Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1JEnGbez10a3klQVydwpCuc4lls.roa
File: 1JEnGbez10a3klQVydwpCuc4lls.roa (raw, json)
Hash identifier: UQVz04Kw6z6NjB4ozmN3jQGRdMhu5MBb3MYeh8RDB7g=
Subject key identifier: D4:91:27:19:B7:B3:D7:46:B7:92:54:15:C9:DC:29:0A:E7:38:96:5B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7FB9BC565C677169E2542C8811686
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1JEnGbez10a3klQVydwpCuc4lls.roa
Signing time: Mon 02 Jan 2023 05:15:29 +0000
ROA not before: Mon 02 Jan 2023 05:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211139
IP address blocks: 2a0e:b107:1910::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:fb:9b:c5:65:c6:77:16:9e:25:42:c8:81:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4912719b7b3d746b7925415c9dc290ae738965b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:01:34:f8:99:6a:82:30:b4:15:f2:2e:67:
15:59:d7:6e:1e:0d:ba:d7:c8:d6:93:1d:a5:55:b7:
2a:b6:7b:40:60:51:eb:b7:18:a7:ff:00:cf:44:4c:
2a:b4:43:60:b9:b1:97:d4:f0:fc:78:aa:d6:e5:82:
45:5f:eb:30:43:bf:70:2c:69:a3:14:63:e0:a8:32:
c5:c0:77:4c:fb:73:39:23:97:09:62:cf:3b:62:ad:
65:3f:71:f1:89:00:0f:36:b9:f3:02:3e:e4:8f:8c:
72:37:19:2b:6e:be:d7:fa:b0:ae:b6:79:02:3f:5f:
7a:f4:29:ce:d0:dc:2d:73:c1:05:62:5c:ba:c8:68:
d1:2f:4d:1d:2f:8c:ab:df:a1:4d:06:38:20:f7:76:
c7:10:8e:34:97:6d:ee:71:35:6c:c8:7c:12:c8:63:
1a:c1:35:cf:41:d7:5e:26:18:2e:0c:30:20:e9:7d:
bb:3c:6b:f6:01:cd:84:db:be:90:a7:0f:47:cf:4e:
34:c9:16:ff:58:da:ea:21:c1:1d:a3:68:b1:f9:a8:
1c:57:cb:bc:cf:f4:1b:72:78:4a:21:d1:91:44:7c:
e5:f6:75:5b:53:f6:0a:53:fa:52:83:00:6d:5d:55:
78:3c:d3:99:0b:cf:ae:75:85:58:4c:fb:5c:45:1f:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:91:27:19:B7:B3:D7:46:B7:92:54:15:C9:DC:29:0A:E7:38:96:5B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1JEnGbez10a3klQVydwpCuc4lls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1910::/44
Signature Algorithm: sha256WithRSAEncryption
ab:43:f4:05:58:10:62:e3:45:0e:35:39:c9:85:99:b6:2f:9b:
c3:db:d9:e5:1f:c2:d8:3a:7e:4c:2b:83:6f:e9:47:39:d6:86:
d2:28:02:2b:7d:43:6f:91:52:8d:e6:24:ac:95:ae:75:21:80:
c3:2a:ee:bd:9a:2b:e9:a7:4f:bb:6f:f7:18:9a:88:8f:6f:f0:
47:0d:51:d4:c3:d1:e3:2b:45:18:18:3a:37:9c:dc:43:0a:19:
56:7d:51:65:8e:de:f4:b1:3c:12:75:1a:02:17:79:2d:ec:87:
40:73:3f:f6:f5:7e:91:bc:36:c0:da:a4:20:af:33:12:bc:46:
77:d9:80:49:bf:15:05:17:b4:18:ca:4b:c3:51:14:49:f2:78:
9f:18:4f:06:14:98:6c:87:1c:69:9e:d2:9c:b8:54:c1:b6:95:
ab:b1:e1:6c:3d:1e:7a:82:53:52:dd:ae:8c:54:34:9d:9f:9c:
51:92:fd:6a:be:37:44:32:47:6f:9b:e2:8e:d4:01:47:65:77:
06:2a:e8:f1:69:4d:dd:e3:ca:fc:f3:79:c5:bb:2c:f2:65:8f:
51:05:56:6c:c8:1d:03:38:cf:16:71:34:f0:21:be:f1:18:d7:
9c:1c:65:6d:66:3b:45:f6:d5:31:56:94:2b:f9:c1:16:cc:6f:
48:50:ab:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5/ubxWXGdxaeJULIgRaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDkxMjcxOWI3YjNkNzQ2Yjc5MjU0MTVjOWRjMjkwYWU3Mzg5NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYYBNPiZaoIwtBXyLmcVWdduHg26
18jWkx2lVbcqtntAYFHrtxin/wDPREwqtENgubGX1PD8eKrW5YJFX+swQ79wLGmj
FGPgqDLFwHdM+3M5I5cJYs87Yq1lP3HxiQAPNrnzAj7kj4xyNxkrbr7X+rCutnkC
P1969CnO0Nwtc8EFYly6yGjRL00dL4yr36FNBjgg93bHEI40l23ucTVsyHwSyGMa
wTXPQddeJhguDDAg6X27PGv2Ac2E276Qpw9Hz040yRb/WNrqIcEdo2ix+agcV8u8
z/QbcnhKIdGRRHzl9nVbU/YKU/pSgwBtXVV4PNOZC8+udYVYTPtcRR9gMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNSRJxm3s9dGt5JUFcncKQrnOJZbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMUpFbkdiZXoxMGEza2xRVnlkd3BDdWM0bGxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxkQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCrQ/QFWBBi40UONTnJhZm2L5vD29nlH8LYOn5M
K4Nv6Uc51obSKAIrfUNvkVKN5iSsla51IYDDKu69mivpp0+7b/cYmoiPb/BHDVHU
w9HjK0UYGDo3nNxDChlWfVFljt70sTwSdRoCF3kt7IdAcz/29X6RvDbA2qQgrzMS
vEZ32YBJvxUFF7QYykvDURRJ8nifGE8GFJhshxxpntKcuFTBtpWrseFsPR56glNS
3a6MVDSdn5xRkv1qvjdEMkdvm+KO1AFHZXcGKujxaU3d48r883nFuyzyZY9RBVZs
yB0DOM8WcTTwIb7xGNecHGVtZjtF9tUxVpQr+cEWzG9IUKse
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org