Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa
File: 3CMkMrjssQpNRNogsQt2X0pEGUw.roa (raw, json)
Hash identifier: 9fWq88da93QzzxTt8RFov29jXXoybhhhJSZGb8a/XLA=
Subject key identifier: DC:23:24:32:B8:EC:B1:0A:4D:44:DA:20:B1:0B:76:5F:4A:44:19:4C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48B0E3BA4F40F69F9BC48BFC892F642
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa
Signing time: Tue 24 Jan 2023 16:09:56 +0000
ROA not before: Tue 24 Jan 2023 16:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213105
IP address blocks: 2a0e:b107:775::/48 maxlen: 48
2a0e:b107:77a::/48 maxlen: 48
2a0e:b107:774::/48 maxlen: 48
2a0e:b107:779::/48 maxlen: 48
2a0e:b107:77e::/48 maxlen: 48
2a0e:b107:773::/48 maxlen: 48
2a0e:b107:778::/48 maxlen: 48
2a0e:b107:77d::/48 maxlen: 48
2a0e:b107:a60::/44 maxlen: 48
2a0e:b107:10f0::/44 maxlen: 48
2a0e:b107:772::/48 maxlen: 48
2a0e:b107:777::/48 maxlen: 48
2a0e:b107:77c::/48 maxlen: 48
2a10:2f00:138::/48 maxlen: 48
2a0e:b107:771::/48 maxlen: 48
2a0e:b107:776::/48 maxlen: 48
2a0e:b107:77b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 May 2023 18:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8b:0e:3b:a4:f4:0f:69:f9:bc:48:bf:c8:92:f6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc232432b8ecb10a4d44da20b10b765f4a44194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:67:78:65:98:f0:68:72:d1:d2:ce:97:27:
b6:db:2d:55:ba:27:c2:88:a7:05:cc:68:eb:3d:bc:
cd:4b:eb:e5:f6:5c:c8:f0:d9:23:41:ff:4f:68:58:
79:54:4d:0e:f2:fb:a2:4f:97:ad:46:87:d1:9c:83:
79:b0:6f:7b:ae:9b:18:d6:b3:ea:fb:cd:32:6a:c9:
3c:c1:40:e8:bf:be:de:c6:81:5d:70:2b:18:7e:11:
f6:3b:c5:39:42:2e:a5:cf:b0:8b:91:be:a5:e2:b8:
96:c1:02:c7:41:3a:36:d9:45:16:3a:c8:46:37:e4:
6e:a1:3e:cd:91:11:27:41:38:02:69:33:bf:23:48:
14:0e:be:2e:42:3c:1b:e6:ab:59:cd:63:8a:5f:51:
40:5d:e4:ee:d4:a8:2d:9a:58:0a:64:ee:8a:ad:3b:
8b:1c:4d:a6:06:bc:a5:00:de:eb:f7:f5:d1:b5:f9:
17:7d:72:3a:ff:5c:fe:65:e5:0a:5b:09:a5:0c:92:
7d:74:78:29:04:ff:0f:5f:c5:7c:9b:20:d9:71:f7:
83:0e:6c:7b:80:5a:8c:71:fe:7c:b1:d0:02:eb:9e:
c0:50:f1:43:f0:59:38:3c:6b:25:7d:1f:b6:8c:8b:
8b:6f:a8:9b:d2:2b:e0:c9:f7:f6:4f:6b:d4:06:bb:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:24:32:B8:EC:B1:0A:4D:44:DA:20:B1:0B:76:5F:4A:44:19:4C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3CMkMrjssQpNRNogsQt2X0pEGUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:771::-2a0e:b107:77e:ffff:ffff:ffff:ffff:ffff
