a:6f:26:5a:f9:e4:b5:c5:
0d:a2:f2:1b:77:94:a2:eb:6f:db:32:b6:fc:07:4b:04:c3:d2:
95:8e:3e:07:3f:70:05:fa:e8:a3:4e:96:48:4b:fa:38:46:c3:
5b:cd:3e:98:0b:3a:37:88:29:2a:7c:46:5c:c0:20:70:7e:02:
cd:4a:50:19:eb:3d:d7:df:f9:07:27:57:b0:91:a3:e6:9d:ab:
ac:e3:41:5a:b8:33:75:49:e2:cf:c5:5f:2f:60:89:26:64:fb:
0c:e9:e9:e2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZFvIHIlJBjR5zZKCQOMSUa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQwODIwMDkzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjNjY2NkMjNhMWYzN2MwNzIwYzFhOWYzMzYwNzYwNWM1YjkwOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N2gDIQFMZfd3ILPdaoUq5ax+5vF
7tDeXhaPSia3VAggfy+0qP/jdhhQQ+9AF4YNJIEuwN5hX8xwgjwGqruljMfsjp2V
swPaSDXzUMxF7qcokvurynj4kxKYH4yESvslv4zgQCyH1fd4hVeFrSU6tvXHVogt
bHZ/H7Jo2c3qNI8wtwoqX/TTH5TPtyqlqQ+b1qZ2dfX3/bl6Jj3306pgXIaYyEVl
5+96Q5FE+rNPiizf7IKCsCX67baVxu+LURXiuLhoiAS+id7lbk4nbGGTjjCIU8oL
6NhIMy3hM9kNI/vMojCeFkItaZHHyYAaHQ8DNut2K2RDuI7fCNO8YLS/DQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIs8zNI6HzfAcgwanzNgdgXFuQngMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvaXp6TTBqb2ZOOEJ5REJxZk0yQjJCY1c1Q2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgxpgDAN
BgkqhkiG9w0BAQsFAAOCAQEAnbGT1qlN75EJw61H0IJoWzK2xXeTtID1HVVQAw22
klXk1OAa6QUvPJu6fu9xtmpUK+E7gduA6RhPmLz2UfO35mi9wRHJEC2PaIl1AjDb
6EFQ/nSQbmAg3VrNrLZLk9og6KWNXGYdYkbOhbMXAAA9jt2MCmuzFoqYcaGsoj9t
6xzW/3Eetz0SWjtJgqfC/BI290Y3acPpPYOG4ipvJlr55LXFDaLyG3eUoutv2zK2
/AdLBMPSlY4+Bz9wBfroo06WSEv6OEbDW80+mAs6N4gpKnxGXMAgcH4CzUpQGes9
19/5BydXsJGj5p2rrONBWrgzdUniz8VfL2CJJmT7DOnp4g==
-----END CERTIFICATE-----
Generated at Thu Aug 29 14:27:37 2024 by rpki-client on console-ams.rpki-client.org