Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D2uwbxfvspHRPOZ0XfRJ2V2S5qk.roa
File: D2uwbxfvspHRPOZ0XfRJ2V2S5qk.roa (raw, json)
Hash identifier: FdTzkYfePCArX/jOhwI+zwwrI2rUL4K8tE0rc3FVY08=
Subject key identifier: 0F:6B:B0:6F:17:EF:B2:91:D1:3C:E6:74:5D:F4:49:D9:5D:92:E6:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E2E10EF236A7CF895FFE63315D2444C48
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D2uwbxfvspHRPOZ0XfRJ2V2S5qk.roa
Signing time: Mon 11 Mar 2024 15:10:45 +0000
ROA not before: Mon 11 Mar 2024 15:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149476
IP address blocks: 2a10:ccc3:ccc0::/46 maxlen: 48
2a10:ccc3:ccca::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Mar 2024 15:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:10:ef:23:6a:7c:f8:95:ff:e6:33:15:d2:44:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 11 15:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f6bb06f17efb291d13ce6745df449d95d92e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:27:89:bd:6c:5e:47:95:24:e6:39:e9:1e:
46:36:c8:d6:c0:d3:e2:c1:51:70:8f:3f:4e:5c:2b:
be:51:39:14:1b:fa:4f:e5:8c:ef:40:4d:01:07:23:
f6:81:76:fb:00:52:63:94:07:86:5e:65:c7:5a:fa:
8b:40:c3:ee:a3:2d:37:f2:0d:58:2a:3e:2e:89:6c:
4e:02:7c:c2:32:3f:78:96:ba:f5:de:f9:ff:9d:84:
41:f4:7a:f0:d1:2f:1e:72:d9:62:d4:3b:bb:5d:ad:
cf:fd:04:b4:2c:0a:07:95:6d:d3:b0:f8:63:2f:90:
d0:f0:5a:e7:62:20:cb:93:4b:d6:83:c7:3a:26:51:
6b:e7:61:c4:89:f1:62:c2:48:64:3a:9c:1d:5b:cd:
39:43:30:39:f1:3b:eb:f6:28:7a:17:7d:36:4f:9d:
b6:d5:34:0c:66:26:a5:66:19:dd:60:f0:49:bb:16:
dd:f3:d1:2c:3e:ae:ac:a3:c0:25:d8:84:be:ff:43:
a2:b6:f7:34:76:96:46:09:96:83:21:98:bf:b6:2b:
7f:a2:24:d7:60:60:9e:46:5c:ac:88:f2:bd:78:f3:
4f:98:37:b1:0c:36:bc:21:47:52:2e:0f:a3:49:12:
fd:41:27:2a:6d:97:06:7f:4c:87:ed:74:b5:a2:0c:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6B:B0:6F:17:EF:B2:91:D1:3C:E6:74:5D:F4:49:D9:5D:92:E6:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D2uwbxfvspHRPOZ0XfRJ2V2S5qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccc0::/46
2a10:ccc3:ccca::/48
Signature Algorithm: sha256WithRSAEncryption
39:41:c4:f5:e5:d8:4e:0d:fd:5a:8f:46:b1:a5:57:81:e9:df:
82:95:d4:0f:f2:ad:c7:50:22:de:bc:e2:80:e9:6d:5a:04:3e:
11:cd:8a:41:38:3b:0f:cb:23:ca:11:a7:07:bb:0b:c4:de:14:
72:d5:54:84:22:80:4a:6a:be:82:a4:6f:d9:07:97:cf:1a:c3:
93:e0:27:ef:72:8c:a6:93:2c:91:2c:98:9d:f2:81:4b:23:86:
be:09:00:7f:d9:c8:fc:e7:f7:a5:60:aa:88:35:5f:cd:81:a4:
7b:51:02:2d:42:b9:f4:fb:df:dc:b8:7c:f0:02:81:03:03:b8:
54:c0:c6:97:79:db:06:78:be:60:5b:22:30:ac:bc:47:07:1c:
e2:7b:cd:68:8d:15:cc:54:9f:bb:07:7e:17:08:7b:28:b5:f7:
38:38:fa:bd:45:79:bb:94:f6:54:d7:14:9a:c0:fe:05:d6:e6:
80:49:83:f8:0c:2d:91:d1:0b:84:02:ae:82:82:a1:37:07:5a:
49:34:4e:18:87:93:58:50:ea:5c:af:5e:ef:cf:58:49:04:7a:
26:97:dd:70:bf:45:ef:37:34:c3:91:02:5e:08:43:b9:31:86:
23:fd:a4:d3:c5:64:99:19:fa:bb:ae:18:c4:0b:44:3d:8c:ff:
58:16:b6:0a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY4uEO8janz4lf/mMxXSRExIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMzExMTUxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjZiYjA2ZjE3ZWZiMjkxZDEzY2U2NzQ1ZGY0NDlkOTVkOTJlNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAnib1sXkeVJOY56R5GNsjWwNPi
wVFwjz9OXCu+UTkUG/pP5YzvQE0BByP2gXb7AFJjlAeGXmXHWvqLQMPuoy038g1Y
Kj4uiWxOAnzCMj94lrr13vn/nYRB9Hrw0S8ectli1Du7Xa3P/QS0LAoHlW3TsPhj
L5DQ8FrnYiDLk0vWg8c6JlFr52HEifFiwkhkOpwdW805QzA58Tvr9ih6F302T522
1TQMZialZhndYPBJuxbd89EsPq6so8Al2IS+/0Oitvc0dpZGCZaDIZi/tit/oiTX
YGCeRlysiPK9ePNPmDexDDa8IUdSLg+jSRL9QScqbZcGf0yH7XS1ogxqkwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA9rsG8X77KR0TzmdF30SdldkuapMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRDJ1d2J4ZnZzcEhSUE9aMFhmUkoyVjJTNXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKhDMw8zA
AwcAKhDMw8zKMA0GCSqGSIb3DQEBCwUAA4IBAQA5QcT15dhODf1aj0axpVeB6d+C
ldQP8q3HUCLevOKA6W1aBD4RzYpBODsPyyPKEacHuwvE3hRy1VSEIoBKar6CpG/Z
B5fPGsOT4CfvcoymkyyRLJid8oFLI4a+CQB/2cj85/elYKqINV/NgaR7UQItQrn0
+9/cuHzwAoEDA7hUwMaXedsGeL5gWyIwrLxHBxzie81ojRXMVJ+7B34XCHsotfc4
OPq9RXm7lPZU1xSawP4F1uaASYP4DC2R0QuEAq6CgqE3B1pJNE4Yh5NYUOpcr17v
z1hJBHoml91wv0XvNzTDkQJeCEO5MYYj/aTTxWSZGfq7rhjEC0Q9jP9YFrYK
-----END CERTIFICATE-----
Generated at Thu Mar 14 20:00:22 2024 by rpki-client on console-fra.rpki-client.org