Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1FXDJOwIsT0NK9F2S_UM05VNjew.roa
File: 1FXDJOwIsT0NK9F2S_UM05VNjew.roa (raw, json)
Hash identifier: 0EPv2IqdP+yHbmB36odLW5B6dGqg1GTzngGsR9Vskfc=
Subject key identifier: D4:55:C3:24:EC:08:B1:3D:0D:2B:D1:76:4B:F5:0C:D3:95:4D:8D:EC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FC9C084F044E8933793DAADE9FC12677B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1FXDJOwIsT0NK9F2S_UM05VNjew.roa
Signing time: Thu 30 May 2024 13:46:28 +0000
ROA not before: Thu 30 May 2024 13:46:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/44 maxlen: 48
2a06:de01:d0::/45 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:c0:84:f0:44:e8:93:37:93:da:ad:e9:fc:12:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 30 13:46:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d455c324ec08b13d0d2bd1764bf50cd3954d8dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:a5:10:b8:c9:72:d2:5b:94:42:cf:71:5e:
02:93:85:9a:20:ef:15:4c:1b:18:09:a0:6e:c3:c6:
5c:f5:8a:0b:e7:ec:71:12:e0:7f:5e:5e:89:99:dd:
bf:45:fd:4c:cb:bb:90:98:ca:d4:ab:cd:ca:e0:a0:
97:e0:31:58:9c:26:cd:16:c0:4b:63:20:98:62:ea:
83:69:34:cd:58:a7:ac:f5:c5:c3:89:f1:52:f7:34:
3f:29:80:d0:5e:e4:06:1c:59:10:5c:83:ff:ad:8c:
30:cf:d9:6e:99:ac:06:d7:6b:f8:7b:b6:88:2f:6f:
ea:4f:a0:86:2a:61:25:55:0d:6a:31:13:09:61:c0:
c7:2e:f0:6b:42:9c:8c:7e:59:51:a7:93:31:af:06:
87:0e:ae:f2:16:e6:c5:ff:b0:fd:00:d7:12:78:2b:
d6:9e:71:a4:9e:f0:f5:51:94:db:6a:c9:de:97:6d:
01:50:f1:50:86:5f:be:bf:b7:46:e9:c9:41:c2:11:
9e:f2:b4:0d:ad:80:0b:1e:a6:0c:15:cd:4c:9b:59:
a8:84:3b:5b:80:7a:9a:2f:0d:83:6a:72:99:6a:31:
9a:97:6e:7b:a9:39:0d:af:13:7c:89:94:03:a0:c1:
70:02:cd:c5:11:bd:54:9a:e7:b0:e3:f1:6c:7a:c9:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:C3:24:EC:08:B1:3D:0D:2B:D1:76:4B:F5:0C:D3:95:4D:8D:EC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1FXDJOwIsT0NK9F2S_UM05VNjew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/44
2a06:de01:d0::/45
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
93:97:6e:59:fa:79:b0:81:04:26:fa:5d:7f:74:dd:9e:f9:42:
7e:e6:54:bd:c3:84:87:09:d7:49:ce:e8:a5:8a:33:d2:c6:87:
8f:94:bb:96:bb:7a:e0:83:9a:d5:d0:84:e4:de:f8:71:89:29:
36:d8:7c:fd:98:ee:60:c6:72:91:bb:fc:d3:29:8a:c0:60:9f:
8a:65:ef:f4:9c:52:f4:f1:33:ad:f8:2e:d5:5e:22:4e:5e:ec:
89:cf:79:f4:e6:25:38:6f:c3:fe:24:54:ed:c3:c6:80:6a:3a:
bd:38:bb:e9:d9:ca:8d:db:14:aa:ed:70:18:70:ee:fd:b3:1b:
42:27:54:96:51:c3:10:d0:46:3b:c6:aa:ed:c2:61:5f:a3:9e:
bf:1c:e4:1a:37:79:99:cd:e0:22:1c:12:0d:60:76:cb:ef:62:
c6:09:a6:34:8f:66:12:15:7f:f9:fb:22:6b:76:5d:6d:17:67:
b1:57:79:4a:1a:24:38:00:d5:26:6b:4a:35:4c:7c:0f:08:85:
97:4a:e4:af:a8:49:91:eb:46:76:12:81:ce:6b:02:14:53:4f:
34:59:57:67:79:e2:68:90:ec:4a:2b:8e:60:08:7b:84:e9:1b:
7e:01:96:69:51:23:cb:21:47:ff:66:e4:97:e3:65:8c:66:83:
8c:30:e1:92
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY/JwITwROiTN5Paren8Emd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNTMwMTM0NjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDU1YzMyNGVjMDhiMTNkMGQyYmQxNzY0YmY1MGNkMzk1NGQ4ZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnmlELjJctJblELPcV4Ck4WaIO8V
TBsYCaBuw8Zc9YoL5+xxEuB/Xl6Jmd2/Rf1My7uQmMrUq83K4KCX4DFYnCbNFsBL
YyCYYuqDaTTNWKes9cXDifFS9zQ/KYDQXuQGHFkQXIP/rYwwz9lumawG12v4e7aI
L2/qT6CGKmElVQ1qMRMJYcDHLvBrQpyMfllRp5MxrwaHDq7yFubF/7D9ANcSeCvW
nnGknvD1UZTbasnel20BUPFQhl++v7dG6clBwhGe8rQNrYALHqYMFc1Mm1mohDtb
gHqaLw2DanKZajGal257qTkNrxN8iZQDoMFwAs3FEb1Umuew4/FsesnEmwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNRVwyTsCLE9DSvRdkv1DNOVTY3sMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMUZYREpPd0lzVDBOSzlGMlNfVU0wNVZOamV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKgbeAABQ
AwcDKgbeAQDQAwcEKg6XwAigMA0GCSqGSIb3DQEBCwUAA4IBAQCTl25Z+nmwgQQm
+l1/dN2e+UJ+5lS9w4SHCddJzuilijPSxoePlLuWu3rgg5rV0ITk3vhxiSk22Hz9
mO5gxnKRu/zTKYrAYJ+KZe/0nFL08TOt+C7VXiJOXuyJz3n05iU4b8P+JFTtw8aA
ajq9OLvp2cqN2xSq7XAYcO79sxtCJ1SWUcMQ0EY7xqrtwmFfo56/HOQaN3mZzeAi
HBINYHbL72LGCaY0j2YSFX/5+yJrdl1tF2exV3lKGiQ4ANUma0o1THwPCIWXSuSv
qEmR60Z2EoHOawIUU080WVdneeJokOxKK45gCHuE6Rt+AZZpUSPLIUf/ZuSX42WM
ZoOMMOGS
-----END CERTIFICATE-----
Generated at Thu Oct 17 16:48:32 2024 by rpki-client on console-ams.rpki-client.org