Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa
File: D4mmHFKN97KfqxmlT4CQsx-P4N4.roa (raw, json)
Hash identifier: Da7yoAg1aX9+X8nsvZuXkwMSEzgtaKDkJbLbLl+Szxk=
Subject key identifier: 0F:89:A6:1C:52:8D:F7:B2:9F:AB:19:A5:4F:80:90:B3:1F:8F:E0:DE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01862B2C044E299641A1AEA6D51792A60A2B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa
Signing time: Tue 07 Feb 2023 09:19:10 +0000
ROA not before: Tue 07 Feb 2023 09:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211659
IP address blocks: 2a0e:b105:120::/48 maxlen: 48
2a0e:b105:121::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Feb 2023 10:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:2c:04:4e:29:96:41:a1:ae:a6:d5:17:92:a6:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 7 09:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f89a61c528df7b29fab19a54f8090b31f8fe0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:80:0a:c9:30:6c:8e:8a:39:00:de:64:c0:
a6:2c:01:a2:7a:84:ea:fa:f3:2e:d2:1f:fd:fd:69:
9a:6f:39:85:06:af:53:eb:2e:e0:6e:06:ee:ec:5c:
d9:9e:df:e3:58:4c:33:d5:1e:14:bd:35:ec:68:11:
3d:25:ba:f2:50:d7:c6:6e:88:d8:09:9c:70:21:e4:
26:98:31:89:5a:c4:d2:0a:56:05:95:25:88:ee:a4:
12:c5:d7:a4:a9:37:5a:71:14:d8:53:1b:79:51:d6:
08:00:a4:6b:77:55:4d:ae:e6:14:fb:5e:9f:4e:74:
22:27:94:6e:64:69:c7:a9:a5:7a:8c:e7:44:a6:cf:
e4:e4:02:bc:09:7f:a6:c3:04:83:09:fd:5f:4f:f4:
ec:2f:6a:fd:82:17:33:42:5e:b9:d6:dc:f6:d2:dc:
6c:12:ca:08:e3:ba:48:97:da:bb:f5:ad:9e:f6:e6:
fe:75:d6:ee:70:15:6a:49:63:8b:27:b7:16:22:f5:
76:0e:16:b7:43:5b:e0:a9:0a:12:90:d8:54:8a:67:
85:ab:c4:98:f4:f2:c1:bc:41:d5:b9:be:ec:f4:12:
1c:7b:a6:77:5a:31:eb:6a:1a:f7:80:ef:35:97:03:
ed:94:5f:12:1d:9e:ca:5d:e0:90:10:16:af:2b:b4:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:A6:1C:52:8D:F7:B2:9F:AB:19:A5:4F:80:90:B3:1F:8F:E0:DE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D4mmHFKN97KfqxmlT4CQsx-P4N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b105:120::/47
Signature Algorithm: sha256WithRSAEncryption
2b:84:ee:64:9e:b9:15:ea:9c:33:56:0e:03:c9:65:84:c9:c3:
f6:49:c9:8f:65:11:9a:bb:60:f4:c5:7c:dc:6b:22:02:8d:de:
f8:62:91:b1:2f:fb:fe:ec:55:7c:46:18:34:66:5b:f7:d6:9e:
9d:7d:e3:e1:dc:91:9a:a7:97:03:9f:c3:b7:c5:12:c3:38:bb:
f3:e0:f3:9c:d3:7c:b6:bd:e8:87:5d:5d:f5:f2:6e:21:c5:a5:
a4:a8:f3:f8:a6:2c:08:b8:99:ef:f2:fc:01:dc:5f:06:99:93:
86:d9:f5:6d:11:6d:a1:41:03:52:41:7b:32:f6:75:9e:79:15:
7e:1b:48:f7:34:2e:84:76:ee:9f:ab:57:bc:12:25:ba:62:b1:
a8:7b:dd:9a:9e:99:57:8f:98:3c:24:af:25:88:df:2a:2d:f7:
9b:11:06:a1:a8:f6:7c:0f:5e:6f:c0:ce:44:5b:93:01:d9:c9:
d8:b5:12:1f:4c:5b:86:97:79:ca:46:50:4c:c2:36:e1:a4:f6:
00:1a:ee:b2:f9:d6:d2:94:9a:f1:c3:9f:ae:96:ed:66:32:90:
32:fe:f0:93:1b:df:82:e4:21:d3:e1:38:02:67:89:15:7e:7a:
38:93:23:d4:cc:34:05:e5:78:91:7c:44:86:d1:48:91:cb:26:
d7:a3:42:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYYrLAROKZZBoa6m1ReSpgorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMjA3MDkxOTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjg5YTYxYzUyOGRmN2IyOWZhYjE5YTU0ZjgwOTBiMzFmOGZlMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkECACskwbI6KOQDeZMCmLAGieoTq
+vMu0h/9/WmabzmFBq9T6y7gbgbu7FzZnt/jWEwz1R4UvTXsaBE9JbryUNfGbojY
CZxwIeQmmDGJWsTSClYFlSWI7qQSxdekqTdacRTYUxt5UdYIAKRrd1VNruYU+16f
TnQiJ5RuZGnHqaV6jOdEps/k5AK8CX+mwwSDCf1fT/TsL2r9ghczQl651tz20txs
EsoI47pIl9q79a2e9ub+ddbucBVqSWOLJ7cWIvV2Dha3Q1vgqQoSkNhUimeFq8SY
9PLBvEHVub7s9BIce6Z3WjHrahr3gO81lwPtlF8SHZ7KXeCQEBavK7S1zQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA+JphxSjfeyn6sZpU+AkLMfj+DeMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRDRtbUhGS045N0tmcXhtbFQ0Q1FzeC1QNE40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6xBQEg
MA0GCSqGSIb3DQEBCwUAA4IBAQArhO5knrkV6pwzVg4DyWWEycP2ScmPZRGau2D0
xXzcayICjd74YpGxL/v+7FV8Rhg0Zlv31p6dfePh3JGap5cDn8O3xRLDOLvz4POc
03y2veiHXV318m4hxaWkqPP4piwIuJnv8vwB3F8GmZOG2fVtEW2hQQNSQXsy9nWe
eRV+G0j3NC6Edu6fq1e8EiW6YrGoe92anplXj5g8JK8liN8qLfebEQahqPZ8D15v
wM5EW5MB2cnYtRIfTFuGl3nKRlBMwjbhpPYAGu6y+dbSlJrxw5+ulu1mMpAy/vCT
G9+C5CHT4TgCZ4kVfno4kyPUzDQF5XiRfESG0UiRyybXo0Ju
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org