Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E7V11BqhSUxIIGpkpKMEa4jkmUs.roa
File: E7V11BqhSUxIIGpkpKMEa4jkmUs.roa (raw, json)
Hash identifier: iUJO0kuJ1OD3XHwBY2uu36SJVbKmznXPVYvOw1Z+JiU=
Subject key identifier: 13:B5:75:D4:1A:A1:49:4C:48:20:6A:64:A4:A3:04:6B:88:E4:99:4B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CADA28647FCFDA6DEAF619199297CDCE2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E7V11BqhSUxIIGpkpKMEa4jkmUs.roa
Signing time: Wed 27 Dec 2023 23:35:58 +0000
ROA not before: Wed 27 Dec 2023 23:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:97c0:5d0::/44 maxlen: 48
2a0e:b107:279d::/48 maxlen: 48
2a0e:b107:279a::/48 maxlen: 48
2a0e:b107:278a::/48 maxlen: 48
2a0e:b107:279f::/48 maxlen: 48
2a0e:97c1::/40 maxlen: 48
2a0e:b107:2691::/48 maxlen: 48
2a0e:b107:2799::/48 maxlen: 48
2a0e:b107:279e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:a2:86:47:fc:fd:a6:de:af:61:91:99:29:7c:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 27 23:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b575d41aa1494c48206a64a4a3046b88e4994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:20:15:ed:5e:63:17:2f:f1:25:61:87:da:
8f:d6:e7:a8:9e:a5:47:6d:36:a0:5b:35:d6:eb:60:
66:63:61:1a:d1:d9:28:30:99:f6:47:29:6d:73:4d:
b4:63:ce:73:70:77:5b:5b:ae:42:e7:31:f6:7f:e6:
05:de:97:46:1f:4a:3b:9a:94:0a:d1:75:c0:a4:11:
0f:40:a9:44:0e:79:a6:2d:b2:af:a1:94:87:87:ef:
16:ad:fe:e4:23:f2:d8:bc:28:e3:c4:57:a4:50:77:
91:78:9e:6a:1b:03:85:30:73:da:89:33:77:7d:61:
51:63:6c:4f:98:6d:79:80:fe:b8:b8:89:6c:4c:3a:
ee:1c:c0:dc:b2:bd:0a:d8:e3:47:a6:20:4a:0c:7d:
88:f8:f1:32:76:1d:6f:dd:79:a2:31:e2:00:d2:60:
b4:94:d0:b7:8f:37:ae:9e:dd:e4:6e:45:cc:32:e0:
5b:25:89:43:50:fd:b8:fc:c1:1e:37:bf:95:21:b8:
0d:0c:5f:de:90:a4:45:5c:a9:22:ca:d8:52:09:3a:
ab:28:3a:39:58:d5:b6:21:49:0b:4b:02:5c:52:93:
48:1c:04:eb:02:06:50:f0:4f:69:1d:ef:c3:47:62:
4c:36:ed:67:70:5e:1b:46:10:e8:48:fa:86:c5:d6:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:75:D4:1A:A1:49:4C:48:20:6A:64:A4:A3:04:6B:88:E4:99:4B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E7V11BqhSUxIIGpkpKMEa4jkmUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5d0::/44
2a0e:97c1::/40
2a0e:b107:2691::/48
2a0e:b107:278a::/48
2a0e:b107:2799::-2a0e:b107:279a:ffff:ffff:ffff:ffff:ffff
2a0e:b107:279d::-2a0e:b107:279f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:98:3e:4a:c1:13:6b:8f:1f:be:e7:16:dd:21:1a:f9:0b:e5:
7a:51:90:75:b2:2d:55:69:e4:96:e2:cf:77:cc:91:b8:57:ae:
0f:08:6c:8c:ef:f8:62:5e:e6:5b:22:53:ab:fb:0c:90:1a:2d:
ba:39:3f:a2:98:6f:72:19:05:54:6f:5c:7f:9a:4a:04:2b:33:
8c:15:8d:32:b3:8e:c2:d6:9c:f2:12:b3:6c:8f:ab:eb:89:8e:
38:08:08:1d:4e:ac:71:d8:e2:4a:a5:13:f8:cf:93:b5:47:15:
2e:80:c8:cd:15:6c:61:5b:c5:6c:49:e1:cf:d6:79:22:e7:2a:
6e:47:73:9e:89:e9:37:f5:d2:ce:16:df:d4:1a:5b:56:d6:6c:
26:8d:4d:4a:28:41:80:d9:c1:f2:0b:e5:ce:bf:a4:6a:fc:57:
86:28:4a:c0:9e:25:19:f4:55:69:00:fd:aa:61:35:94:51:fe:
1b:07:c1:bc:98:03:87:aa:1a:ad:51:cd:70:57:c2:8c:be:44:
83:55:92:fe:ef:55:01:e9:08:1b:92:b2:f6:d6:d2:9d:30:e9:
ca:45:a7:00:21:22:2c:18:54:ce:06:17:ca:42:af:8d:b3:36:
54:53:77:00:d8:a7:2d:c4:46:e1:e8:2c:90:78:3b:f3:66:da:
3d:88:85:89
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYytooZH/P2m3q9hkZkpfNziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMjI3MjMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2I1NzVkNDFhYTE0OTRjNDgyMDZhNjRhNGEzMDQ2Yjg4ZTQ5OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnYgFe1eYxcv8SVhh9qP1ueonqVH
bTagWzXW62BmY2Ea0dkoMJn2Ryltc020Y85zcHdbW65C5zH2f+YF3pdGH0o7mpQK
0XXApBEPQKlEDnmmLbKvoZSHh+8Wrf7kI/LYvCjjxFekUHeReJ5qGwOFMHPaiTN3
fWFRY2xPmG15gP64uIlsTDruHMDcsr0K2ONHpiBKDH2I+PEydh1v3XmiMeIA0mC0
lNC3jzeunt3kbkXMMuBbJYlDUP24/MEeN7+VIbgNDF/ekKRFXKkiythSCTqrKDo5
WNW2IUkLSwJcUpNIHATrAgZQ8E9pHe/DR2JMNu1ncF4bRhDoSPqGxdYYowIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFBO1ddQaoUlMSCBqZKSjBGuI5JlLMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRTdWMTFCcWhTVXhJSUdwa3BLTUVhNGprbVVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBRBAIAAjBLAwcEKg6XwAXQ
AwYAKg6XwQADBwAqDrEHJpEDBwAqDrEHJ4owEgMHACoOsQcnmQMHACoOsQcnmjAS
AwcAKg6xByedAwcFKg6xByeAMA0GCSqGSIb3DQEBCwUAA4IBAQCXmD5KwRNrjx++
5xbdIRr5C+V6UZB1si1VaeSW4s93zJG4V64PCGyM7/hiXuZbIlOr+wyQGi26OT+i
mG9yGQVUb1x/mkoEKzOMFY0ys47C1pzyErNsj6vriY44CAgdTqxx2OJKpRP4z5O1
RxUugMjNFWxhW8VsSeHP1nki5ypuR3Oeiek39dLOFt/UGltW1mwmjU1KKEGA2cHy
C+XOv6Rq/FeGKErAniUZ9FVpAP2qYTWUUf4bB8G8mAOHqhqtUc1wV8KMvkSDVZL+
71UB6QgbkrL21tKdMOnKRacAISIsGFTOBhfKQq+NszZUU3cA2KctxEbh6CyQeDvz
Zto9iIWJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org