Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdEZyvzUVazHVcwlgx-kEccc8iw.roa
File: EdEZyvzUVazHVcwlgx-kEccc8iw.roa (raw, json)
Hash identifier: M8a5X81BgLYF9m824Lziqk59eq5Y3EUtmYSM9/fb3e8=
Subject key identifier: 11:D1:19:CA:FC:D4:55:AC:C7:55:CC:25:83:1F:A4:11:C7:1C:F2:2C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185824F25471E65C04CE30FC8C5339B008A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdEZyvzUVazHVcwlgx-kEccc8iw.roa
Signing time: Thu 05 Jan 2023 14:21:43 +0000
ROA not before: Thu 05 Jan 2023 14:21:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211665
IP address blocks: 2a10:cc40:120::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:4f:25:47:1e:65:c0:4c:e3:0f:c8:c5:33:9b:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 5 14:21:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d119cafcd455acc755cc25831fa411c71cf22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:39:72:dd:a7:ac:47:2b:df:e9:25:16:57:
1b:59:cb:de:54:d4:e2:a2:f8:58:b8:82:39:76:eb:
93:be:24:f1:49:01:67:53:19:74:54:0f:6d:fa:0d:
1a:ea:2a:db:2c:39:e7:20:01:c8:8c:9f:8e:a4:25:
fe:e4:d7:a2:0f:dc:c0:1e:e0:e4:6c:bd:bd:4e:49:
38:4d:e7:a6:62:85:46:85:81:25:d0:27:b2:94:e2:
2a:d1:9b:9f:a6:5e:b8:f0:76:a1:1d:ec:d8:95:36:
f5:14:d1:0f:4c:30:2c:4d:23:14:38:61:c5:af:9f:
44:25:cb:ad:b8:9b:88:e9:76:31:6b:69:af:50:b2:
e9:79:aa:d0:40:eb:8c:b5:88:13:6c:e2:a4:41:84:
f4:14:29:e6:1d:97:97:81:83:70:19:7c:2c:58:50:
73:b7:e7:95:65:a4:eb:7a:af:f9:be:d4:a3:ce:10:
df:95:3c:c6:bd:cd:d7:df:24:c9:1f:b9:5e:4c:44:
ef:5e:4c:7e:88:56:a5:87:1e:81:80:bd:eb:b8:d4:
c5:ac:45:69:5f:e5:79:9e:5e:3c:f4:07:53:07:50:
25:14:4a:cd:67:27:ef:92:7f:82:83:3f:10:08:96:
a4:aa:99:99:4b:7e:12:64:c0:0f:65:88:3f:b0:33:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:19:CA:FC:D4:55:AC:C7:55:CC:25:83:1F:A4:11:C7:1C:F2:2C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdEZyvzUVazHVcwlgx-kEccc8iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:120::/44
Signature Algorithm: sha256WithRSAEncryption
40:de:44:69:ed:11:de:c6:81:03:0e:3b:52:ac:59:b4:65:5f:
fb:eb:d0:d5:f6:c2:53:7f:04:a1:fb:9a:81:15:7d:34:38:ff:
cd:60:b1:09:7d:8d:6a:45:01:c9:60:fa:41:17:c5:32:3d:b1:
fc:33:b6:e3:17:00:92:6b:a4:d5:32:02:be:e3:a8:1d:3c:0b:
80:0a:7e:d2:2f:8c:63:f8:61:dc:27:be:5d:2b:a2:df:36:20:
7c:21:8b:a8:5a:01:3b:1f:7c:79:4c:17:86:23:b3:28:9b:ac:
2e:30:6d:9e:49:27:ae:04:4f:07:e9:d7:e8:56:d1:5a:f0:51:
37:bc:e5:5c:b7:6b:df:8c:58:78:4b:a9:ea:bb:9e:61:7c:07:
7c:0d:35:fb:e8:b7:26:99:03:db:35:3b:5b:4e:d8:1f:1f:22:
6d:bb:5d:43:6a:f5:cd:69:eb:09:cb:85:95:67:a7:2b:32:65:
da:fc:2f:42:53:ab:06:b3:76:d2:81:26:c4:f9:d2:77:a5:51:
5c:da:86:37:73:de:4c:a3:38:16:df:a5:4a:7f:2f:11:54:47:
c0:20:11:62:eb:36:4e:0e:d9:09:a2:16:ba:dd:a3:d8:36:a4:
e5:c8:2f:6b:79:3b:b2:2c:42:a8:dc:0e:cf:2d:e3:17:c2:93:
7c:b3:b1:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYWCTyVHHmXATOMPyMUzmwCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTA1MTQyMTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQxMTljYWZjZDQ1NWFjYzc1NWNjMjU4MzFmYTQxMWM3MWNmMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd85ct2nrEcr3+klFlcbWcveVNTi
ovhYuII5duuTviTxSQFnUxl0VA9t+g0a6irbLDnnIAHIjJ+OpCX+5NeiD9zAHuDk
bL29Tkk4TeemYoVGhYEl0CeylOIq0Zufpl648HahHezYlTb1FNEPTDAsTSMUOGHF
r59EJcutuJuI6XYxa2mvULLpearQQOuMtYgTbOKkQYT0FCnmHZeXgYNwGXwsWFBz
t+eVZaTreq/5vtSjzhDflTzGvc3X3yTJH7leTETvXkx+iFalhx6BgL3ruNTFrEVp
X+V5nl489AdTB1AlFErNZyfvkn+Cgz8QCJakqpmZS34SZMAPZYg/sDNjMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBHRGcr81FWsx1XMJYMfpBHHHPIsMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRWRFWnl2elVWYXpIVmN3bGd4LWtFY2NjOGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAEg
MA0GCSqGSIb3DQEBCwUAA4IBAQBA3kRp7RHexoEDDjtSrFm0ZV/769DV9sJTfwSh
+5qBFX00OP/NYLEJfY1qRQHJYPpBF8UyPbH8M7bjFwCSa6TVMgK+46gdPAuACn7S
L4xj+GHcJ75dK6LfNiB8IYuoWgE7H3x5TBeGI7Mom6wuMG2eSSeuBE8H6dfoVtFa
8FE3vOVct2vfjFh4S6nqu55hfAd8DTX76LcmmQPbNTtbTtgfHyJtu11DavXNaesJ
y4WVZ6crMmXa/C9CU6sGs3bSgSbE+dJ3pVFc2oY3c95MozgW36VKfy8RVEfAIBFi
6zZODtkJoha63aPYNqTlyC9reTuyLEKo3A7PLeMXwpN8s7Hd
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org