Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DifOzAo4jtZYTFPE7_ubokk8Z2g.roa
File: DifOzAo4jtZYTFPE7_ubokk8Z2g.roa (raw, json)
Hash identifier: OQQvov6V5pSqjOQ0PJcK7ysBaP1l1i2l+WnXn7Uh1Io=
Subject key identifier: 0E:27:CE:CC:0A:38:8E:D6:58:4C:53:C4:EF:FB:9B:A2:49:3C:67:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E77AD8C69C30480A90F675993FDB07
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DifOzAo4jtZYTFPE7_ubokk8Z2g.roa
Signing time: Mon 02 Jan 2023 05:14:56 +0000
ROA not before: Mon 02 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39526
IP address blocks: 2a10:2f01:380::/42 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:7a:d8:c6:9c:30:48:0a:90:f6:75:99:3f:db:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e27cecc0a388ed6584c53c4effb9ba2493c6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:12:88:f2:c5:62:31:c5:5d:8d:b7:4d:8a:
e1:c3:d9:11:51:eb:5f:e9:74:cc:c5:3a:0e:65:20:
52:ac:69:22:a1:aa:f7:75:20:30:a5:72:14:a3:4f:
51:48:35:6e:d2:79:04:82:1e:4f:dd:c0:08:58:2d:
dd:e5:5c:f6:de:1c:9c:cf:eb:13:cb:a7:3c:71:78:
82:94:c4:11:1b:1f:3d:62:22:0f:7c:ea:be:08:68:
49:8f:62:2c:6c:23:e5:cc:fa:cd:7a:32:a7:64:d0:
d0:11:da:53:4d:29:3a:38:25:9e:04:d8:f6:bd:9c:
36:75:92:70:4b:ce:c0:60:33:bb:f1:c0:ad:40:22:
48:27:2a:53:9a:b1:91:27:33:bc:be:a8:ae:d3:ea:
df:75:8b:e4:54:de:de:de:7b:05:ed:b1:d6:bb:c6:
29:1f:bc:fb:8a:85:6c:90:0e:45:b4:d2:ca:40:06:
5a:59:c2:ce:32:a8:57:f7:56:78:b2:d3:07:23:58:
b0:a7:08:90:e3:23:e4:15:1c:ea:9c:fa:47:0c:2c:
29:b1:77:bd:f9:40:a4:44:35:a1:78:63:a2:e1:ef:
f3:ef:8e:76:fb:73:73:cb:af:ab:45:67:8e:f8:93:
fb:a8:ff:14:f1:ee:27:91:dd:1a:31:44:36:57:2b:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:CE:CC:0A:38:8E:D6:58:4C:53:C4:EF:FB:9B:A2:49:3C:67:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DifOzAo4jtZYTFPE7_ubokk8Z2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:380::/42
Signature Algorithm: sha256WithRSAEncryption
2e:5e:81:33:1b:bc:4a:ca:d3:1d:c1:e6:15:dc:c7:9c:ef:01:
c7:8c:5a:80:3f:dc:ab:58:4c:d3:df:ed:1f:85:d8:13:48:3e:
b5:89:ce:c2:21:59:18:b7:32:47:94:20:4e:81:8c:7c:4c:00:
ea:b8:f4:68:48:13:cd:57:68:7c:f7:38:35:de:5c:9a:61:1c:
1a:01:d8:d1:03:8d:84:fc:25:be:f3:a2:87:8e:ce:e3:46:a4:
38:b2:1e:2c:31:6c:cd:d8:0c:6b:ad:5c:a3:ea:ba:4b:77:66:
6d:fa:c7:12:84:d3:bf:24:fd:32:cf:0a:f7:83:65:55:f9:17:
20:b3:39:a4:46:46:a3:8b:62:8d:68:34:62:3c:99:e2:9a:0e:
02:38:6b:48:e2:d5:41:52:1c:67:7c:9d:f1:6e:1c:01:09:ea:
6d:fb:5b:63:4e:43:75:58:bd:b1:07:2c:0e:1b:71:87:51:11:
d3:dd:9a:c6:9e:84:a7:7f:f2:7c:7f:1c:62:e9:6d:85:a4:a0:
1f:a4:24:97:bc:3a:13:84:14:bf:65:c5:8f:5f:28:91:e1:ff:
5c:38:d2:a4:02:f8:e5:3c:ba:02:42:93:9d:9e:f1:f1:e7:92:
5d:60:8d:65:f7:40:52:6f:18:40:33:3b:25:ba:a1:87:56:a9:
38:6f:3f:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw53rYxpwwSAqQ9nWZP9sHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTI3Y2VjYzBhMzg4ZWQ2NTg0YzUzYzRlZmZiOWJhMjQ5M2M2NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5cSiPLFYjHFXY23TYrhw9kRUetf
6XTMxToOZSBSrGkioar3dSAwpXIUo09RSDVu0nkEgh5P3cAIWC3d5Vz23hycz+sT
y6c8cXiClMQRGx89YiIPfOq+CGhJj2IsbCPlzPrNejKnZNDQEdpTTSk6OCWeBNj2
vZw2dZJwS87AYDO78cCtQCJIJypTmrGRJzO8vqiu0+rfdYvkVN7e3nsF7bHWu8Yp
H7z7ioVskA5FtNLKQAZaWcLOMqhX91Z4stMHI1iwpwiQ4yPkFRzqnPpHDCwpsXe9
+UCkRDWheGOi4e/z7452+3Nzy6+rRWeO+JP7qP8U8e4nkd0aMUQ2VysU7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA4nzswKOI7WWExTxO/7m6JJPGdoMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRGlmT3pBbzRqdFpZVEZQRTdfdWJva2s4WjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKhAvAQOA
MA0GCSqGSIb3DQEBCwUAA4IBAQAuXoEzG7xKytMdweYV3Mec7wHHjFqAP9yrWEzT
3+0fhdgTSD61ic7CIVkYtzJHlCBOgYx8TADquPRoSBPNV2h89zg13lyaYRwaAdjR
A42E/CW+86KHjs7jRqQ4sh4sMWzN2AxrrVyj6rpLd2Zt+scShNO/JP0yzwr3g2VV
+RcgszmkRkaji2KNaDRiPJnimg4COGtI4tVBUhxnfJ3xbhwBCept+1tjTkN1WL2x
BywOG3GHURHT3ZrGnoSnf/J8fxxi6W2FpKAfpCSXvDoThBS/ZcWPXyiR4f9cONKk
AvjlPLoCQpOdnvHx55JdYI1l90BSbxhAMzsluqGHVqk4bz/6
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org