Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/XNo7aBO2WXMgNqyK_eXs0MeojVA.roa
File: XNo7aBO2WXMgNqyK_eXs0MeojVA.roa (raw, json)
Hash identifier: 1BaM/L/HgYnkFmM4WwkrBjLWO1kUeZ0TBbII89Y/kE0=
Subject key identifier: 5C:DA:3B:68:13:B6:59:73:20:36:AC:8A:FD:E5:EC:D0:C7:A8:8D:50
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0185734CAA90C0135F8BE0E56E8483D797AF
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/XNo7aBO2WXMgNqyK_eXs0MeojVA.roa
Signing time: Mon 02 Jan 2023 16:24:42 +0000
ROA not before: Mon 02 Jan 2023 16:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50967
IP address blocks: 2001:67c:2140::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:aa:90:c0:13:5f:8b:e0:e5:6e:84:83:d7:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Jan 2 16:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cda3b6813b659732036ac8afde5ecd0c7a88d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:0b:dd:8c:91:e0:d7:bf:c2:c6:43:4f:6a:
fc:52:cc:22:f9:07:87:b2:64:9e:52:a6:ed:37:c3:
79:cb:99:15:37:d7:95:8f:6e:3d:85:d8:d7:92:1f:
90:70:10:47:79:b4:54:f1:ef:61:82:5b:ca:90:96:
49:4e:c9:63:09:9f:38:92:36:13:11:7e:7d:30:a9:
08:71:62:90:78:9b:6a:6a:d1:2c:10:c8:4a:6d:cd:
ff:e8:f9:78:e4:61:48:4a:9f:b0:9a:e7:bf:2f:a3:
71:1e:3c:1b:8c:1d:28:25:4a:35:67:6a:ae:00:f6:
12:43:ff:88:e2:f1:f8:30:99:76:d2:22:14:0c:e2:
c4:52:78:25:e6:27:a6:ba:08:7f:51:ad:37:c4:23:
cb:4c:77:21:b3:c9:6d:fa:d3:75:d9:11:88:37:c8:
6e:2b:5a:80:6f:f1:ce:04:51:79:48:57:56:6f:c6:
f9:93:7a:a2:2b:cd:80:fa:16:69:d5:76:ef:81:6e:
88:61:7b:c2:c9:ba:2f:7f:02:97:d4:8e:fe:02:cb:
fa:7a:08:73:64:1a:02:f1:b4:7d:1f:89:94:b6:9a:
4e:f4:a6:8d:72:b5:d3:89:68:b3:5f:d1:b8:a5:37:
67:34:60:4e:70:35:ed:b1:2c:12:2c:ea:d0:69:7f:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:3B:68:13:B6:59:73:20:36:AC:8A:FD:E5:EC:D0:C7:A8:8D:50
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/XNo7aBO2WXMgNqyK_eXs0MeojVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2140::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d3:07:b1:1f:12:36:d5:b9:27:2c:f8:f3:a2:80:bc:cd:3d:
22:ec:9c:be:01:88:ce:65:83:63:1c:e0:3f:6a:63:b4:26:f7:
7b:b4:f0:72:eb:ce:5e:17:4a:85:63:67:8d:e1:d3:96:d8:4e:
bf:ab:b8:17:64:e6:81:81:36:b2:5c:c1:36:ff:2c:06:64:a7:
1b:99:76:17:bd:23:b1:99:d5:84:01:88:13:cf:60:b1:db:26:
63:88:55:73:da:c3:29:6d:20:1b:aa:e3:50:4e:91:a5:98:7d:
7a:08:cd:a8:fc:7d:33:13:ff:a6:1f:56:4c:c4:86:ab:cd:e3:
73:cd:eb:83:ec:94:e7:ab:59:5b:d9:67:ca:d9:36:e6:d3:3a:
04:fd:5a:dd:19:1e:0f:53:e5:4c:74:15:9e:a0:04:34:de:b7:
d4:77:d2:5a:10:11:b9:43:48:b6:23:a9:11:3d:18:92:fc:1a:
1b:a1:9c:68:b1:c0:f2:0b:61:50:d8:5b:40:ca:bd:db:11:26:
8f:05:64:1e:83:ea:47:c0:9e:e8:77:78:92:e6:6e:c6:68:15:
a5:55:2c:9a:9e:57:5d:aa:6e:6b:3f:34:0c:1e:bd:dc:1e:11:
c9:c1:33:21:9b:bc:a4:a8:7a:f7:2e:0c:32:c2:5b:44:ba:d2:
d5:51:fc:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVzTKqQwBNfi+DlboSD15evMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2
MjUzNmMwHhcNMjMwMTAyMTYyNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RhM2I2ODEzYjY1OTczMjAzNmFjOGFmZGU1ZWNkMGM3YTg4ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJcL3YyR4Ne/wsZDT2r8Uswi+QeH
smSeUqbtN8N5y5kVN9eVj249hdjXkh+QcBBHebRU8e9hglvKkJZJTsljCZ84kjYT
EX59MKkIcWKQeJtqatEsEMhKbc3/6Pl45GFISp+wmue/L6NxHjwbjB0oJUo1Z2qu
APYSQ/+I4vH4MJl20iIUDOLEUngl5iemugh/Ua03xCPLTHchs8lt+tN12RGIN8hu
K1qAb/HOBFF5SFdWb8b5k3qiK82A+hZp1XbvgW6IYXvCybovfwKX1I7+Asv6eghz
ZBoC8bR9H4mUtppO9KaNcrXTiWizX9G4pTdnNGBOcDXtsSwSLOrQaX8uGwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFzaO2gTtllzIDasiv3l7NDHqI1QMB8GA1UdIwQY
MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt
NjBmOWRlYTQzODk5LzEvWE5vN2FCTzJXWE1nTnF5S19lWHMwTWVvalZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5
LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCFA
MA0GCSqGSIb3DQEBCwUAA4IBAQBO0wexHxI21bknLPjzooC8zT0i7Jy+AYjOZYNj
HOA/amO0Jvd7tPBy685eF0qFY2eN4dOW2E6/q7gXZOaBgTayXME2/ywGZKcbmXYX
vSOxmdWEAYgTz2Cx2yZjiFVz2sMpbSAbquNQTpGlmH16CM2o/H0zE/+mH1ZMxIar
zeNzzeuD7JTnq1lb2WfK2Tbm0zoE/VrdGR4PU+VMdBWeoAQ03rfUd9JaEBG5Q0i2
I6kRPRiS/BoboZxoscDyC2FQ2FtAyr3bESaPBWQeg+pHwJ7od3iS5m7GaBWlVSya
nlddqm5rPzQMHr3cHhHJwTMhm7ykqHr3LgwywltEutLVUfxA
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:26 2024 by rpki-client on console.sobornost.net