Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6J3SW236EVOe75k2zdwddeH1MOs.roa
File: 6J3SW236EVOe75k2zdwddeH1MOs.roa (raw, json)
Hash identifier: 27mNAabdm/9IsgHF2Tm5ujFg1xjFgax6SyMlGjFYphE=
Subject key identifier: E8:9D:D2:5B:6D:FA:11:53:9E:EF:99:36:CD:DC:1D:75:E1:F5:30:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01935A3FCB008DEF5D2FE7D0C038E4588B9D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6J3SW236EVOe75k2zdwddeH1MOs.roa
Signing time: Sat 23 Nov 2024 18:19:10 +0000
ROA not before: Sat 23 Nov 2024 18:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de00:f0::/44 maxlen: 48
2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a06:de03:3690::/48 maxlen: 48
2a06:de03:3691::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Dec 2024 12:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:3f:cb:00:8d:ef:5d:2f:e7:d0:c0:38:e4:58:8b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 23 18:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89dd25b6dfa11539eef9936cddc1d75e1f530eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:3f:09:2d:63:47:a3:d2:da:43:d7:74:9b:
98:98:4f:c7:74:08:ae:c5:e0:8d:57:f9:14:5f:bc:
9b:cb:09:9b:e5:28:37:81:51:e5:90:a3:bf:fb:c9:
c2:e1:bf:55:29:fe:ef:3f:cf:c8:7c:9d:59:c9:2a:
94:c8:6a:7d:ed:cf:9d:fd:09:e0:22:1a:4d:5e:42:
52:d7:0f:b2:d2:cf:51:a1:b3:80:70:10:c8:d3:dc:
4f:2d:e3:2d:04:4f:71:ce:89:99:61:38:3c:3c:f8:
6d:03:4f:b2:c0:cc:a8:80:c2:d7:8e:79:b8:33:44:
f6:76:77:01:fd:3f:8f:cf:ba:5a:89:24:fe:03:78:
c2:f2:d4:4a:a7:59:08:12:90:c7:a3:08:c1:07:8f:
66:c1:6e:81:0b:2f:26:04:9c:75:7d:d5:44:0f:25:
41:e9:19:56:05:3a:31:0f:b9:09:65:29:f5:4c:98:
2a:7e:ca:c8:e6:8a:94:c5:dd:9a:c3:6a:ff:8b:05:
f1:ba:34:f9:a4:19:02:c8:24:6f:7c:a9:54:76:7a:
9a:c6:26:16:70:1d:9f:52:44:58:9c:bd:c1:d7:9a:
a2:4f:a4:28:6a:3e:54:75:59:e7:f7:a4:ec:5c:07:
52:02:5c:b7:33:d6:c3:7e:61:13:ad:81:4a:19:4e:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:D2:5B:6D:FA:11:53:9E:EF:99:36:CD:DC:1D:75:E1:F5:30:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6J3SW236EVOe75k2zdwddeH1MOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:f0::/44
2a06:de01:140::/44
2a06:de03:3690::/47
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
a3:45:db:33:20:a9:3f:97:ed:f7:c0:c3:86:a2:7b:7c:2d:5c:
37:2a:78:3d:9d:90:35:33:34:3a:94:14:37:dd:6b:77:68:74:
00:79:37:89:16:48:13:9f:a5:75:36:e1:53:7c:31:5c:39:6a:
2a:74:5e:13:08:81:cd:fa:ce:9e:0d:2e:a1:a9:a6:ba:8d:3d:
d7:1d:60:be:c3:63:8f:79:5f:a9:0f:d0:c4:dc:26:87:0b:1f:
35:54:3e:11:2b:8c:fc:bf:de:63:89:b6:8c:9a:d5:b2:e4:38:
a8:4d:32:6d:ab:e2:45:f5:f5:0f:ad:44:3c:41:44:99:45:04:
02:b3:e8:ff:6b:47:a6:a2:60:2b:4e:b2:e3:58:ba:ae:fb:32:
be:9d:3f:40:18:22:12:df:3c:42:41:d1:f5:5a:2a:96:0a:48:
6f:1b:b3:85:e5:9c:4e:8c:f8:c1:05:a1:db:a2:ab:a7:01:67:
19:91:1d:32:36:d1:7c:60:64:bf:7d:12:94:60:f0:ac:e3:7f:
ff:a5:6a:58:b1:aa:2b:db:7c:ce:d8:87:67:4c:18:a7:cb:f5:
65:6a:83:bd:1e:db:66:1d:9b:13:52:06:48:5c:d4:37:ae:df:
9f:87:d8:e3:45:0e:1d:77:12:47:52:6c:ca:66:a4:d8:28:b1:
bf:c0:86:78
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAZNaP8sAje9dL+fQwDjkWIudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTIzMTgxOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODlkZDI1YjZkZmExMTUzOWVlZjk5MzZjZGRjMWQ3NWUxZjUzMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eg/CS1jR6PS2kPXdJuYmE/HdAiu
xeCNV/kUX7ybywmb5Sg3gVHlkKO/+8nC4b9VKf7vP8/IfJ1ZySqUyGp97c+d/Qng
IhpNXkJS1w+y0s9RobOAcBDI09xPLeMtBE9xzomZYTg8PPhtA0+ywMyogMLXjnm4
M0T2dncB/T+Pz7paiST+A3jC8tRKp1kIEpDHowjBB49mwW6BCy8mBJx1fdVEDyVB
6RlWBToxD7kJZSn1TJgqfsrI5oqUxd2aw2r/iwXxujT5pBkCyCRvfKlUdnqaxiYW
cB2fUkRYnL3B15qiT6Qoaj5UdVnn96TsXAdSAly3M9bDfmETrYFKGU4upQIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFOid0ltt+hFTnu+ZNs3cHXXh9TDrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNkozU1cyMzZFVk9lNzVrMnpkd2RkZUgxTU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAIwgYYDBwQq
Bt4AAPADBwQqBt4BAUADBwEqBt4DNpADBgAqDDuH/wMHACoOl8AHUDASAwcAKg6X
wAeRAwcAKg6XwAeSAwYCKg6XxKwDBwAqDrEHCfQDBwAqDrEHCfYDBwAqDrEHDfID
BwAqDrEHGHADBwAqDrEHG54DBwAqDrEHJ4sDBgIqEMzHkDANBgkqhkiG9w0BAQsF
AAOCAQEAo0XbMyCpP5ft98DDhqJ7fC1cNyp4PZ2QNTM0OpQUN91rd2h0AHk3iRZI
E5+ldTbhU3wxXDlqKnReEwiBzfrOng0uoammuo091x1gvsNjj3lfqQ/QxNwmhwsf
NVQ+ESuM/L/eY4m2jJrVsuQ4qE0ybaviRfX1D61EPEFEmUUEArPo/2tHpqJgK06y
41i6rvsyvp0/QBgiEt88QkHR9VoqlgpIbxuzheWcToz4wQWh26KrpwFnGZEdMjbR
fGBkv30SlGDwrON//6VqWLGqK9t8ztiHZ0wYp8v1ZWqDvR7bZh2bE1IGSFzUN67f
n4fY40UOHXcSR1Jsymak2Cixv8CGeA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:40 2025 by rpki-client