Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/93QuTRqgqR3Jx-XwP2d_KxMnjWM.roa
File: 93QuTRqgqR3Jx-XwP2d_KxMnjWM.roa (raw, json)
Hash identifier: JTQ5gsZxX3ywdPHPFQNZ+XYcbN6SJfDziqNQJomdTYo=
Subject key identifier: F7:74:2E:4D:1A:A0:A9:1D:C9:C7:E5:F0:3F:67:7F:2B:13:27:8D:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018F9BA270724B1DE21F2CFDEA25793FE16F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/93QuTRqgqR3Jx-XwP2d_KxMnjWM.roa
Signing time: Tue 21 May 2024 14:51:05 +0000
ROA not before: Tue 21 May 2024 14:51:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 15:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:a2:70:72:4b:1d:e2:1f:2c:fd:ea:25:79:3f:e1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 21 14:51:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7742e4d1aa0a91dc9c7e5f03f677f2b13278d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:97:31:49:5f:29:a5:5f:02:f2:97:e4:72:
64:b9:e5:54:35:26:08:cb:6e:6b:30:a3:5d:a7:6b:
1f:66:eb:c6:42:d3:26:88:8a:4d:3c:b8:02:10:9f:
fb:5a:61:5d:f3:6e:af:3d:86:18:39:a7:bb:79:13:
de:86:f6:e4:67:51:e9:83:e2:75:95:e2:77:20:7a:
8d:55:e6:8e:f6:67:f3:9e:b1:c1:2f:f4:eb:84:d3:
a6:0b:f8:ea:d3:7c:85:be:6b:4b:08:ea:83:e6:5f:
36:46:44:1a:87:e8:a0:10:d8:c4:ee:b4:d6:1e:77:
89:41:0b:ec:41:7d:af:72:f1:43:0b:d4:e0:67:ac:
af:28:1d:c8:60:89:2b:7d:ca:c2:eb:5c:b8:39:63:
66:81:67:1c:bd:10:a9:3b:0f:5f:57:b0:53:c7:a1:
9e:cd:63:8c:48:c5:05:4a:6d:fc:21:10:8f:49:67:
27:3c:ef:29:ce:d4:d2:bc:4f:37:34:ce:a4:64:bb:
d8:e6:6d:d7:df:75:06:12:99:63:21:3d:d4:bf:94:
0c:05:ea:58:22:d6:6f:c8:aa:0f:1f:00:55:1c:df:
6c:13:f8:10:7c:8b:d3:c5:94:13:5a:b1:ac:54:fe:
1d:52:56:01:11:16:11:a8:fa:86:1e:76:20:68:d1:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:74:2E:4D:1A:A0:A9:1D:C9:C7:E5:F0:3F:67:7F:2B:13:27:8D:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/93QuTRqgqR3Jx-XwP2d_KxMnjWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
66:d8:65:82:56:e8:19:7d:1a:75:4a:65:81:7a:c9:d6:b3:5c:
ad:47:6d:b0:b1:3b:98:b8:8f:4d:22:08:6b:3b:f8:47:0a:07:
d2:7e:9f:be:ce:ef:a5:73:d3:00:09:91:5d:d9:d9:7c:a3:6f:
4f:57:02:a5:c4:82:e2:33:c2:02:00:97:1e:25:c9:96:83:37:
06:ca:c7:9f:6d:d2:2c:2b:7e:e2:8f:b8:a2:31:59:99:d6:82:
62:62:95:02:77:d5:00:fa:ad:b2:aa:61:1b:63:3a:cd:27:35:
a6:81:13:b8:00:58:f8:9b:84:b6:e6:19:4d:9f:33:4d:40:3c:
75:67:0a:e9:7a:de:a0:99:e8:2c:6d:67:7f:f1:31:e0:7b:9a:
9f:5c:a8:76:a8:12:ec:f1:45:32:48:67:cc:82:e7:1c:8c:d2:
5c:81:5a:1b:06:52:46:44:8b:29:a8:ac:81:76:6d:29:0a:1f:
45:e8:c0:99:69:7f:35:de:0d:67:f0:d2:90:ab:c1:c2:fa:24:
43:77:9d:1b:ad:5b:ab:a8:e5:fc:c3:5e:73:e0:b9:fe:12:fe:
59:7b:cb:2d:b7:96:4d:89:c8:d4:2c:c0:9d:ba:41:d1:67:a5:
aa:ee:9d:9d:c5:b5:35:f8:ea:43:57:03:66:7c:15:c7:3a:99:
56:bf:0b:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY+bonBySx3iHyz96iV5P+FvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNTIxMTQ1MTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzc0MmU0ZDFhYTBhOTFkYzljN2U1ZjAzZjY3N2YyYjEzMjc4ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuWXMUlfKaVfAvKX5HJkueVUNSYI
y25rMKNdp2sfZuvGQtMmiIpNPLgCEJ/7WmFd826vPYYYOae7eRPehvbkZ1Hpg+J1
leJ3IHqNVeaO9mfznrHBL/TrhNOmC/jq03yFvmtLCOqD5l82RkQah+igENjE7rTW
HneJQQvsQX2vcvFDC9TgZ6yvKB3IYIkrfcrC61y4OWNmgWccvRCpOw9fV7BTx6Ge
zWOMSMUFSm38IRCPSWcnPO8pztTSvE83NM6kZLvY5m3X33UGEpljIT3Uv5QMBepY
ItZvyKoPHwBVHN9sE/gQfIvTxZQTWrGsVP4dUlYBERYRqPqGHnYgaNG+RwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPd0Lk0aoKkdycfl8D9nfysTJ41jMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOTNRdVRScWdxUjNKeC1Yd1AyZF9LeE1ualdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGH
MA0GCSqGSIb3DQEBCwUAA4IBAQBm2GWCVugZfRp1SmWBesnWs1ytR22wsTuYuI9N
IghrO/hHCgfSfp++zu+lc9MACZFd2dl8o29PVwKlxILiM8ICAJceJcmWgzcGysef
bdIsK37ij7iiMVmZ1oJiYpUCd9UA+q2yqmEbYzrNJzWmgRO4AFj4m4S25hlNnzNN
QDx1Zwrpet6gmegsbWd/8THge5qfXKh2qBLs8UUySGfMguccjNJcgVobBlJGRIsp
qKyBdm0pCh9F6MCZaX813g1n8NKQq8HC+iRDd50brVurqOX8w15z4Ln+Ev5Ze8st
t5ZNicjULMCdukHRZ6Wq7p2dxbU1+OpDVwNmfBXHOplWvwsN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:55 2024 by rpki-client on console-ams.rpki-client.org