Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/43e1ssEsnxPnUzirOhp6D6_XZAQ.roa
File: 43e1ssEsnxPnUzirOhp6D6_XZAQ.roa (raw, json)
Hash identifier: /xN1cUdUdFS1MSfMTgyUuKpHs2IGgXuT3F1b7qKY0HQ=
Subject key identifier: E3:77:B5:B2:C1:2C:9F:13:E7:53:38:AB:3A:1A:7A:0F:AF:D7:64:04
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FCCF4D430AC04C75240019EB032E56A0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/43e1ssEsnxPnUzirOhp6D6_XZAQ.roa
Signing time: Fri 31 May 2024 04:42:28 +0000
ROA not before: Fri 31 May 2024 04:42:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214001
IP address blocks: 2a0e:b107:1e1f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 31 May 2024 06:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cc:f4:d4:30:ac:04:c7:52:40:01:9e:b0:32:e5:6a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 31 04:42:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e377b5b2c12c9f13e75338ab3a1a7a0fafd76404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:19:22:0d:ef:27:c2:6c:8d:39:00:5f:80:
84:7d:d7:17:e1:22:47:05:07:a5:5b:5e:a8:0b:71:
63:2f:7f:4b:4d:1a:e3:c5:03:a6:dc:54:19:f2:b4:
4a:a3:54:05:e3:e2:b6:7c:d9:45:ba:9f:f0:37:81:
a2:69:c6:e5:fc:67:ad:75:0d:d4:7b:9e:c3:29:bf:
07:07:d3:12:c8:7a:2c:fb:13:b6:eb:b5:0a:8c:a8:
5d:f6:f3:ba:b1:74:39:86:c4:c7:18:ba:2d:38:f6:
fb:51:0e:61:b6:b3:fd:d3:af:dd:e8:d3:71:68:45:
3d:be:75:3d:96:fe:b5:48:51:f4:fb:8e:c7:b9:64:
dd:02:f3:cb:a6:d4:69:bb:00:6e:52:ea:74:3c:5b:
95:75:db:c4:32:e7:9e:0b:ac:c4:73:fd:cf:73:60:
ca:0a:0b:d8:1c:ed:78:50:43:8e:71:60:d6:7f:dc:
d1:fa:f0:fe:b1:02:3b:f9:ee:fa:30:6c:ec:37:09:
1e:d3:c4:f2:da:67:84:1d:1c:a5:45:b9:96:be:4c:
8b:f7:02:04:2f:e1:ac:ab:f7:6c:4a:4b:da:6c:80:
1e:d4:7f:24:86:8f:f0:00:29:05:63:fa:29:ca:63:
ef:81:f5:ba:3a:64:ad:92:19:60:e7:12:10:ea:7a:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:77:B5:B2:C1:2C:9F:13:E7:53:38:AB:3A:1A:7A:0F:AF:D7:64:04
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/43e1ssEsnxPnUzirOhp6D6_XZAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e1f::/48
Signature Algorithm: sha256WithRSAEncryption
1a:95:03:5c:82:83:0b:eb:15:ab:7c:92:c0:b0:9e:fe:5e:2f:
c2:f7:e4:f4:14:85:de:c6:f7:54:e8:21:d7:b1:47:63:60:08:
26:dd:6c:bb:e8:c4:7c:89:a6:14:cf:a6:a7:9b:09:14:76:75:
d3:8b:9f:b7:4f:fb:64:e0:9c:6d:7d:18:09:b4:d1:e9:97:be:
35:41:17:06:c0:d1:d6:65:13:2f:6f:5f:89:cc:a9:90:37:40:
52:e9:2e:ac:2d:f9:09:4d:83:69:e0:52:68:5c:6d:8f:7e:c1:
ea:2b:cb:ad:69:2d:d1:61:b5:7d:ba:06:3b:94:b2:71:2e:ec:
b3:a8:ac:d1:c0:08:ce:3d:0f:d7:10:de:ac:9c:1f:7e:f8:95:
df:82:0f:50:01:63:6b:cf:a4:a3:49:5f:08:d3:d5:3b:f3:5f:
f5:a3:b4:de:40:11:e6:9b:8a:64:be:ee:fc:9c:da:84:9d:cc:
63:7f:e2:9e:5d:91:80:d8:7a:9d:35:79:e8:e6:82:76:b6:50:
21:32:70:93:9f:e1:c0:b4:51:c0:cf:36:5a:8a:a2:08:33:8a:
32:26:d2:e2:d2:bc:95:bc:d3:1f:66:0f:f3:bc:7d:4b:48:ca:
74:98:bf:a3:8e:c6:d2:ee:e0:b7:70:dd:9c:0b:ad:d9:78:cb:
6d:9e:6d:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY/M9NQwrATHUkABnrAy5WoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNTMxMDQ0MjI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzc3YjViMmMxMmM5ZjEzZTc1MzM4YWIzYTFhN2EwZmFmZDc2NDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UEZIg3vJ8JsjTkAX4CEfdcX4SJH
BQelW16oC3FjL39LTRrjxQOm3FQZ8rRKo1QF4+K2fNlFup/wN4Giacbl/GetdQ3U
e57DKb8HB9MSyHos+xO267UKjKhd9vO6sXQ5hsTHGLotOPb7UQ5htrP906/d6NNx
aEU9vnU9lv61SFH0+47HuWTdAvPLptRpuwBuUup0PFuVddvEMueeC6zEc/3Pc2DK
CgvYHO14UEOOcWDWf9zR+vD+sQI7+e76MGzsNwke08Ty2meEHRylRbmWvkyL9wIE
L+Gsq/dsSkvabIAe1H8kho/wACkFY/opymPvgfW6OmStkhlg5xIQ6nqiPwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFON3tbLBLJ8T51M4qzoaeg+v12QEMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNDNlMXNzRXNueFBuVXppck9ocDZENl9YWkFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBx4f
MA0GCSqGSIb3DQEBCwUAA4IBAQAalQNcgoML6xWrfJLAsJ7+Xi/C9+T0FIXexvdU
6CHXsUdjYAgm3Wy76MR8iaYUz6anmwkUdnXTi5+3T/tk4JxtfRgJtNHpl741QRcG
wNHWZRMvb1+JzKmQN0BS6S6sLfkJTYNp4FJoXG2PfsHqK8utaS3RYbV9ugY7lLJx
LuyzqKzRwAjOPQ/XEN6snB9++JXfgg9QAWNrz6SjSV8I09U781/1o7TeQBHmm4pk
vu78nNqEncxjf+KeXZGA2HqdNXno5oJ2tlAhMnCTn+HAtFHAzzZaiqIIM4oyJtLi
0ryVvNMfZg/zvH1LSMp0mL+jjsbS7uC3cN2cC63ZeMttnm0U
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org