Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/8f-35cSwgmx1lE8Y2rhx48G5Ydo.roa
File: 8f-35cSwgmx1lE8Y2rhx48G5Ydo.roa (raw, json)
Hash identifier: fqEnMKr0hbKAl7wUsYwiM6iBOMTFViHz8d/4rVmHB4Y=
Subject key identifier: F1:FF:B7:E5:C4:B0:82:6C:75:94:4F:18:DA:B8:71:E3:C1:B9:61:DA
Certificate issuer: /CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Certificate serial: 01856DCAD28542376515881A6AB727933564
Authority key identifier: 6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/8f-35cSwgmx1lE8Y2rhx48G5Ydo.roa
Signing time: Sun 01 Jan 2023 14:44:46 +0000
ROA not before: Sun 01 Jan 2023 14:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30870
IP address blocks: 2.56.224.0/23 maxlen: 23
2a09:d240::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Apr 2023 08:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:d2:85:42:37:65:15:88:1a:6a:b7:27:93:35:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Validity
Not Before: Jan 1 14:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ffb7e5c4b0826c75944f18dab871e3c1b961da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:2b:3b:0c:56:48:12:5c:20:64:af:58:6b:
60:1d:65:5a:0a:62:32:81:b8:53:4d:b6:9b:19:b0:
c1:0c:5a:92:c3:e2:6a:79:65:1c:cf:52:c1:62:2d:
e8:31:2b:0c:b2:d1:4d:8b:d2:7b:01:a7:0a:d7:ea:
d5:eb:d3:af:3b:8d:f3:6a:90:eb:95:d0:d2:54:e5:
00:26:9d:b9:34:b6:43:2c:00:19:33:31:45:b2:a1:
c7:56:2b:fd:5d:ff:cc:3d:fd:2f:94:85:27:9b:fe:
b6:71:b8:ca:56:a1:b8:be:74:72:40:d5:c9:39:f8:
0a:68:58:a7:d8:71:bb:86:2f:67:9f:b1:d3:6b:3a:
6e:a1:8a:71:dc:b6:66:d0:0a:81:78:14:9d:bf:35:
81:fb:36:70:a3:a2:fe:0a:37:68:f2:03:5b:26:7d:
05:c6:d0:53:47:0d:30:77:04:bd:6f:6d:86:91:01:
11:06:17:2c:1a:2e:1c:55:6f:97:dd:1a:8b:60:4f:
25:2d:5c:f5:cf:0f:3e:69:c9:93:1f:d3:c7:b6:e5:
4c:a7:a9:b5:42:4a:fe:22:55:09:41:bc:6c:10:15:
e7:54:23:4f:16:00:4b:e6:f2:81:58:2c:8c:20:c6:
37:24:2a:11:81:16:b7:90:08:33:46:e8:d2:d0:47:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:B7:E5:C4:B0:82:6C:75:94:4F:18:DA:B8:71:E3:C1:B9:61:DA
X509v3 Authority Key Identifier:
keyid:6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/8f-35cSwgmx1lE8Y2rhx48G5Ydo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.224.0/23
IPv6:
2a09:d240::/48
Signature Algorithm: sha256WithRSAEncryption
86:b8:f7:0d:d5:5a:e9:1f:4c:5d:d2:54:1e:6e:51:4f:99:5a:
d6:8b:78:9a:01:70:9a:5f:1b:48:6c:49:6b:5e:3c:b2:b8:48:
23:7e:28:6e:ae:89:92:f4:6a:c8:83:b4:3d:a5:1f:4b:4d:ed:
