Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa
File: CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa (raw, json)
Hash identifier: BDSgEykbpiVJ25ho0xH5mc1/YjiHtYZmO3Q3wyGiUSo=
Subject key identifier: 08:6A:7E:A9:18:8D:6D:58:CD:AC:D7:B9:95:E7:D6:B7:D2:9D:CA:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD744108817119C05468E05CFB0D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa
Signing time: Tue 24 Jan 2023 16:09:42 +0000
ROA not before: Tue 24 Jan 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204729
IP address blocks: 2a0e:b107:1b9d::/48 maxlen: 48
2a0e:b107:1b9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Jun 2023 17:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d7:44:10:88:17:11:9c:05:46:8e:05:cf:b0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=086a7ea9188d6d58cdacd7b995e7d6b7d29dca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:72:56:57:f7:d9:69:60:d4:c9:09:db:53:
4f:fc:13:80:43:89:85:fd:0b:b1:5d:4a:91:cf:d4:
f5:2b:9b:63:ac:b8:e8:78:17:90:35:4d:49:f8:7a:
34:69:02:3d:ab:6e:0e:8f:e8:e5:df:d1:96:0d:53:
da:62:f4:81:82:f9:d1:a0:e4:fe:e0:e7:07:ff:de:
38:b8:f9:a3:41:8c:1c:d7:1c:e8:95:0c:c1:da:6d:
14:f2:08:88:29:8e:e0:62:d6:ec:8c:57:47:09:ac:
28:8d:52:e1:82:d2:2b:91:2a:bb:da:b3:67:ec:35:
a1:3c:08:b1:cc:03:b9:24:ab:f7:3e:42:86:06:28:
b6:19:de:be:32:fb:0b:38:76:ba:6d:5b:53:2c:27:
fd:ae:40:54:68:b6:30:17:08:ea:ee:df:a3:bc:12:
67:1b:f8:48:92:8e:2c:fc:dc:02:7e:8e:c7:6a:44:
cd:04:11:71:ca:c7:12:db:93:10:39:bc:12:fd:c5:
e9:27:09:55:c2:e0:ee:52:df:40:1c:30:63:ef:76:
a7:44:e8:03:79:cd:f2:39:39:54:de:78:27:3e:2c:
84:a2:92:02:c2:e7:75:4c:bb:03:d5:4f:84:f2:01:
e9:34:f7:26:16:3f:69:c3:26:4c:07:57:c0:57:e6:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:7E:A9:18:8D:6D:58:CD:AC:D7:B9:95:E7:D6:B7:D2:9D:CA:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CGp-qRiNbVjNrNe5lefWt9Kdyo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b9c::/47
Signature Algorithm: sha256WithRSAEncryption
2e:d9:85:4e:a0:d5:d3:5f:88:31:bf:84:e5:9a:64:5b:fa:d1:
5f:d8:80:47:a1:d0:27:33:ef:62:d7:85:84:e3:8b:c9:43:87:
1b:bb:fc:1d:68:11:d0:d1:26:27:93:df:d0:60:3c:ef:8f:18:
22:3e:21:2d:7d:8e:6c:31:90:ae:ec:8d:4a:37:3e:36:00:0a:
0c:9e:c7:1b:43:b1:d9:e6:31:94:ba:2b:0c:71:06:b9:03:d5:
92:5a:a3:39:39:b0:90:11:f1:f8:26:50:eb:1d:ab:cc:96:0d:
da:12:01:80:6e:35:c8:98:e7:f5:b2:da:a2:74:2f:5c:0c:d7:
7e:85:92:e4:41:bc:87:4b:d7:e7:e9:79:9a:48:bb:4c:19:e5:
f3:fc:ac:a5:14:57:6b:13:95:dc:25:a8:ae:cf:09:f0:4f:46:
85:24:22:72:12:50:80:b4:f5:77:eb:10:d1:bd:b5:43:09:b6:
2b:b7:96:b1:b5:64:f0:08:3c:74:e2:8f:57:49:1b:69:fc:cb:
de:db:04:c2:67:78:38:7d:f5:ef:04:b5:67:94:dc:ec:99:0d:
08:41:03:d9:44:35:21:f7:66:21:95:fb:12:c8:0e:51:a5:23:
41:f0:59:07:fd:9d:62:ad:fd:84:c2:75:72:b3:6c:ec:86:16:
8d:8f:f1:e8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkitdEEIgXEZwFRo4Fz7DRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODZhN2VhOTE4OGQ2ZDU4Y2RhY2Q3Yjk5NWU3ZDZiN2QyOWRjYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaJyVlf32Wlg1MkJ21NP/BOAQ4mF
/QuxXUqRz9T1K5tjrLjoeBeQNU1J+Ho0aQI9q24Oj+jl39GWDVPaYvSBgvnRoOT+
4OcH/944uPmjQYwc1xzolQzB2m0U8giIKY7gYtbsjFdHCawojVLhgtIrkSq72rNn
7DWhPAixzAO5JKv3PkKGBii2Gd6+MvsLOHa6bVtTLCf9rkBUaLYwFwjq7t+jvBJn
G/hIko4s/NwCfo7HakTNBBFxyscS25MQObwS/cXpJwlVwuDuUt9AHDBj73anROgD
ec3yOTlU3ngnPiyEopICwud1TLsD1U+E8gHpNPcmFj9pwyZMB1fAV+ZzXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAhqfqkYjW1YzazXuZXn1rfSncqOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQ0dwLXFSaU5iVmpOck5lNWxlZld0OUtkeW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6xBxuc
MA0GCSqGSIb3DQEBCwUAA4IBAQAu2YVOoNXTX4gxv4TlmmRb+tFf2IBHodAnM+9i
14WE44vJQ4cbu/wdaBHQ0SYnk9/QYDzvjxgiPiEtfY5sMZCu7I1KNz42AAoMnscb
Q7HZ5jGUuisMcQa5A9WSWqM5ObCQEfH4JlDrHavMlg3aEgGAbjXImOf1stqidC9c
DNd+hZLkQbyHS9fn6XmaSLtMGeXz/KylFFdrE5XcJaiuzwnwT0aFJCJyElCAtPV3
6xDRvbVDCbYrt5axtWTwCDx04o9XSRtp/Mve2wTCZ3g4ffXvBLVnlNzsmQ0IQQPZ
RDUh92YhlfsSyA5RpSNB8FkH/Z1irf2EwnVys2zshhaNj/Ho
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:57 2024 by rpki-client on console-ams.rpki-client.org