Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/U_QEleHAOlj_fKHWf9LFVAxCBlQ.roa
File: U_QEleHAOlj_fKHWf9LFVAxCBlQ.roa (raw, json)
Hash identifier: 6SPa+EYQyLzM7RbizR+Dc67qAnrXcUOrJAZMWm4/P+U=
Subject key identifier: 53:F4:04:95:E1:C0:3A:58:FF:7C:A1:D6:7F:D2:C5:54:0C:42:06:54
Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Certificate serial: 018AAD9E1847E923CB3C6E0A7378BE3D4E34
Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/U_QEleHAOlj_fKHWf9LFVAxCBlQ.roa
Signing time: Tue 19 Sep 2023 13:25:33 +0000
ROA not before: Tue 19 Sep 2023 13:25:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50245
IP address blocks: 2a13:f980::/29 maxlen: 48
2a13:f980::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:9e:18:47:e9:23:cb:3c:6e:0a:73:78:be:3d:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17
Validity
Not Before: Sep 19 13:25:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f40495e1c03a58ff7ca1d67fd2c5540c420654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:ef:51:24:9e:42:8c:25:64:06:78:ec:f5:
13:15:e4:dc:06:6c:b1:58:da:30:2d:27:f7:43:fc:
64:6a:6d:2b:89:71:a0:69:d3:61:f5:17:bd:49:b4:
e8:8b:20:e4:f4:a1:47:fa:b1:ce:16:ab:90:99:7d:
a6:88:67:b0:18:e8:2c:8c:1d:25:7a:9e:d6:a1:bd:
ac:e8:a5:21:93:08:26:bf:de:31:9b:e9:a3:06:44:
67:e7:88:89:83:95:7d:30:75:3e:19:03:ea:e9:03:
1b:49:09:12:6d:6c:9a:a0:a2:92:b9:57:7a:0b:91:
12:4b:6a:8e:5a:bb:8d:5a:4c:5d:dc:06:e7:fd:1a:
c3:7c:45:96:fc:c8:37:29:71:42:a8:be:ff:73:ed:
d2:a1:78:ec:79:67:4f:32:52:22:c6:17:fe:da:19:
d0:53:fe:1b:66:ce:ce:3c:a5:5e:59:24:b5:92:64:
15:fe:a5:c4:ae:ec:ac:cf:0d:49:ec:92:ed:80:5f:
02:e7:93:3a:29:96:b6:ec:86:1b:22:b4:d4:ac:be:
38:c4:69:28:f0:e5:01:d2:66:16:32:f6:d6:8e:7a:
58:e0:aa:b2:6a:a8:b5:bb:b7:dd:c5:a9:ad:cd:2f:
ca:12:d3:7e:ca:93:4e:bc:4a:f2:4e:cc:93:4b:94:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F4:04:95:E1:C0:3A:58:FF:7C:A1:D6:7F:D2:C5:54:0C:42:06:54
X509v3 Authority Key Identifier:
keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/U_QEleHAOlj_fKHWf9LFVAxCBlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f980::/29
Signature Algorithm: sha256WithRSAEncryption
37:ff:cb:14:88:8f:1c:22:6e:7c:8d:48:d4:1e:2c:94:5d:d9:
0e:75:3c:e9:14:b5:63:0d:47:1d:46:3e:46:44:e4:c2:63:cc:
c1:8d:ac:8c:20:bc:73:75:50:27:f1:cc:d4:da:2b:0e:9b:60:
f4:c5:32:95:03:ad:d4:12:8c:00:8e:98:8d:f4:d0:2e:a0:e5:
8c:63:5d:e5:8a:d3:2d:b4:78:87:19:a7:a8:56:04:ed:af:2c:
85:60:3f:50:c0:f1:a1:75:b7:18:76:9a:17:c8:e6:9c:5b:63:
6f:32:a6:2d:82:c4:1a:32:bb:e8:c4:0e:57:ac:ab:b6:a4:d2:
d5:9d:29:d3:37:95:4c:1a:b7:40:95:58:32:6d:7c:1a:9b:b7:
76:9a:0b:3b:f1:db:c0:71:f2:a9:c5:cf:7d:b9:5f:be:20:f2:
c9:81:c6:59:65:40:18:3e:2f:85:ee:a6:f0:cf:e7:72:07:6d:
5e:06:a7:3c:50:8c:1d:c8:dd:fe:c4:fe:69:a9:e2:78:d2:8e:
b1:a6:ec:c1:9d:17:6c:1b:14:94:ab:ae:75:e7:99:11:cb:b0:
55:66:f2:1e:d8:e7:e4:6c:86:ae:33:53:3d:0c:5f:88:3f:92:
df:33:4c:69:fd:18:d8:b9:cf:70:4c:77:4e:98:89:78:02:f4:
9f:fc:e4:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYqtnhhH6SPLPG4Kc3i+PU40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzBiZDlmODMzMWVhODQzOGZkMmEyZjY3MWI3MWFmNGEy
ZGVjMTcwHhcNMjMwOTE5MTMyNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Y0MDQ5NWUxYzAzYTU4ZmY3Y2ExZDY3ZmQyYzU1NDBjNDIwNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS7vUSSeQowlZAZ47PUTFeTcBmyx
WNowLSf3Q/xkam0riXGgadNh9Re9SbToiyDk9KFH+rHOFquQmX2miGewGOgsjB0l
ep7Wob2s6KUhkwgmv94xm+mjBkRn54iJg5V9MHU+GQPq6QMbSQkSbWyaoKKSuVd6
C5ESS2qOWruNWkxd3Abn/RrDfEWW/Mg3KXFCqL7/c+3SoXjseWdPMlIixhf+2hnQ
U/4bZs7OPKVeWSS1kmQV/qXEruyszw1J7JLtgF8C55M6KZa27IYbIrTUrL44xGko
8OUB0mYWMvbWjnpY4Kqyaqi1u7fdxamtzS/KEtN+ypNOvEryTsyTS5TLMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFP0BJXhwDpY/3yh1n/SxVQMQgZUMB8GA1UdIwQY
MBaAFFfAvZ+DMeqEOP0qL2cbca9KLewXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5Yjgt
YTA5M2QxMDA4NzRjLzEvVV9RRWxlSEFPbGpfZktIV2Y5TEZWQXhDQmxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5YjgtYTA5M2QxMDA4NzRj
LzEvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhP5gDAN
BgkqhkiG9w0BAQsFAAOCAQEAN//LFIiPHCJufI1I1B4slF3ZDnU86RS1Yw1HHUY+
RkTkwmPMwY2sjCC8c3VQJ/HM1NorDptg9MUylQOt1BKMAI6YjfTQLqDljGNd5YrT
LbR4hxmnqFYE7a8shWA/UMDxoXW3GHaaF8jmnFtjbzKmLYLEGjK76MQOV6yrtqTS
1Z0p0zeVTBq3QJVYMm18Gpu3dpoLO/HbwHHyqcXPfblfviDyyYHGWWVAGD4vhe6m
8M/ncgdtXganPFCMHcjd/sT+aanieNKOsabswZ0XbBsUlKuudeeZEcuwVWbyHtjn
5GyGrjNTPQxfiD+S3zNMaf0Y2LnPcEx3TpiJeAL0n/zkKg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:31 2024 by rpki-client on console-fra.rpki-client.org