Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa
File: s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa (raw, json)
Hash identifier: o1A/D61mTObefyGMXQGq/PPzYZ9rfPRFXWY7y0B3fi8=
Subject key identifier: B3:EC:30:26:3B:B2:AE:C4:AF:F7:F3:BC:BF:95:65:62:22:FA:5F:F7
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01865F012B56229B0D410B1C971E7379A3CE
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa
Signing time: Fri 17 Feb 2023 10:52:37 +0000
ROA not before: Fri 17 Feb 2023 10:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50340
IP address blocks: 2001:67c:6d0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:01:2b:56:22:9b:0d:41:0b:1c:97:1e:73:79:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Feb 17 10:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3ec30263bb2aec4aff7f3bcbf95656222fa5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:fb:06:fc:e4:1c:3e:99:b7:8d:cf:a9:8f:
12:aa:01:96:8a:ae:b2:e3:f9:f6:bd:8f:33:59:2f:
a1:bf:6f:bb:c9:db:7b:52:95:c5:c0:59:52:63:36:
75:93:a9:4e:17:4c:62:f3:8f:c1:af:22:cb:86:7d:
c4:1b:14:f0:57:dc:04:4b:bf:e0:a6:b8:35:74:ec:
fc:26:70:95:03:8b:35:76:5b:af:40:5d:5d:2f:a7:
a2:05:d3:91:eb:7d:d7:3b:a5:7b:28:72:fb:43:1d:
0e:6d:20:be:0a:82:7a:cb:d1:c0:14:d6:4e:f2:92:
5f:b6:68:69:91:bd:d5:6e:26:66:3c:5f:65:00:1b:
aa:05:78:0f:4a:c4:ba:e4:1c:ae:75:da:fb:58:fe:
65:27:83:a6:1f:f3:d9:07:63:ac:be:eb:e4:1f:20:
c5:c3:b4:26:16:47:de:0f:c3:10:01:8f:4b:9e:75:
c4:4d:19:95:67:38:8c:48:22:2b:9c:48:68:2c:83:
5e:ee:55:15:f2:f9:8f:19:72:b5:64:db:90:c8:be:
2c:d8:07:78:09:31:52:b9:f2:c3:ae:9d:67:13:f8:
6c:99:2f:0d:00:08:a5:29:ab:bd:cc:53:d1:39:03:
dd:4d:94:a4:c8:93:40:12:4a:23:e5:21:46:5e:d0:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:30:26:3B:B2:AE:C4:AF:F7:F3:BC:BF:95:65:62:22:FA:5F:F7
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/s-wwJjuyrsSv9_O8v5VlYiL6X_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:6d0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:75:e1:f3:cd:bb:98:f6:48:fd:82:86:70:15:e7:43:8b:2a:
a4:42:92:bf:41:e6:96:f8:94:89:fc:a7:d8:aa:76:b6:86:66:
82:f5:94:a3:b2:12:af:b9:fd:2a:9a:3f:44:52:62:85:c8:3f:
74:86:7b:54:d1:84:69:6d:b7:16:19:bd:b2:1d:a0:e5:a8:b3:
78:d3:72:37:14:46:8b:91:19:8b:87:33:aa:d3:d7:f6:c5:c8:
ee:20:6e:47:c1:63:dc:8d:32:c9:82:17:3d:50:fd:0e:b2:5f:
a3:88:c4:cd:5a:15:a4:73:16:a0:57:ec:32:e9:fd:05:24:95:
97:43:f1:ac:c5:7c:77:f2:2e:2e:41:55:ac:e9:34:5c:47:a0:
7b:13:90:f3:ab:04:a3:40:ff:cf:7f:75:e1:ec:1c:47:0a:48:
ce:7e:02:6c:98:3e:73:a8:84:ef:53:91:88:f2:60:ca:ff:82:
3a:2a:0e:21:d0:4e:ad:87:ea:57:a2:4e:43:f1:e9:57:4e:81:
1d:01:17:d7:56:ae:1b:a1:f1:5e:00:6c:a4:d2:3e:a1:8d:8e:
5c:75:6e:bf:39:bc:a9:3a:ee:a1:6a:35:be:ca:02:28:2e:6f:
7d:50:7f:66:d8:b4:9e:02:72:93:8d:0d:c1:5a:fd:20:8e:6f:
b2:a5:3b:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZfAStWIpsNQQsclx5zeaPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2
NTAyNTAwHhcNMjMwMjE3MTA1MjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2VjMzAyNjNiYjJhZWM0YWZmN2YzYmNiZjk1NjU2MjIyZmE1ZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7b7BvzkHD6Zt43PqY8SqgGWiq6y
4/n2vY8zWS+hv2+7ydt7UpXFwFlSYzZ1k6lOF0xi84/BryLLhn3EGxTwV9wES7/g
prg1dOz8JnCVA4s1dluvQF1dL6eiBdOR633XO6V7KHL7Qx0ObSC+CoJ6y9HAFNZO
8pJftmhpkb3VbiZmPF9lABuqBXgPSsS65Byuddr7WP5lJ4OmH/PZB2OsvuvkHyDF
w7QmFkfeD8MQAY9LnnXETRmVZziMSCIrnEhoLINe7lUV8vmPGXK1ZNuQyL4s2Ad4
CTFSufLDrp1nE/hsmS8NAAilKau9zFPROQPdTZSkyJNAEkoj5SFGXtAlMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLPsMCY7sq7Er/fzvL+VZWIi+l/3MB8GA1UdIwQY
MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt
NTQxZjlmY2JhNzQyLzEvcy13d0pqdXlyc1N2OV9POHY1VmxZaUw2WF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy
LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAbdeHzzbuY9kj9goZwFedDiyqkQpK/QeaW+JSJ
/KfYqna2hmaC9ZSjshKvuf0qmj9EUmKFyD90hntU0YRpbbcWGb2yHaDlqLN403I3
FEaLkRmLhzOq09f2xcjuIG5HwWPcjTLJghc9UP0Osl+jiMTNWhWkcxagV+wy6f0F
JJWXQ/GsxXx38i4uQVWs6TRcR6B7E5DzqwSjQP/Pf3Xh7BxHCkjOfgJsmD5zqITv
U5GI8mDK/4I6Kg4h0E6th+pXok5D8elXToEdARfXVq4bofFeAGyk0j6hjY5cdW6/
ObypOu6hajW+ygIoLm99UH9m2LSeAnKTjQ3BWv0gjm+ypTth
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:26 2024 by rpki-client on console-ams.rpki-client.org