19:45:ec:89:d8:7b:ed:f2:9b:d0:44:24:4b:a2:32:65:07:07:
83:2a:8b:b4:45:c9:1c:ac:94:9b:e4:99:fb:7d:95:e0:5f:2a:
49:13:73:27:04:bb:cc:90:48:6b:75:eb:b1:fc:4b:e1:48:c8:
4d:52:7e:0a:be:80:1e:88:46:a9:b8:f1:7e:48:ae:04:5c:c6:
98:e5:cb:cf:34:d2:ab:83:b1:06:12:52:41:7d:9c:2d:5f:6a:
7c:e1:6a:f0:6c:28:12:8e:0c:87:e3:2c:c8:bf:5e:9c:ca:c7:
40:3d:1a:ca:7f:73:d3:05:6b:80:c3:fb:47:27:d1:5b:73:86:
2f:f9:e5:25:76:87:fc:87:e4:cc:d6:b6:98:ce:26:7e:de:52:
e8:02:36:00:ff:f9:63:89:c9:d6:14:20:28:5e:ae:13:82:86:
7b:34:d2:6b:4a:06:e3:64:a7:5d:f2:d7:7c:55:0b:7c:50:97:
75:82:b3:39:c2:1e:83:0a:88:7f:f5:d7:e1:fe:1c:d5:48:0b:
97:06:69:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtytKFQjdlFYgaarcnkzVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWIxMGYwYTRiOTE5NjQ1NDFhNWUxOWE5Y2I4M2NiNzI2
ODk1MGUwHhcNMjMwMTAxMTQ0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWZmYjdlNWM0YjA4MjZjNzU5NDRmMThkYWI4NzFlM2MxYjk2MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ4rOwxWSBJcIGSvWGtgHWVaCmIy
gbhTTbabGbDBDFqSw+JqeWUcz1LBYi3oMSsMstFNi9J7AacK1+rV69OvO43zapDr
ldDSVOUAJp25NLZDLAAZMzFFsqHHViv9Xf/MPf0vlIUnm/62cbjKVqG4vnRyQNXJ
OfgKaFin2HG7hi9nn7HTazpuoYpx3LZm0AqBeBSdvzWB+zZwo6L+Cjdo8gNbJn0F
xtBTRw0wdwS9b22GkQERBhcsGi4cVW+X3RqLYE8lLVz1zw8+acmTH9PHtuVMp6m1
Qkr+IlUJQbxsEBXnVCNPFgBL5vKBWCyMIMY3JCoRgRa3kAgzRujS0EfvPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPH/t+XEsIJsdZRPGNq4cePBuWHaMB8GA1UdIwQY
MBaAFG7rEPCkuRlkVBpeGanLg8tyaJUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnVzUThLUzVHV1JVR2w0WnFjdUR5M0pvbFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81NDlhMzctMmMwMC00YjQxLWFiZjQt
ODI5YTFjYmUyM2YyLzEvOGYtMzVjU3dnbXgxbEU4WTJyaHg0OEc1WWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81NDlhMzctMmMwMC00YjQxLWFiZjQtODI5YTFjYmUyM2Yy
LzEvYnVzUThLUzVHV1JVR2w0WnFjdUR5M0pvbFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBAjjgMA8E
AgACMAkDBwAqCdJAAAAwDQYJKoZIhvcNAQELBQADggEBAIa49w3VWukfTF3SVB5u
UU+ZWtaLeJoBcJpfG0hsSWtePLK4SCN+KG6uiZL0asiDtD2lH0tN7RlF7InYe+3y
m9BEJEuiMmUHB4Mqi7RFyRyslJvkmft9leBfKkkTcycEu8yQSGt167H8S+FIyE1S
fgq+gB6IRqm48X5IrgRcxpjly8800quDsQYSUkF9nC1fanzhavBsKBKODIfjLMi/
XpzKx0A9Gsp/c9MFa4DD+0cn0Vtzhi/55SV2h/yH5MzWtpjOJn7eUugCNgD/+WOJ
ydYUICherhOChns00mtKBuNkp13y13xVC3xQl3WCsznCHoMKiH/11+H+HNVIC5cG
ad8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:10 2024 by rpki-client on console-ams.rpki-client.org