Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pc4OaaDRSMZro2f77ZL1tUAA5A.roa
File: 9pc4OaaDRSMZro2f77ZL1tUAA5A.roa (raw, json)
Hash identifier: xkZIXhI++cuA5BQRKnJxlmcI//HdYxg0L9UplalPvsg=
Subject key identifier: F6:97:38:39:A6:83:45:23:19:AE:8D:9F:EF:B6:4B:D6:D5:00:03:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCD206F87BAA176328501B64E1F02A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pc4OaaDRSMZro2f77ZL1tUAA5A.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53358
IP address blocks: 2a0e:97c4:138::/46 maxlen: 48
2a0e:97c4:130::/45 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 23:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d2:06:f8:7b:aa:17:63:28:50:1b:64:e1:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6973839a683452319ae8d9fefb64bd6d5000390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:39:36:88:ee:a5:2e:de:b3:e1:5f:51:77:
9e:49:a4:07:21:9f:d7:3e:6c:2f:e2:3e:f9:85:82:
7d:6f:7e:72:8b:b1:59:be:0f:1b:e9:e6:eb:b5:a0:
05:7e:f5:09:71:84:53:a3:75:85:ac:4e:ae:af:aa:
c9:29:8e:6e:50:cf:af:6d:4d:22:fa:1a:df:dd:6f:
80:e0:d6:5c:1d:10:c4:3c:87:d8:46:bf:42:3f:82:
65:58:90:18:d3:96:86:e7:38:cc:17:af:15:c8:58:
c8:31:93:b5:a6:9a:b8:76:c6:eb:46:c0:5b:72:89:
c9:1a:10:fd:5e:b2:4d:e5:b3:c1:ef:c5:3a:b9:19:
63:75:50:f5:34:41:a1:cc:bc:b5:69:75:a6:54:ce:
98:ae:a1:a0:57:66:d5:87:7e:cf:ed:d1:29:14:9c:
f6:d8:de:c8:3a:3c:04:a6:0b:4a:8e:41:59:d9:b4:
83:ba:dc:49:e1:0a:29:16:0f:48:a2:d7:e0:9c:3e:
cc:e2:c0:33:ea:c0:7a:a5:36:ef:6c:e2:ae:f1:69:
21:2d:46:19:8d:b9:16:43:42:17:ca:d4:38:8b:86:
51:51:bf:e3:e2:27:be:0e:5f:3d:24:af:25:ed:68:
57:47:cd:70:b2:8f:b3:e0:76:6c:0c:87:c9:cc:80:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:97:38:39:A6:83:45:23:19:AE:8D:9F:EF:B6:4B:D6:D5:00:03:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9pc4OaaDRSMZro2f77ZL1tUAA5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c4:130::-2a0e:97c4:13b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:18:7c:c4:df:7e:73:e7:ad:29:11:22:64:6d:4f:40:cd:49:
d2:39:d6:6d:4e:df:3c:ca:60:9e:2c:bf:5b:a6:84:2a:82:01:
dc:68:15:d6:7a:ba:98:df:93:bd:3a:1e:f6:ec:5b:7e:39:07:
f6:b8:2a:da:8f:0d:db:8d:21:1b:2b:b0:14:bc:24:94:83:19:
67:b6:88:64:d0:cc:e1:3c:97:0d:b0:88:f0:1c:5e:c0:72:65:
18:09:37:79:dd:ba:7e:39:d8:de:78:57:09:ac:15:d2:cc:eb:
94:5d:ad:21:49:dd:3c:51:04:51:c9:cc:60:ce:bb:e1:9e:37:
db:e2:20:ed:7a:f0:05:ac:37:94:11:be:dd:aa:52:69:6b:6e:
bd:e2:84:5a:f5:96:d7:8c:88:76:84:52:de:f2:37:9f:d4:a4:
fc:8a:67:b2:57:06:c2:67:69:b1:33:0e:31:b7:af:1c:f6:b5:
25:70:9c:dc:5c:35:36:9e:49:5a:63:e9:e1:09:fa:80:43:a3:
d3:f7:36:8e:6b:46:4f:e6:27:5e:88:b4:89:d4:b9:02:d1:d3:
6a:ab:4c:86:81:98:8a:43:c2:1d:a7:b7:39:d7:d2:df:4d:ff:
2b:07:cb:ed:d2:8a:0d:e9:62:14:4f:9d:94:5d:35:5d:67:7c:
29:8f:45:17
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzJvNIG+HuqF2MoUBtk4fAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjk3MzgzOWE2ODM0NTIzMTlhZThkOWZlZmI2NGJkNmQ1MDAwMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogI5NojupS7es+FfUXeeSaQHIZ/X
Pmwv4j75hYJ9b35yi7FZvg8b6ebrtaAFfvUJcYRTo3WFrE6ur6rJKY5uUM+vbU0i
+hrf3W+A4NZcHRDEPIfYRr9CP4JlWJAY05aG5zjMF68VyFjIMZO1ppq4dsbrRsBb
conJGhD9XrJN5bPB78U6uRljdVD1NEGhzLy1aXWmVM6YrqGgV2bVh37P7dEpFJz2
2N7IOjwEpgtKjkFZ2bSDutxJ4QopFg9IotfgnD7M4sAz6sB6pTbvbOKu8WkhLUYZ
jbkWQ0IXytQ4i4ZRUb/j4ie+Dl89JK8l7WhXR81wso+z4HZsDIfJzIDFmQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPaXODmmg0UjGa6Nn++2S9bVAAOQMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOXBjNE9hYURSU01acm8yZjc3WkwxdFVBQTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDpfE
ATADBwIqDpfEATgwDQYJKoZIhvcNAQELBQADggEBAHQYfMTffnPnrSkRImRtT0DN
SdI51m1O3zzKYJ4sv1umhCqCAdxoFdZ6upjfk706HvbsW345B/a4KtqPDduNIRsr
sBS8JJSDGWe2iGTQzOE8lw2wiPAcXsByZRgJN3ndun452N54VwmsFdLM65RdrSFJ
3TxRBFHJzGDOu+GeN9viIO168AWsN5QRvt2qUmlrbr3ihFr1lteMiHaEUt7yN5/U
pPyKZ7JXBsJnabEzDjG3rxz2tSVwnNxcNTaeSVpj6eEJ+oBDo9P3No5rRk/mJ16I
tInUuQLR02qrTIaBmIpDwh2ntznX0t9N/ysHy+3Sig3pYhRPnZRdNV1nfCmPRRc=
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:19:05 2024 by rpki-client on console-ams.rpki-client.org