Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/fFfcOkIHYjHMkOjUgi1gDkiSeTI.roa
File: fFfcOkIHYjHMkOjUgi1gDkiSeTI.roa (raw, json)
Hash identifier: cZFWT05/zwdUvvOAa/LPov8kQjTA0cYiZ061BsLnwNc=
Subject key identifier: 7C:57:DC:3A:42:07:62:31:CC:90:E8:D4:82:2D:60:0E:48:92:79:32
Certificate issuer: /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial: 01856E82035B31A6CBB25BC12EDE4EE9279C
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/fFfcOkIHYjHMkOjUgi1gDkiSeTI.roa
Signing time: Sun 01 Jan 2023 18:04:52 +0000
ROA not before: Sun 01 Jan 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:a30::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:03:5b:31:a6:cb:b2:5b:c1:2e:de:4e:e9:27:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Validity
Not Before: Jan 1 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c57dc3a42076231cc90e8d4822d600e48927932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:4d:52:2e:d8:9f:cb:53:4c:ef:ba:ab:64:
0b:1f:f0:96:ea:f5:9e:f4:9d:95:16:b0:d1:f0:ad:
f8:48:e1:70:ec:da:8b:64:13:87:04:61:85:13:c4:
9e:78:09:7a:16:08:36:25:5d:4a:30:15:30:55:6c:
4c:63:6c:0b:c6:4d:cf:cb:d4:0d:fc:c5:b1:95:cf:
ee:44:75:b1:a2:39:ff:2c:69:60:a3:a8:07:64:c0:
70:9b:e7:65:aa:88:48:1e:b6:97:57:34:07:e5:ce:
61:25:37:ea:79:0d:b3:5c:03:8e:51:37:bd:92:47:
ed:12:03:12:b9:a7:a7:16:5b:7d:fa:0a:7f:dc:08:
43:4c:c0:c7:24:a2:65:97:4c:25:07:93:19:d3:01:
29:95:48:c3:0f:ec:c2:50:12:9c:37:24:9e:49:df:
30:8f:ba:93:51:b9:fd:ad:62:e9:4b:88:f5:36:8c:
a1:9e:ba:c5:fa:dd:ce:f6:06:75:10:66:79:b2:69:
a4:4e:9c:75:a5:c9:8f:3b:c9:76:e0:ec:ea:72:ec:
ee:24:75:ba:c6:b0:a3:58:b4:4d:e1:b7:b8:e9:1b:
8d:1e:d6:83:12:53:81:7f:46:8e:5d:5f:2c:28:01:
44:d1:8c:39:7f:2b:b8:97:10:69:17:ae:99:32:a4:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:DC:3A:42:07:62:31:CC:90:E8:D4:82:2D:60:0E:48:92:79:32
X509v3 Authority Key Identifier:
keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/fFfcOkIHYjHMkOjUgi1gDkiSeTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a30::/48
Signature Algorithm: sha256WithRSAEncryption
dc:9e:4a:e4:73:1c:17:4a:bd:bb:47:c4:3a:be:8c:0c:6a:8f:
b1:d1:2e:9b:b4:8b:b4:aa:28:82:15:38:f1:aa:39:04:c3:1f:
d6:21:dd:ab:81:c0:f6:ed:03:3e:4c:85:5a:42:68:36:87:74:
4f:6e:e8:0f:f2:89:1d:64:fb:c7:ce:01:69:c3:4d:a9:f7:28:
b6:d8:c8:30:e0:76:27:24:81:8b:5e:bf:7a:f9:e8:f2:c1:56:
25:3c:3f:b5:4e:f6:96:07:ae:a9:fc:66:f1:2e:d8:ae:d5:09:
d4:95:7c:b9:0f:cb:d9:02:72:8d:06:0c:4a:a6:c2:ec:c5:7f:
69:eb:b1:33:f0:d5:3c:c2:e1:9c:37:a5:1b:18:e3:f8:21:c9:
f9:a6:69:31:b6:65:35:34:ee:5e:52:d5:a4:61:41:80:1f:58:
12:5c:06:aa:25:11:a5:55:82:66:1c:4d:da:23:04:cd:85:dc:
52:de:0c:2f:af:a5:09:3f:9b:45:33:8a:f6:61:7f:25:e6:e0:
dc:65:8e:94:6c:e8:e7:f0:87:60:38:a9:de:01:fe:4f:7c:0d:
4d:b0:6a:5d:31:c7:70:6d:de:65:f8:7b:91:41:98:1c:5b:6a:
d8:cb:f6:ba:96:d1:ad:70:a8:55:19:3e:04:fa:fb:64:12:9d:
0a:47:43:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVuggNbMabLslvBLt5O6SecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmQyNzEwYzJmY2Y1NTFiMzFmZDdjY2M2MGRmMWY2YmI0
YTkyYzQwHhcNMjMwMTAxMTgwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzU3ZGMzYTQyMDc2MjMxY2M5MGU4ZDQ4MjJkNjAwZTQ4OTI3OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddNUi7Yn8tTTO+6q2QLH/CW6vWe
9J2VFrDR8K34SOFw7NqLZBOHBGGFE8SeeAl6Fgg2JV1KMBUwVWxMY2wLxk3Py9QN
/MWxlc/uRHWxojn/LGlgo6gHZMBwm+dlqohIHraXVzQH5c5hJTfqeQ2zXAOOUTe9
kkftEgMSuaenFlt9+gp/3AhDTMDHJKJll0wlB5MZ0wEplUjDD+zCUBKcNySeSd8w
j7qTUbn9rWLpS4j1NoyhnrrF+t3O9gZ1EGZ5smmkTpx1pcmPO8l24OzqcuzuJHW6
xrCjWLRN4be46RuNHtaDElOBf0aOXV8sKAFE0Yw5fyu4lxBpF66ZMqQ2AwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHxX3DpCB2IxzJDo1IItYA5IknkyMB8GA1UdIwQY
MBaAFGq9JxDC/PVRsx/XzMYN8fa7SpLEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQt
NzRlMzMxZGJkMDdmLzEvZkZmY09rSUhZakhNa09qVWdpMWdEa2lTZVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MmY4MDktZTIzMS00ZWY1LTkwMTQtNzRlMzMxZGJkMDdm
LzEvYXIwbkVNTDg5Vkd6SDlmTXhnM3g5cnRLa3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAow
MA0GCSqGSIb3DQEBCwUAA4IBAQDcnkrkcxwXSr27R8Q6vowMao+x0S6btIu0qiiC
FTjxqjkEwx/WId2rgcD27QM+TIVaQmg2h3RPbugP8okdZPvHzgFpw02p9yi22Mgw
4HYnJIGLXr96+ejywVYlPD+1TvaWB66p/GbxLtiu1QnUlXy5D8vZAnKNBgxKpsLs
xX9p67Ez8NU8wuGcN6UbGOP4Icn5pmkxtmU1NO5eUtWkYUGAH1gSXAaqJRGlVYJm
HE3aIwTNhdxS3gwvr6UJP5tFM4r2YX8l5uDcZY6UbOjn8IdgOKneAf5PfA1NsGpd
Mcdwbd5l+HuRQZgcW2rYy/a6ltGtcKhVGT4E+vtkEp0KR0OS
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:07 2024 by rpki-client on console.sobornost.net