Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0ST67cgt7ygSouuSM9BfeNyiOs.roa
File: F0ST67cgt7ygSouuSM9BfeNyiOs.roa (raw, json)
Hash identifier: mBct2pzPy+TQ4Rels4yhq1fQAis82PivptYqsC9N7TM=
Subject key identifier: 17:44:93:EB:B7:20:B7:BC:A0:4A:8B:AE:48:CF:41:7D:E3:72:88:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189EA151CCBA5801C3F05AFBAE3489E63F6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0ST67cgt7ygSouuSM9BfeNyiOs.roa
Signing time: Sat 12 Aug 2023 14:09:59 +0000
ROA not before: Sat 12 Aug 2023 14:09:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200516
IP address blocks: 2a0e:b107:f60::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:15:1c:cb:a5:80:1c:3f:05:af:ba:e3:48:9e:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 12 14:09:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174493ebb720b7bca04a8bae48cf417de37288eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:d1:41:87:02:f4:52:cd:ea:15:9d:fb:c9:
ce:fd:8f:b9:eb:35:64:97:20:11:8c:f9:56:a1:17:
56:28:ab:e8:84:c8:7e:fb:27:10:c5:7c:58:74:18:
56:2d:49:9d:0c:30:7a:1a:d7:de:89:42:30:c2:87:
86:20:32:ac:f0:46:11:ba:ae:a8:79:6e:01:48:32:
40:a8:b5:b5:d2:ca:e5:ac:15:fb:6a:53:48:6e:f0:
4c:f3:a7:89:3f:9d:d6:20:c1:2a:a1:be:8e:6a:0a:
59:1e:5c:52:2b:f3:74:0c:3f:b7:b1:ef:87:84:03:
84:f8:7f:4f:77:66:ec:96:89:cd:14:df:c4:96:d5:
e2:8a:1d:93:15:68:12:90:52:29:00:e8:df:e5:d4:
89:40:93:4b:db:74:88:2b:17:22:2d:7e:34:40:2b:
03:53:be:71:4c:dc:90:e2:8f:c1:4d:e3:44:62:7a:
54:82:fa:9d:21:53:6d:4b:d2:b9:f9:6d:c5:8d:ab:
76:c4:67:7f:42:bc:96:a2:fb:5b:f6:6b:31:29:d3:
fe:83:69:26:9a:26:01:00:e2:8e:71:e9:fc:10:eb:
57:a1:b2:0b:1f:3a:aa:ea:92:24:e9:c2:9c:48:83:
98:11:67:ea:b2:4a:f7:f0:a6:8b:ce:79:f8:33:9a:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:44:93:EB:B7:20:B7:BC:A0:4A:8B:AE:48:CF:41:7D:E3:72:88:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0ST67cgt7ygSouuSM9BfeNyiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f60::/44
Signature Algorithm: sha256WithRSAEncryption
0a:d1:88:d7:d4:60:f2:4c:6c:4f:4c:16:c4:8e:91:36:14:51:
2e:67:3a:7e:3a:10:27:a4:78:dd:de:72:7e:ee:e0:62:0c:71:
c7:3f:71:86:ae:7f:4d:a4:90:13:6e:68:9d:59:a8:4c:9f:e3:
c1:db:9e:46:c5:de:49:cb:d5:0c:b0:fa:7b:b7:69:a2:ef:a0:
31:27:9b:39:96:5b:f6:42:0e:a7:18:38:70:dd:71:1a:40:1c:
5d:d3:81:62:37:fe:2f:40:12:2f:b7:3a:65:62:e9:c5:ac:3d:
74:80:54:ca:2d:8e:b4:d4:99:b8:9d:16:aa:40:8b:bd:e0:48:
2d:df:a0:52:32:aa:a7:f0:79:5c:ac:94:02:b9:c1:c6:02:fb:
31:2a:7c:3c:92:ef:3c:f9:de:ec:cb:b8:5c:cf:3a:0b:6c:b7:
3a:06:53:fe:9f:af:17:b9:85:b2:4d:58:74:b6:10:a7:96:4d:
cb:14:03:5d:24:a5:f0:9c:40:e2:42:3d:98:d6:a6:a2:34:18:
e5:36:fc:12:22:d8:9b:57:01:30:0d:ca:3d:35:8e:80:d6:65:
db:a0:a5:57:8d:d5:cf:d3:f2:77:58:a8:4b:47:aa:65:ef:e2:
5f:ca:cd:55:d9:09:98:9d:bf:3d:58:67:74:7a:bb:73:2b:fa:
79:84:c1:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYnqFRzLpYAcPwWvuuNInmP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODEyMTQwOTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzQ0OTNlYmI3MjBiN2JjYTA0YThiYWU0OGNmNDE3ZGUzNzI4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG7RQYcC9FLN6hWd+8nO/Y+56zVk
lyARjPlWoRdWKKvohMh++ycQxXxYdBhWLUmdDDB6GtfeiUIwwoeGIDKs8EYRuq6o
eW4BSDJAqLW10srlrBX7alNIbvBM86eJP53WIMEqob6OagpZHlxSK/N0DD+3se+H
hAOE+H9Pd2bslonNFN/EltXiih2TFWgSkFIpAOjf5dSJQJNL23SIKxciLX40QCsD
U75xTNyQ4o/BTeNEYnpUgvqdIVNtS9K5+W3Fjat2xGd/QryWovtb9msxKdP+g2km
miYBAOKOcen8EOtXobILHzqq6pIk6cKcSIOYEWfqskr38KaLznn4M5rTFwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBdEk+u3ILe8oEqLrkjPQX3jcojrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRjBTVDY3Y2d0N3lnU291dVNNOUJmZU55aU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBw9g
MA0GCSqGSIb3DQEBCwUAA4IBAQAK0YjX1GDyTGxPTBbEjpE2FFEuZzp+OhAnpHjd
3nJ+7uBiDHHHP3GGrn9NpJATbmidWahMn+PB255Gxd5Jy9UMsPp7t2mi76AxJ5s5
llv2Qg6nGDhw3XEaQBxd04FiN/4vQBIvtzplYunFrD10gFTKLY601Jm4nRaqQIu9
4Egt36BSMqqn8HlcrJQCucHGAvsxKnw8ku88+d7sy7hczzoLbLc6BlP+n68XuYWy
TVh0thCnlk3LFANdJKXwnEDiQj2Y1qaiNBjlNvwSItibVwEwDco9NY6A1mXboKVX
jdXP0/J3WKhLR6pl7+Jfys1V2QmYnb89WGd0ertzK/p5hME/
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:49 2024 by rpki-client on console-ams.rpki-client.org