Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eh6mMUDSsft5QH2LoR_HLAZc3Fc.roa
File: Eh6mMUDSsft5QH2LoR_HLAZc3Fc.roa (raw, json)
Hash identifier: MeDBNNQD1HzpMXMOHDwKvGRS2kGWK7XQOWkV2n44g+w=
Subject key identifier: 12:1E:A6:31:40:D2:B1:FB:79:40:7D:8B:A1:1F:C7:2C:06:5C:DC:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189C0D354A5DECD5B9368B14497D161EC35
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eh6mMUDSsft5QH2LoR_HLAZc3Fc.roa
Signing time: Fri 04 Aug 2023 13:53:42 +0000
ROA not before: Fri 04 Aug 2023 13:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212948
IP address blocks: 2a0e:b107:27a0::/45 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:d3:54:a5:de:cd:5b:93:68:b1:44:97:d1:61:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 4 13:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=121ea63140d2b1fb79407d8ba11fc72c065cdc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:7f:02:f6:95:db:b6:ab:f7:f0:03:9c:5e:
fa:4f:88:90:64:f2:d3:b1:0b:20:cf:63:cc:c0:64:
07:98:b5:a4:ca:7b:6b:bf:2b:db:ef:b5:a8:cc:4b:
b2:89:c4:a3:c9:af:f5:5b:9f:54:fe:51:1d:c8:d6:
1a:06:8a:cc:cd:81:55:29:9c:ba:6a:35:cd:2f:29:
d0:ae:2e:93:ba:03:9b:4e:76:01:d9:88:2d:e7:dc:
99:97:43:7a:3b:92:a6:c0:cb:59:46:e9:df:d0:fc:
34:05:ce:56:5b:da:1d:be:56:8b:db:e0:43:5a:cf:
4e:20:88:ee:20:09:ee:3e:e7:d7:c4:ba:0e:b0:8e:
c9:9e:ec:2a:ab:bf:41:13:b7:44:67:5e:53:f8:40:
51:57:45:d9:53:5f:42:0b:4b:2d:70:1b:dc:64:cc:
6a:03:95:a6:d3:62:19:2e:5c:3e:aa:60:33:4f:c9:
f4:fb:55:de:5a:5b:1b:5b:45:af:3f:97:ca:fa:03:
32:2a:38:4a:2b:9e:83:88:3e:de:f8:a1:33:6b:cd:
84:90:26:a9:5c:7c:d3:2d:24:fa:cd:50:7b:65:f2:
52:8a:d6:68:75:06:9a:48:fe:75:bd:b0:60:0d:a6:
15:82:49:95:31:07:69:73:6a:6c:d9:0d:29:c8:af:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:A6:31:40:D2:B1:FB:79:40:7D:8B:A1:1F:C7:2C:06:5C:DC:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Eh6mMUDSsft5QH2LoR_HLAZc3Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27a0::/45
Signature Algorithm: sha256WithRSAEncryption
3b:03:3d:14:eb:ec:3c:ae:ef:2a:a0:08:86:b9:dc:a5:04:0c:
89:a6:28:85:b1:ef:07:b6:a2:f0:55:57:cc:cb:27:cf:4a:02:
34:85:48:67:41:a7:8b:ea:26:b9:2a:70:db:ad:54:05:56:96:
dc:2c:6b:25:20:a2:69:31:ad:4a:6e:a7:fc:28:21:bd:64:5b:
2f:16:80:71:fc:bb:3b:45:e2:9b:c0:d0:c0:91:72:c2:88:a6:
17:78:bd:1b:bd:38:4c:b9:a5:c9:82:31:70:3c:3d:1e:ce:97:
51:7c:94:f7:ce:2c:61:16:91:7e:0e:3d:da:c1:22:a0:a9:50:
0c:3c:b0:b8:68:fe:ce:36:ba:20:53:ac:e0:04:99:a2:89:08:
3d:8c:83:bb:10:cc:86:15:eb:17:e7:ab:bc:d3:19:12:18:02:
88:9e:1a:1d:78:08:40:4e:8c:48:fa:88:5f:ab:f3:a8:5e:83:
c8:c9:0c:89:13:2a:16:f7:4b:d4:8b:e3:6d:e2:60:65:f1:58:
f1:3b:a3:03:d1:90:eb:f5:cd:3f:32:ff:24:f1:9f:3b:4c:67:
20:a1:23:1f:57:db:f3:ee:19:9a:4c:b5:b9:b8:68:70:22:49:
3e:e6:e4:fd:dd:d4:85:e1:b0:e1:c7:92:4b:78:b8:44:63:67:
d3:94:b5:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYnA01Sl3s1bk2ixRJfRYew1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODA0MTM1MzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjFlYTYzMTQwZDJiMWZiNzk0MDdkOGJhMTFmYzcyYzA2NWNkYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1p/AvaV27ar9/ADnF76T4iQZPLT
sQsgz2PMwGQHmLWkyntrvyvb77WozEuyicSjya/1W59U/lEdyNYaBorMzYFVKZy6
ajXNLynQri6TugObTnYB2Ygt59yZl0N6O5KmwMtZRunf0Pw0Bc5WW9odvlaL2+BD
Ws9OIIjuIAnuPufXxLoOsI7Jnuwqq79BE7dEZ15T+EBRV0XZU19CC0stcBvcZMxq
A5Wm02IZLlw+qmAzT8n0+1XeWlsbW0WvP5fK+gMyKjhKK56DiD7e+KEza82EkCap
XHzTLST6zVB7ZfJSitZodQaaSP51vbBgDaYVgkmVMQdpc2ps2Q0pyK+ZkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBIepjFA0rH7eUB9i6EfxywGXNxXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRWg2bU1VRFNzZnQ1UUgyTG9SX0hMQVpjM0ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByeg
MA0GCSqGSIb3DQEBCwUAA4IBAQA7Az0U6+w8ru8qoAiGudylBAyJpiiFse8HtqLw
VVfMyyfPSgI0hUhnQaeL6ia5KnDbrVQFVpbcLGslIKJpMa1Kbqf8KCG9ZFsvFoBx
/Ls7ReKbwNDAkXLCiKYXeL0bvThMuaXJgjFwPD0ezpdRfJT3zixhFpF+Dj3awSKg
qVAMPLC4aP7ONrogU6zgBJmiiQg9jIO7EMyGFesX56u80xkSGAKInhodeAhAToxI
+ohfq/OoXoPIyQyJEyoW90vUi+Nt4mBl8VjxO6MD0ZDr9c0/Mv8k8Z87TGcgoSMf
V9vz7hmaTLW5uGhwIkk+5uT93dSF4bDhx5JLeLhEY2fTlLXh
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org