Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5rG1LjBnts-wtK2XBzHwvbsCHTg.roa
File: 5rG1LjBnts-wtK2XBzHwvbsCHTg.roa (raw, json)
Hash identifier: ESf/nor2OAuYaKgxXNcUGDlwdLMF/z3uS/yeUbTt9rc=
Subject key identifier: E6:B1:B5:2E:30:67:B6:CF:B0:B4:AD:97:07:31:F0:BD:BB:02:1D:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7D3B192A33627459575FEDA753F95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5rG1LjBnts-wtK2XBzHwvbsCHTg.roa
Signing time: Mon 02 Jan 2023 05:15:19 +0000
ROA not before: Mon 02 Jan 2023 05:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208223
IP address blocks: 2a0e:b107:1a30::/48 maxlen: 48
2a0e:b107:1a35::/48 maxlen: 48
2a0e:b107:1a3a::/48 maxlen: 48
2a0e:b107:1a3f::/48 maxlen: 48
2a0e:b107:1a34::/48 maxlen: 48
2a0e:b107:1a39::/48 maxlen: 48
2a0e:b107:1a3e::/48 maxlen: 48
2a0e:b107:1a33::/48 maxlen: 48
2a0e:b107:1a38::/48 maxlen: 48
2a0e:b107:1a3d::/48 maxlen: 48
2a0e:b107:1a32::/48 maxlen: 48
2a0e:b107:1a37::/48 maxlen: 48
2a0e:b107:1a3c::/48 maxlen: 48
2a0e:b107:1a31::/48 maxlen: 48
2a0e:b107:1a36::/48 maxlen: 48
2a0e:b107:1a3b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:d3:b1:92:a3:36:27:45:95:75:fe:da:75:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b1b52e3067b6cfb0b4ad970731f0bdbb021d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:c6:5a:ee:3a:3b:4b:c1:cf:db:4c:5d:ff:
66:bd:de:d5:4e:39:4a:61:8f:66:4b:8c:79:02:10:
fb:e4:d1:85:8f:93:ca:19:cb:a9:78:4c:38:e4:99:
95:2f:73:00:a4:f0:3d:1f:81:59:39:63:47:1d:e3:
73:8a:e2:7e:12:b2:9f:f6:85:ba:d0:3e:e5:c0:2f:
b1:ff:54:ce:0b:52:2e:32:96:ea:30:b9:84:0e:bb:
4f:80:96:c7:98:c0:a4:c5:4b:09:c3:47:84:d1:63:
a4:72:98:51:79:6a:f8:f5:d4:e3:2b:11:cd:51:1a:
60:62:3f:b1:ea:c1:cb:78:09:d3:37:a5:2c:34:79:
5b:6d:42:27:94:b2:dc:3a:69:a8:d6:4b:53:10:be:
08:13:33:9b:0f:22:39:bf:3c:48:96:f6:c2:44:7a:
f2:e5:4a:31:ca:a5:11:bc:b2:f3:79:7e:d2:81:be:
95:bf:6c:03:45:e5:3c:31:72:7c:22:01:63:62:d0:
17:9e:2a:94:12:bd:9f:76:09:e5:a7:1b:66:c1:69:
f1:26:a1:e7:74:84:d7:8f:3d:d5:f2:72:fb:14:d2:
89:e7:a7:af:9f:d3:93:94:2e:7c:3f:f6:6d:97:c2:
31:fd:49:f4:5d:91:4d:2e:84:fe:c4:d3:8b:9c:32:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:B5:2E:30:67:B6:CF:B0:B4:AD:97:07:31:F0:BD:BB:02:1D:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5rG1LjBnts-wtK2XBzHwvbsCHTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a30::/44
Signature Algorithm: sha256WithRSAEncryption
b3:77:0c:4b:cc:fc:24:7d:47:37:e7:46:b0:19:8f:76:12:8b:
87:e1:90:fb:3b:09:50:d5:ef:04:b4:80:90:1f:43:43:5b:78:
5a:cb:c7:2b:d0:07:12:83:d7:4a:bc:2f:c5:5e:e1:5e:09:e6:
ee:7f:a2:3d:eb:72:51:75:03:cc:b6:46:ff:b2:4e:91:7f:0f:
e4:8e:be:56:c8:2d:7e:25:36:6d:81:10:13:61:cf:80:32:c1:
63:fb:47:10:a7:aa:76:26:01:68:83:4a:2d:9b:1f:6a:ec:fb:
ff:cf:13:3b:19:b9:0f:97:5f:3a:9d:8a:fc:39:71:b4:56:26:
21:91:8b:66:da:33:9b:45:93:8f:f9:db:f7:dc:d6:28:c7:55:
20:84:b4:5c:78:2d:69:8a:80:0b:22:f9:c3:db:e4:61:90:19:
f8:89:fe:eb:cf:95:e4:65:83:e7:9b:0b:5c:cd:8c:77:b9:49:
c6:32:1e:d5:3a:22:b3:11:57:e1:d0:17:f8:3a:d0:3e:f6:9a:
7f:e7:2e:e9:89:36:6c:ee:9b:c1:eb:d2:1d:8e:7b:ad:e2:56:
e1:6c:2a:e2:0c:1a:00:ef:d6:b6:f9:61:db:dd:ae:36:df:52:
28:c0:6f:fa:fc:a7:93:5f:7d:27:fa:b9:f1:c8:60:3e:4a:36:
cb:c1:75:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw59OxkqM2J0WVdf7adT+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIxYjUyZTMwNjdiNmNmYjBiNGFkOTcwNzMxZjBiZGJiMDIxZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXzGWu46O0vBz9tMXf9mvd7VTjlK
YY9mS4x5AhD75NGFj5PKGcupeEw45JmVL3MApPA9H4FZOWNHHeNziuJ+ErKf9oW6
0D7lwC+x/1TOC1IuMpbqMLmEDrtPgJbHmMCkxUsJw0eE0WOkcphReWr49dTjKxHN
URpgYj+x6sHLeAnTN6UsNHlbbUInlLLcOmmo1ktTEL4IEzObDyI5vzxIlvbCRHry
5UoxyqURvLLzeX7Sgb6Vv2wDReU8MXJ8IgFjYtAXniqUEr2fdgnlpxtmwWnxJqHn
dITXjz3V8nL7FNKJ56evn9OTlC58P/Ztl8Ix/Un0XZFNLoT+xNOLnDJIxwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOaxtS4wZ7bPsLStlwcx8L27Ah04MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNXJHMUxqQm50cy13dEsyWEJ6SHd2YnNDSFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxow
MA0GCSqGSIb3DQEBCwUAA4IBAQCzdwxLzPwkfUc350awGY92EouH4ZD7OwlQ1e8E
tICQH0NDW3hay8cr0AcSg9dKvC/FXuFeCebuf6I963JRdQPMtkb/sk6Rfw/kjr5W
yC1+JTZtgRATYc+AMsFj+0cQp6p2JgFog0otmx9q7Pv/zxM7GbkPl186nYr8OXG0
ViYhkYtm2jObRZOP+dv33NYox1UghLRceC1pioALIvnD2+RhkBn4if7rz5XkZYPn
mwtczYx3uUnGMh7VOiKzEVfh0Bf4OtA+9pp/5y7piTZs7pvB69Idjnut4lbhbCri
DBoA79a2+WHb3a4231IowG/6/KeTX30n+rnxyGA+SjbLwXXm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org