Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/xsuR4xtaxKSQpA1w-Hk8adW8Ins.roa
File: xsuR4xtaxKSQpA1w-Hk8adW8Ins.roa (raw, json)
Hash identifier: GqwNMfbx5XVaRc9gSdZP3/NP4eytX3lp/hj0zLYsj3A=
Subject key identifier: C6:CB:91:E3:1B:5A:C4:A4:90:A4:0D:70:F8:79:3C:69:D5:BC:22:7B
Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec
Certificate serial: 0187DB73A8FF0C74690F7BF47BB1D68A3460
Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/xsuR4xtaxKSQpA1w-Hk8adW8Ins.roa
Signing time: Tue 02 May 2023 07:53:22 +0000
ROA not before: Tue 02 May 2023 07:53:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57225
IP address blocks: 2a0a:b400::/31 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:73:a8:ff:0c:74:69:0f:7b:f4:7b:b1:d6:8a:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec
Validity
Not Before: May 2 07:53:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6cb91e31b5ac4a490a40d70f8793c69d5bc227b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:99:90:8d:dd:2e:84:55:7d:02:bf:b1:95:80:
28:e7:b8:6d:d0:c1:76:89:82:fb:e4:17:8d:ad:66:
4d:2a:ba:8c:d5:ec:6c:36:93:52:7b:66:76:58:1b:
79:66:94:e9:62:8a:1c:bf:5a:51:d7:b7:d8:47:d4:
49:b8:d1:2e:98:f9:c6:6a:17:42:8f:8e:47:c6:1d:
75:82:81:06:44:4e:a5:7f:b1:37:4d:74:50:48:dc:
5d:10:e0:72:84:84:6d:51:51:01:e3:bb:6b:bd:bc:
e9:ab:d9:39:02:79:11:26:c2:1b:e1:da:5b:ef:67:
4e:af:a5:85:a2:57:0f:31:26:12:b1:c0:0a:a7:a1:
b5:0d:8f:57:c4:c6:49:ac:33:76:19:0f:23:81:fc:
03:9e:42:68:8d:d1:2e:8c:ae:f3:ce:66:ca:af:03:
e3:59:a0:ec:a8:b3:fd:3f:c3:c9:72:87:8d:d3:65:
c9:84:a5:8e:8c:49:9c:b7:e4:48:f6:df:69:05:cb:
92:e4:d5:e9:a7:dc:4f:ab:03:e3:67:2d:ff:57:87:
04:f4:d1:ca:1f:0d:3d:3b:17:52:d5:61:9c:d6:c0:
81:d9:0e:ec:65:8b:a2:d3:52:ae:43:35:bf:5e:2b:
e3:8a:83:ba:13:c7:39:a8:dd:97:77:89:1f:23:33:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:91:E3:1B:5A:C4:A4:90:A4:0D:70:F8:79:3C:69:D5:BC:22:7B
X509v3 Authority Key Identifier:
keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/xsuR4xtaxKSQpA1w-Hk8adW8Ins.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:b400::/31
Signature Algorithm: sha256WithRSAEncryption
a9:db:3e:14:be:44:3e:21:08:74:bf:18:48:76:47:ab:14:47:
f4:af:ec:92:c5:a7:a7:dc:bc:cd:63:13:6e:d5:80:07:e4:cb:
83:06:16:ff:5e:4e:87:c9:8b:1e:0b:2e:b9:9a:4d:ae:28:d9:
6e:c7:72:58:e3:b9:7f:80:63:43:c6:c8:3b:96:7c:12:1b:f4:
10:b9:09:da:03:9c:40:51:73:a8:60:3d:7f:e1:2e:b9:cc:8e:
37:7d:5d:3a:a0:ff:8b:5e:0a:b2:09:2a:78:f7:5e:98:b2:05:
90:52:21:c1:c7:8a:11:37:48:52:17:05:5f:9f:8f:0c:63:fc:
b6:e7:8a:64:9a:99:8b:0f:07:40:0a:bb:1e:a5:69:00:8e:36:
de:b1:81:20:bb:f3:91:db:e8:a9:79:89:10:96:32:fe:bf:a6:
b5:6b:4f:b8:d6:c7:b5:1c:8f:06:9d:ee:99:47:13:4c:d5:ae:
d2:f1:3f:10:8b:b9:8d:8c:b9:17:87:da:dd:3f:5e:2a:b0:b4:
c3:e0:6f:a2:05:04:53:4b:59:85:c5:3b:be:c1:38:ce:2a:ab:
bc:58:67:05:d4:9b:63:01:19:0a:58:21:67:ee:ad:dd:6f:8e:
8b:f4:18:53:e2:dd:ff:36:35:96:44:59:ff:e8:96:4c:19:b0:
61:c9:1d:c2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYfbc6j/DHRpD3v0e7HWijRgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1
ZDgxZWMwHhcNMjMwNTAyMDc1MzIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmNiOTFlMzFiNWFjNGE0OTBhNDBkNzBmODc5M2M2OWQ1YmMyMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpmQjd0uhFV9Ar+xlYAo57ht0MF2
iYL75BeNrWZNKrqM1exsNpNSe2Z2WBt5ZpTpYoocv1pR17fYR9RJuNEumPnGahdC
j45Hxh11goEGRE6lf7E3TXRQSNxdEOByhIRtUVEB47trvbzpq9k5AnkRJsIb4dpb
72dOr6WFolcPMSYSscAKp6G1DY9XxMZJrDN2GQ8jgfwDnkJojdEujK7zzmbKrwPj
WaDsqLP9P8PJcoeN02XJhKWOjEmct+RI9t9pBcuS5NXpp9xPqwPjZy3/V4cE9NHK
Hw09OxdS1WGc1sCB2Q7sZYui01KuQzW/XivjioO6E8c5qN2Xd4kfIzOrgwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMbLkeMbWsSkkKQNcPh5PGnVvCJ7MB8GA1UdIwQY
MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEveHN1UjR4dGF4S1NRcEExdy1IazhhZFc4SW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgq0ADAN
BgkqhkiG9w0BAQsFAAOCAQEAqds+FL5EPiEIdL8YSHZHqxRH9K/sksWnp9y8zWMT
btWAB+TLgwYW/15Oh8mLHgsuuZpNrijZbsdyWOO5f4BjQ8bIO5Z8Ehv0ELkJ2gOc
QFFzqGA9f+EuucyON31dOqD/i14KsgkqePdemLIFkFIhwceKETdIUhcFX5+PDGP8
tueKZJqZiw8HQAq7HqVpAI423rGBILvzkdvoqXmJEJYy/r+mtWtPuNbHtRyPBp3u
mUcTTNWu0vE/EIu5jYy5F4fa3T9eKrC0w+BvogUEU0tZhcU7vsE4ziqrvFhnBdSb
YwEZClghZ+6t3W+Oi/QYU+Ld/zY1lkRZ/+iWTBmwYckdwg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:48 2024 by rpki-client on console.sobornost.net