Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa
File: 5hg0EHsMyYPjEgjxxM5g52uP728.roa (raw, json)
Hash identifier: lZJ0iJ9VRK6h4JGH1sP5cWZDnnpUwoSvO0sMAnRY+bM=
Subject key identifier: E6:18:34:10:7B:0C:C9:83:E3:12:08:F1:C4:CE:60:E7:6B:8F:EF:6F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01868A27988E259B4290820661B98D56DE61
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa
Signing time: Sat 25 Feb 2023 19:58:16 +0000
ROA not before: Sat 25 Feb 2023 19:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199763
IP address blocks: 2a10:cc44:1c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 Feb 2023 03:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:27:98:8e:25:9b:42:90:82:06:61:b9:8d:56:de:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 25 19:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e61834107b0cc983e31208f1c4ce60e76b8fef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:27:36:ca:ef:89:2c:4f:00:55:09:10:a4:
a2:75:0f:67:41:d9:92:5f:55:39:06:e9:73:d8:aa:
0d:9e:50:46:b6:7e:dc:07:fc:56:04:41:43:99:8a:
d0:f1:b6:3c:69:ef:bb:12:38:5b:0a:41:9a:a2:f5:
dd:a0:8a:c6:ff:99:cf:a0:70:1c:28:a8:6b:6d:18:
57:a5:59:89:a8:25:0f:3e:4e:6b:e8:57:42:f4:3f:
ce:ea:a2:70:e1:c2:0d:a0:fd:2f:a1:93:22:78:c1:
e0:70:9a:c2:15:b4:92:3e:06:1e:e4:04:7f:f3:66:
bd:42:fb:6c:6c:79:27:eb:70:17:26:5c:38:9a:f7:
fc:0f:d5:18:a3:b0:d9:d8:8e:ca:1e:79:34:58:14:
b4:3c:b7:a5:11:ab:a8:14:a7:86:f6:7e:38:e3:5b:
c4:43:a4:20:65:1e:ee:83:19:c6:d7:c5:f3:98:06:
ae:f9:b6:fe:b8:16:bb:cc:b9:94:1f:32:8f:16:e8:
ce:8a:00:e0:ad:65:ad:d1:fd:d0:69:2a:93:25:78:
76:2b:1b:56:d5:a0:c8:90:b9:67:43:96:77:94:87:
bb:1e:d9:19:fb:af:4f:fd:74:c2:93:44:aa:7b:d1:
c6:f0:8c:8d:c6:58:c6:88:0e:2f:ef:f2:94:c3:f8:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:34:10:7B:0C:C9:83:E3:12:08:F1:C4:CE:60:E7:6B:8F:EF:6F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5hg0EHsMyYPjEgjxxM5g52uP728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:24:b9:8b:ec:51:7e:21:d5:a5:63:b2:70:1d:a0:34:f4:c7:
3d:1d:24:c1:e0:1b:66:7b:33:bb:f2:f2:0e:ae:e4:fa:50:a7:
b2:23:5b:8e:29:87:99:21:57:4a:2b:3f:d9:1a:a6:fb:51:e8:
fc:a6:ff:92:bb:ac:0a:72:f2:25:55:d9:d0:2e:6a:1e:32:60:
f5:55:d8:8d:fa:19:9b:35:77:7b:21:5c:fc:e2:7e:c4:90:9c:
75:b0:0b:ff:aa:c0:38:33:8e:4b:ff:ff:3d:8d:1c:ee:bd:00:
9e:5f:33:20:ca:9a:ff:82:fb:1e:9c:62:d3:6e:fc:03:f1:02:
76:1a:f7:fe:69:32:25:8b:4b:70:d7:a8:af:42:39:08:3b:e3:
93:e6:af:b6:a6:24:c7:48:59:ca:6e:39:25:fb:04:91:59:0d:
ca:54:ed:e6:04:ab:15:91:6e:78:0b:b6:6e:ac:5e:ee:91:bc:
2e:6c:59:47:5e:38:cb:a4:96:78:0e:de:8f:14:91:1f:0c:90:
b0:10:4c:90:82:08:9e:89:0c:84:d7:6d:e5:1c:e0:fb:64:d6:
93:f7:37:ae:4e:9f:40:29:36:a0:b8:bf:22:6f:b6:76:f1:42:
1f:f8:96:2d:93:c2:5a:96:ec:ba:ac:10:5d:a1:ed:16:0d:03:
d8:6f:5d:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYaKJ5iOJZtCkIIGYbmNVt5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjI1MTk1ODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjE4MzQxMDdiMGNjOTgzZTMxMjA4ZjFjNGNlNjBlNzZiOGZlZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwnNsrviSxPAFUJEKSidQ9nQdmS
X1U5Bulz2KoNnlBGtn7cB/xWBEFDmYrQ8bY8ae+7EjhbCkGaovXdoIrG/5nPoHAc
KKhrbRhXpVmJqCUPPk5r6FdC9D/O6qJw4cINoP0voZMieMHgcJrCFbSSPgYe5AR/
82a9QvtsbHkn63AXJlw4mvf8D9UYo7DZ2I7KHnk0WBS0PLelEauoFKeG9n4441vE
Q6QgZR7ugxnG18XzmAau+bb+uBa7zLmUHzKPFujOigDgrWWt0f3QaSqTJXh2KxtW
1aDIkLlnQ5Z3lIe7HtkZ+69P/XTCk0Sqe9HG8IyNxljGiA4v7/KUw/griwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOYYNBB7DMmD4xII8cTOYOdrj+9vMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNWhnMEVIc015WVBqRWdqeHhNNWc1MnVQNzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMRAHA
MA0GCSqGSIb3DQEBCwUAA4IBAQBNJLmL7FF+IdWlY7JwHaA09Mc9HSTB4BtmezO7
8vIOruT6UKeyI1uOKYeZIVdKKz/ZGqb7Uej8pv+Su6wKcvIlVdnQLmoeMmD1VdiN
+hmbNXd7IVz84n7EkJx1sAv/qsA4M45L//89jRzuvQCeXzMgypr/gvsenGLTbvwD
8QJ2Gvf+aTIli0tw16ivQjkIO+OT5q+2piTHSFnKbjkl+wSRWQ3KVO3mBKsVkW54
C7ZurF7ukbwubFlHXjjLpJZ4Dt6PFJEfDJCwEEyQggieiQyE123lHOD7ZNaT9zeu
Tp9AKTaguL8ib7Z28UIf+JYtk8Jaluy6rBBdoe0WDQPYb11l
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:54 2024 by rpki-client on console-ams.rpki-client.org