Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AduE5vwEg3fUtSWz0roJagHZtbc.roa
File: AduE5vwEg3fUtSWz0roJagHZtbc.roa (raw, json)
Hash identifier: ZAxhas8dggwzm/A7UuZNesQUavo4dAjNlyaSVji/MbQ=
Subject key identifier: 01:DB:84:E6:FC:04:83:77:D4:B5:25:B3:D2:BA:09:6A:01:D9:B5:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE457EE30F84CD2BC437CA42E1D33
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AduE5vwEg3fUtSWz0roJagHZtbc.roa
Signing time: Tue 24 Jan 2023 16:09:45 +0000
ROA not before: Tue 24 Jan 2023 16:09:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209209
IP address blocks: 2a0e:b107:1560::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e4:57:ee:30:f8:4c:d2:bc:43:7c:a4:2e:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01db84e6fc048377d4b525b3d2ba096a01d9b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:cb:82:a2:3a:57:9f:7d:f1:c9:3d:df:bb:
b4:0a:ac:2b:a1:3c:63:01:d1:f4:8b:01:a7:88:4d:
a8:e6:bf:52:0f:c3:0f:3b:6b:56:a1:82:a7:18:0a:
6b:59:4d:ee:9c:90:3d:b6:d5:4c:89:7c:d5:6f:db:
63:2f:04:f8:0c:9e:1a:45:86:6f:a1:ae:e3:fb:bc:
73:d9:88:5d:0c:42:89:02:eb:08:a3:67:b4:8d:6b:
2e:c8:a1:18:9d:13:b7:53:f2:74:25:44:6f:14:ab:
38:78:ad:db:26:b5:99:29:5b:a3:c2:cb:9d:f9:3b:
e8:5b:bd:3e:b1:68:2e:8b:5a:7b:ce:55:60:18:a7:
65:be:73:ae:bd:49:8a:b9:17:d7:31:34:9e:22:0b:
42:85:6d:04:22:e4:6e:f9:d9:f8:e5:f6:d6:bf:45:
65:09:51:85:50:ed:ed:6c:35:3e:96:bc:4d:f7:db:
c2:59:d3:97:82:41:05:3e:a7:77:82:35:bc:58:48:
16:d3:02:ee:ad:69:aa:15:7d:c3:62:a1:7f:94:1f:
b5:46:40:45:91:9f:fa:4d:db:5b:63:f8:eb:e4:38:
43:31:c4:96:93:56:a0:99:50:2e:89:79:06:0c:fb:
cf:0a:29:fa:ac:62:b6:a3:25:d7:02:5d:74:87:e9:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DB:84:E6:FC:04:83:77:D4:B5:25:B3:D2:BA:09:6A:01:D9:B5:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AduE5vwEg3fUtSWz0roJagHZtbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1560::/44
Signature Algorithm: sha256WithRSAEncryption
55:a8:72:ed:95:de:bb:1b:ea:97:50:60:64:3d:4b:08:f6:64:
af:0f:10:2d:ba:fc:6f:63:5d:f1:57:89:70:23:74:38:d3:81:
72:a8:b1:40:02:fc:83:5b:b1:0c:e4:27:ad:0e:cb:dc:0a:f7:
d8:bc:46:de:f3:07:30:dd:15:7c:dc:55:ed:c5:af:18:d1:36:
0b:7c:92:dd:dd:e9:58:77:38:c4:1a:10:35:71:ac:9c:ce:23:
7c:71:fa:f0:b8:8e:74:c5:54:c6:68:64:cb:16:13:b5:07:f8:
71:58:30:6f:4d:53:b8:92:56:e3:b0:37:68:da:f3:cd:10:6e:
f8:5e:e9:78:fa:a8:09:5e:92:bc:a6:49:ae:e3:b5:b1:08:85:
be:3b:07:87:52:80:2e:f6:58:27:5e:94:84:ab:17:a8:a9:1a:
0e:3d:46:9a:6c:f1:be:7a:98:dc:ca:d0:b9:a0:94:75:0b:05:
7f:7b:0d:e8:fd:1d:09:c9:e2:0f:b4:3e:62:31:f1:8f:00:50:
fd:8b:30:2d:f9:13:8f:76:b1:f6:b8:9d:85:c3:13:f5:41:e4:
57:c5:2f:99:6a:a8:26:0d:0d:7c:53:8f:5d:28:0b:88:33:0c:
9a:8f:5a:b4:a6:78:7c:46:41:20:a8:c1:4c:63:b9:38:ca:69:
2e:d4:07:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkiuRX7jD4TNK8Q3ykLh0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWRiODRlNmZjMDQ4Mzc3ZDRiNTI1YjNkMmJhMDk2YTAxZDliNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn3LgqI6V5998ck937u0CqwroTxj
AdH0iwGniE2o5r9SD8MPO2tWoYKnGAprWU3unJA9ttVMiXzVb9tjLwT4DJ4aRYZv
oa7j+7xz2YhdDEKJAusIo2e0jWsuyKEYnRO3U/J0JURvFKs4eK3bJrWZKVujwsud
+TvoW70+sWgui1p7zlVgGKdlvnOuvUmKuRfXMTSeIgtChW0EIuRu+dn45fbWv0Vl
CVGFUO3tbDU+lrxN99vCWdOXgkEFPqd3gjW8WEgW0wLurWmqFX3DYqF/lB+1RkBF
kZ/6TdtbY/jr5DhDMcSWk1agmVAuiXkGDPvPCin6rGK2oyXXAl10h+kILQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAHbhOb8BIN31LUls9K6CWoB2bW3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQWR1RTV2d0VnM2ZVdFNXejByb0phZ0hadGJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxVg
MA0GCSqGSIb3DQEBCwUAA4IBAQBVqHLtld67G+qXUGBkPUsI9mSvDxAtuvxvY13x
V4lwI3Q404FyqLFAAvyDW7EM5CetDsvcCvfYvEbe8wcw3RV83FXtxa8Y0TYLfJLd
3elYdzjEGhA1caycziN8cfrwuI50xVTGaGTLFhO1B/hxWDBvTVO4klbjsDdo2vPN
EG74Xul4+qgJXpK8pkmu47WxCIW+OweHUoAu9lgnXpSEqxeoqRoOPUaabPG+epjc
ytC5oJR1CwV/ew3o/R0JyeIPtD5iMfGPAFD9izAt+ROPdrH2uJ2FwxP1QeRXxS+Z
aqgmDQ18U49dKAuIMwyaj1q0pnh8RkEgqMFMY7k4ymku1AcZ
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org