Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa
File: AouB1e7ie1SgIRST66q9NK4p_LA.roa (raw, json)
Hash identifier: Dw0koXIe8kwa7FsB8nJ1hH2vEKmJpdQSX6pa7Wh/cgA=
Subject key identifier: 02:8B:81:D5:EE:E2:7B:54:A0:21:14:93:EB:AA:BD:34:AE:29:FC:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01869C364136FA641951AB6613F8BE094D3E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa
Signing time: Wed 01 Mar 2023 08:07:26 +0000
ROA not before: Wed 01 Mar 2023 08:07:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202827
IP address blocks: 2a0e:b107:1ce1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Mar 2023 11:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:36:41:36:fa:64:19:51:ab:66:13:f8:be:09:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 08:07:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=028b81d5eee27b54a0211493ebaabd34ae29fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:3d:75:47:8f:ba:d4:54:28:8b:9b:43:40:
37:16:d3:f9:50:80:21:ac:57:3a:bb:25:5c:a6:3d:
9f:08:c9:97:82:05:7d:6a:15:6a:e6:1d:32:6e:e0:
37:34:1c:77:5d:54:c1:a3:03:a3:c6:e8:70:cf:ca:
09:b2:6c:91:4c:71:93:ad:d0:07:ea:e1:92:a1:f3:
05:6b:d4:49:3c:74:88:5a:f1:48:c0:62:6c:b2:09:
2b:10:2f:b3:e5:71:37:5b:f8:c7:97:dd:e5:91:56:
b3:6f:3a:7e:b2:d7:c5:d0:86:f5:8e:9b:41:23:5f:
47:6c:df:39:3c:4b:8e:f0:0b:4b:c3:d5:19:83:3f:
10:78:80:6c:06:53:4b:bf:14:f2:d2:6e:46:89:6a:
f0:95:77:47:9b:db:50:4e:11:e6:47:53:04:6c:31:
38:c1:50:ce:ae:5d:b7:c3:42:4c:03:22:8b:03:e1:
62:8a:7f:89:51:e4:fb:b9:28:8b:f7:55:92:0f:0b:
11:b7:b2:6a:6b:df:66:48:6c:39:1e:8d:33:a0:2e:
4b:bc:3b:f6:a7:64:a8:4f:f0:e2:99:2c:2d:68:4c:
df:6c:7a:0a:32:1d:53:80:84:1e:18:3a:07:d1:94:
1e:04:8e:92:45:53:7a:37:6b:90:41:72:33:b5:66:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8B:81:D5:EE:E2:7B:54:A0:21:14:93:EB:AA:BD:34:AE:29:FC:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AouB1e7ie1SgIRST66q9NK4p_LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ce1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:44:22:2e:8c:fc:0e:59:ca:72:c8:cb:17:05:3e:de:6e:ae:
82:db:5e:3a:43:b2:a4:4e:4d:3b:0a:ea:c9:6a:9d:0f:94:2e:
8b:55:ad:41:21:82:99:50:b8:b6:92:e1:41:db:3e:58:f9:19:
8c:ca:ef:4d:f5:ae:3d:7f:ca:86:a7:88:39:9c:b8:3b:9f:df:
8b:7d:11:44:44:56:69:b4:09:bf:50:4e:f2:70:d1:42:c5:1d:
bb:1a:02:91:6e:2f:ea:82:2d:9e:c8:95:a1:28:5b:af:9f:6d:
8e:3c:49:c8:a2:ad:a3:ed:c9:fc:ee:be:ff:a0:73:58:3d:09:
f9:96:6d:21:83:d1:11:bb:09:5f:e1:f1:05:97:01:07:81:b8:
0f:4c:7b:1a:44:02:ae:ce:f7:63:1e:40:27:77:7a:f6:83:02:
6b:2c:3e:27:43:68:03:b4:1b:dd:fb:d0:54:85:2d:29:f9:82:
83:2d:aa:1d:5a:cb:3b:15:74:a0:f6:0c:ac:4d:7e:79:d2:9d:
7f:73:bf:b0:7e:8a:98:6a:d7:7c:52:cb:0d:92:25:7c:99:49:
98:ac:71:fa:ee:b6:cb:dc:89:21:08:99:33:fd:6d:d0:93:94:
78:d8:a3:12:2b:ad:d4:1c:f1:a0:9a:3e:63:9c:e4:a6:ec:df:
61:2a:63:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYacNkE2+mQZUatmE/i+CU0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAxMDgwNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjhiODFkNWVlZTI3YjU0YTAyMTE0OTNlYmFhYmQzNGFlMjlmY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/I9dUePutRUKIubQ0A3FtP5UIAh
rFc6uyVcpj2fCMmXggV9ahVq5h0ybuA3NBx3XVTBowOjxuhwz8oJsmyRTHGTrdAH
6uGSofMFa9RJPHSIWvFIwGJssgkrEC+z5XE3W/jHl93lkVazbzp+stfF0Ib1jptB
I19HbN85PEuO8AtLw9UZgz8QeIBsBlNLvxTy0m5GiWrwlXdHm9tQThHmR1MEbDE4
wVDOrl23w0JMAyKLA+Fiin+JUeT7uSiL91WSDwsRt7Jqa99mSGw5Ho0zoC5LvDv2
p2SoT/DimSwtaEzfbHoKMh1TgIQeGDoH0ZQeBI6SRVN6N2uQQXIztWazlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAKLgdXu4ntUoCEUk+uqvTSuKfywMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQW91QjFlN2llMVNnSVJTVDY2cTlOSzRwX0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxzh
MA0GCSqGSIb3DQEBCwUAA4IBAQB+RCIujPwOWcpyyMsXBT7ebq6C2146Q7KkTk07
CurJap0PlC6LVa1BIYKZULi2kuFB2z5Y+RmMyu9N9a49f8qGp4g5nLg7n9+LfRFE
RFZptAm/UE7ycNFCxR27GgKRbi/qgi2eyJWhKFuvn22OPEnIoq2j7cn87r7/oHNY
PQn5lm0hg9ERuwlf4fEFlwEHgbgPTHsaRAKuzvdjHkAnd3r2gwJrLD4nQ2gDtBvd
+9BUhS0p+YKDLaodWss7FXSg9gysTX550p1/c7+wfoqYatd8UssNkiV8mUmYrHH6
7rbL3IkhCJkz/W3Qk5R42KMSK63UHPGgmj5jnOSm7N9hKmOj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:56 2024 by rpki-client on console-ams.rpki-client.org