Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4GwhPTiuQ85t8MufP3fs5IsaEP4.roa
File: 4GwhPTiuQ85t8MufP3fs5IsaEP4.roa (raw, json)
Hash identifier: eYWQjPkXQYeEILmXXX8+vHX5BtjzwOYiF9bU45YBt+M=
Subject key identifier: E0:6C:21:3D:38:AE:43:CE:6D:F0:CB:9F:3F:77:EC:E4:8B:1A:10:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ACA8E0AF17496AB77DF475F4D856C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4GwhPTiuQ85t8MufP3fs5IsaEP4.roa
Signing time: Tue 24 Jan 2023 16:09:39 +0000
ROA not before: Tue 24 Jan 2023 16:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142438
IP address blocks: 2a0e:b107:da0::/44 maxlen: 48
2a0e:b107:14a0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:ca:8e:0a:f1:74:96:ab:77:df:47:5f:4d:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e06c213d38ae43ce6df0cb9f3f77ece48b1a10fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:c7:4e:84:b1:04:db:a9:33:4b:1b:6a:02:
b8:26:ad:8b:60:24:66:7f:f7:f7:1a:9f:49:a4:3e:
3c:d6:e9:94:48:11:2c:9c:78:c0:d5:c5:55:56:df:
8d:bd:f8:a4:ee:1e:6a:a5:6e:e9:1a:20:ca:3e:5e:
17:02:fa:25:bc:9a:5b:40:07:9a:62:d2:d5:c3:7f:
26:d5:53:e3:0e:78:79:4d:c7:5b:22:df:68:3b:38:
c4:df:1d:e4:0e:2e:0d:ac:e5:a9:f5:ec:9c:a4:a7:
c7:e3:87:34:52:77:88:89:7e:ae:36:9e:d0:d2:f5:
27:77:d2:70:b6:5a:a8:44:c7:c3:b8:c4:e2:b6:89:
d0:33:19:31:43:0f:c4:85:19:90:ca:79:e7:7f:40:
82:73:f1:3a:6a:53:49:25:e1:a2:70:76:cd:44:d1:
5d:73:88:93:86:ab:2a:d4:e7:3a:20:58:23:bd:77:
81:75:ea:53:90:23:60:ef:7c:80:47:5c:8e:25:07:
f1:20:c2:96:0d:9a:c3:19:4b:33:98:72:f1:8e:f0:
b3:04:15:9c:38:98:3f:6d:2e:cb:49:80:d8:03:b8:
2c:5a:d9:51:44:f9:8e:99:d2:eb:ab:4e:d8:72:1a:
67:f4:7f:62:26:44:3e:32:f4:73:7b:b0:eb:65:06:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:21:3D:38:AE:43:CE:6D:F0:CB:9F:3F:77:EC:E4:8B:1A:10:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4GwhPTiuQ85t8MufP3fs5IsaEP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:da0::/44
2a0e:b107:14a0::/44
Signature Algorithm: sha256WithRSAEncryption
1f:75:ef:2e:5f:a6:a9:7f:fd:79:68:65:22:c7:ff:fe:d2:2e:
b0:36:13:e9:2a:a6:13:07:4e:6d:d2:48:55:c1:38:cf:b1:d0:
30:6c:0c:51:9b:d5:93:3c:6f:97:df:87:c7:28:b9:22:1a:71:
cd:7c:22:c7:91:7b:ef:58:b4:86:de:5e:48:d9:6a:5e:b3:88:
c5:d2:63:f6:d0:30:8a:76:15:be:cf:c2:01:23:42:ba:19:7d:
80:85:a9:3e:3d:44:b4:46:f3:70:6d:91:66:91:07:fc:a7:cd:
0d:3f:ee:a2:b8:97:e7:d2:ca:ef:4a:31:f0:2a:50:ab:eb:2a:
2a:e4:7d:25:36:9c:6c:e7:3c:74:51:cb:07:7d:6e:03:41:52:
72:3f:b0:58:36:51:eb:85:d9:91:08:f6:56:83:99:94:da:1c:
26:6f:7f:8f:b1:3a:83:52:8b:9c:a7:22:f3:88:58:75:99:71:
17:b5:6e:e8:cc:18:a4:eb:c1:3a:be:f2:0d:f5:b5:df:b4:7a:
20:5b:5e:01:8b:64:d7:1b:db:74:c6:f7:fc:88:5a:4e:97:f4:
92:44:6a:7c:3c:7a:19:8c:94:a7:f5:78:02:1a:0f:59:03:72:
41:4f:f8:d8:33:44:4b:94:b4:b5:5e:e0:a6:11:e5:87:6c:9d:
9c:45:ef:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXkisqOCvF0lqt330dfTYVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDZjMjEzZDM4YWU0M2NlNmRmMGNiOWYzZjc3ZWNlNDhiMWExMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g7HToSxBNupM0sbagK4Jq2LYCRm
f/f3Gp9JpD481umUSBEsnHjA1cVVVt+Nvfik7h5qpW7pGiDKPl4XAvolvJpbQAea
YtLVw38m1VPjDnh5TcdbIt9oOzjE3x3kDi4NrOWp9eycpKfH44c0UneIiX6uNp7Q
0vUnd9JwtlqoRMfDuMTitonQMxkxQw/EhRmQynnnf0CCc/E6alNJJeGicHbNRNFd
c4iThqsq1Oc6IFgjvXeBdepTkCNg73yAR1yOJQfxIMKWDZrDGUszmHLxjvCzBBWc
OJg/bS7LSYDYA7gsWtlRRPmOmdLrq07Ychpn9H9iJkQ+MvRze7DrZQYiNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOBsIT04rkPObfDLnz937OSLGhD+MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNEd3aFBUaXVRODV0OE11ZlAzZnM1SXNhRVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBw2g
AwcEKg6xBxSgMA0GCSqGSIb3DQEBCwUAA4IBAQAfde8uX6apf/15aGUix//+0i6w
NhPpKqYTB05t0khVwTjPsdAwbAxRm9WTPG+X34fHKLkiGnHNfCLHkXvvWLSG3l5I
2Wpes4jF0mP20DCKdhW+z8IBI0K6GX2Ahak+PUS0RvNwbZFmkQf8p80NP+6iuJfn
0srvSjHwKlCr6yoq5H0lNpxs5zx0UcsHfW4DQVJyP7BYNlHrhdmRCPZWg5mU2hwm
b3+PsTqDUoucpyLziFh1mXEXtW7ozBik68E6vvIN9bXftHogW14Bi2TXG9t0xvf8
iFpOl/SSRGp8PHoZjJSn9XgCGg9ZA3JBT/jYM0RLlLS1XuCmEeWHbJ2cRe8z
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org