2a0e:b107:a60::/44
2a0e:b107:10f0::/44
2a10:2f00:138::/48
Signature Algorithm: sha256WithRSAEncryption
73:74:d8:ba:99:ba:74:ee:4d:de:f1:86:0c:86:a0:93:41:01:
6a:62:27:85:3f:8d:08:86:35:3d:a8:22:48:d6:e4:81:db:b2:
75:6c:db:59:9c:bb:87:16:05:d4:5e:25:78:9d:1d:29:95:e9:
21:c4:86:e9:ba:d1:f0:13:03:92:6d:2d:c3:1a:7c:4d:54:7b:
c7:98:03:69:ac:ee:d3:71:44:6b:ac:ad:ae:62:d3:a9:ca:de:
84:47:f0:43:f8:6f:dc:fa:86:58:dd:04:ef:e8:ee:bb:4c:f1:
9f:96:07:49:f1:9e:3a:12:9d:e5:4c:50:db:43:af:bb:ee:12:
86:bf:99:41:f5:8f:90:3f:2b:a9:a7:50:ab:8b:7a:14:88:17:
c3:d0:bd:dd:6d:8b:8f:6d:ab:b4:c9:dc:5b:13:e7:98:ed:9e:
36:0e:9d:ea:fe:ba:d7:19:8a:50:0c:6b:79:a4:9e:52:b7:54:
0c:34:41:d1:a1:b9:34:d2:8d:c8:f6:38:e5:ae:55:b3:57:db:
22:e4:f6:de:ee:da:bd:b2:27:b6:63:47:38:d1:9d:f7:ac:fe:
03:b2:48:d9:87:e0:ae:89:b9:e3:57:f1:92:81:7d:08:13:4e:
22:21:51:39:5a:85:e7:cd:6d:33:a4:c8:aa:b4:cb:c0:e2:5a:
3f:14:24:34
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYXkiw47pPQPafm8SL/IkvZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzIzMjQzMmI4ZWNiMTBhNGQ0NGRhMjBiMTBiNzY1ZjRhNDQxOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8dneGWY8Ghy0dLOlye22y1VuifC
iKcFzGjrPbzNS+vl9lzI8NkjQf9PaFh5VE0O8vuiT5etRofRnIN5sG97rpsY1rPq
+80yask8wUDov77exoFdcCsYfhH2O8U5Qi6lz7CLkb6l4riWwQLHQTo22UUWOshG
N+RuoT7NkREnQTgCaTO/I0gUDr4uQjwb5qtZzWOKX1FAXeTu1KgtmlgKZO6KrTuL
HE2mBrylAN7r9/XRtfkXfXI6/1z+ZeUKWwmlDJJ9dHgpBP8PX8V8myDZcfeDDmx7
gFqMcf58sdAC657AUPFD8Fk4PGslfR+2jIuLb6ib0ivgyff2T2vUBrts+wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFNwjJDK47LEKTUTaILELdl9KRBlMMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvM0NNa01yanNzUXBOUk5vZ3NRdDJYMHBFR1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvMBIDBwAqDrEH
B3EDBwAqDrEHB34DBwQqDrEHCmADBwQqDrEHEPADBwAqEC8AATgwDQYJKoZIhvcN
AQELBQADggEBAHN02LqZunTuTd7xhgyGoJNBAWpiJ4U/jQiGNT2oIkjW5IHbsnVs
21mcu4cWBdReJXidHSmV6SHEhum60fATA5JtLcMafE1Ue8eYA2ms7tNxRGusra5i
06nK3oRH8EP4b9z6hljdBO/o7rtM8Z+WB0nxnjoSneVMUNtDr7vuEoa/mUH1j5A/
K6mnUKuLehSIF8PQvd1ti49tq7TJ3FsT55jtnjYOner+utcZilAMa3mknlK3VAw0
QdGhuTTSjcj2OOWuVbNX2yLk9t7u2r2yJ7ZjRzjRnfes/gOySNmH4K6JueNX8ZKB
fQgTTiIhUTlahefNbTOkyKq0y8DiWj8UJDQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org