Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wbX5r7OSYC1wHRiikrY4VRcb30.roa
File: 4wbX5r7OSYC1wHRiikrY4VRcb30.roa (raw, json)
Hash identifier: 7qJGOUoPdSexx3sElFXui26N+vs3I0G8YysqX6Q+xKY=
Subject key identifier: E3:06:D7:E6:BE:CE:49:80:B5:C0:74:62:8A:4A:D8:E1:54:5C:6F:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E81A6FBC42749A15665093CED11656
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wbX5r7OSYC1wHRiikrY4VRcb30.roa
Signing time: Mon 02 Jan 2023 05:15:37 +0000
ROA not before: Mon 02 Jan 2023 05:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212539
IP address blocks: 2a0e:97c0:3f5::/48 maxlen: 48
2a0e:97c0:3f8::/48 maxlen: 48
2a0e:97c0:3f0::/48 maxlen: 48
2a0e:97c0:3f3::/48 maxlen: 48
2a0e:97c0:3f6::/48 maxlen: 48
2a0e:97c0:3f1::/48 maxlen: 48
2a0e:97c0:3f4::/48 maxlen: 48
2a0e:97c0:3f7::/48 maxlen: 48
2a0e:97c0:3f2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:1a:6f:bc:42:74:9a:15:66:50:93:ce:d1:16:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e306d7e6bece4980b5c074628a4ad8e1545c6f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:a9:2f:2f:c7:29:11:e3:c7:05:4c:b0:8f:
1f:ce:93:72:12:ba:91:21:ee:d3:a7:c3:20:35:78:
86:fc:e0:b1:9f:b9:0d:6a:02:13:a5:d3:b3:db:c6:
4c:06:6a:16:9e:3f:a3:22:24:ec:bd:10:a9:6c:04:
ce:78:f4:4c:0f:04:e1:92:63:4e:bc:0c:31:6e:9a:
e5:be:c4:ee:ab:d8:d3:05:98:d8:d6:85:13:fe:47:
eb:ba:a1:23:24:04:04:83:d0:b4:89:59:59:8e:90:
71:e2:f8:74:bf:8f:9b:b5:bc:4b:55:0f:c7:7a:7a:
05:49:b6:12:91:d8:76:55:0c:19:e0:0c:55:7b:13:
45:01:19:f4:c2:d3:cc:b6:0a:69:1f:80:bb:c7:df:
59:04:ca:3b:b7:fb:f4:55:ee:68:cb:42:df:cf:a6:
d8:d6:ea:3e:81:af:98:38:7e:96:e5:fc:24:e3:50:
47:8b:e0:f7:09:80:30:fc:62:b8:c3:cb:56:96:83:
c8:63:f4:28:a1:a6:49:d2:88:47:3f:1a:04:f0:e5:
f8:c0:c7:a6:ec:70:7a:69:9c:6d:f8:20:36:2d:71:
ac:b7:ca:03:e1:2d:0e:b1:14:81:31:dc:8c:1d:cd:
0d:f9:c6:a1:42:9e:ef:53:fd:e2:38:b4:02:dd:c2:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:D7:E6:BE:CE:49:80:B5:C0:74:62:8A:4A:D8:E1:54:5C:6F:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wbX5r7OSYC1wHRiikrY4VRcb30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3f0::-2a0e:97c0:3f8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:97:72:c8:07:b7:68:31:9e:00:a2:35:cb:d3:56:55:f8:f4:
cc:07:ee:54:6d:7c:5d:10:ba:9b:66:2a:ad:9f:45:35:d9:6c:
76:9d:fe:a0:d6:2a:22:39:39:a7:a2:e2:f3:5d:f1:20:4b:9a:
fd:c3:a9:5d:59:81:1e:5b:b5:4a:94:b6:cc:a8:b0:06:15:1f:
23:90:c1:59:fe:91:89:08:f9:dc:2e:ef:f5:19:09:91:ca:f5:
a9:5a:e7:fe:68:f3:80:9b:e2:5c:31:61:81:ea:d9:89:67:a6:
3f:4d:8b:df:c7:18:1b:2e:fd:11:fa:99:93:de:34:82:62:2f:
1b:ff:83:19:77:2c:ad:8d:3f:26:79:1b:da:03:43:76:49:13:
e8:6e:ef:7d:fb:cb:17:3d:dc:c0:0e:d3:b6:26:f3:8d:55:5e:
31:66:e9:61:1f:d1:3e:68:a6:ae:5d:43:45:1d:5f:17:6f:62:
34:fe:3a:68:a9:ae:be:27:11:7b:09:68:e8:83:ac:9f:71:25:
5e:d0:0c:19:a2:1c:71:6f:26:09:c9:bf:ae:61:e7:ec:61:26:
c8:f6:b2:ff:3b:f7:1d:45:7a:66:ee:70:de:ef:a8:91:a6:6c:
ad:76:df:62:d7:dc:33:97:1d:97:f6:e0:28:26:19:1b:bd:e4:
1f:00:29:05
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw6BpvvEJ0mhVmUJPO0RZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzA2ZDdlNmJlY2U0OTgwYjVjMDc0NjI4YTRhZDhlMTU0NWM2ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNSpLy/HKRHjxwVMsI8fzpNyErqR
Ie7Tp8MgNXiG/OCxn7kNagITpdOz28ZMBmoWnj+jIiTsvRCpbATOePRMDwThkmNO
vAwxbprlvsTuq9jTBZjY1oUT/kfruqEjJAQEg9C0iVlZjpBx4vh0v4+btbxLVQ/H
enoFSbYSkdh2VQwZ4AxVexNFARn0wtPMtgppH4C7x99ZBMo7t/v0Ve5oy0Lfz6bY
1uo+ga+YOH6W5fwk41BHi+D3CYAw/GK4w8tWloPIY/QooaZJ0ohHPxoE8OX4wMem
7HB6aZxt+CA2LXGst8oD4S0OsRSBMdyMHc0N+cahQp7vU/3iOLQC3cLc7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOMG1+a+zkmAtcB0YopK2OFUXG99MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNHdiWDVyN09TWUMxd0hSaWlrclk0VlJjYjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDpfA
A/ADBwAqDpfAA/gwDQYJKoZIhvcNAQELBQADggEBAFCXcsgHt2gxngCiNcvTVlX4
9MwH7lRtfF0QuptmKq2fRTXZbHad/qDWKiI5Oaei4vNd8SBLmv3DqV1ZgR5btUqU
tsyosAYVHyOQwVn+kYkI+dwu7/UZCZHK9ala5/5o84Cb4lwxYYHq2Ylnpj9Ni9/H
GBsu/RH6mZPeNIJiLxv/gxl3LK2NPyZ5G9oDQ3ZJE+hu7337yxc93MAO07Ym841V
XjFm6WEf0T5opq5dQ0UdXxdvYjT+Omiprr4nEXsJaOiDrJ9xJV7QDBmiHHFvJgnJ
v65h5+xhJsj2sv879x1FembucN7vqJGmbK1232LX3DOXHZf24CgmGRu95B8AKQU=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:29 2024 by rpki-client on console-fra.rpki-client.org