Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F92_EvFW7oEgvAbO-8oD4N0I9AE.roa
File: F92_EvFW7oEgvAbO-8oD4N0I9AE.roa (raw, json)
Hash identifier: mHsSzWnSbFG7M7MtuBg3jJAG44t9MDaoGuGzSiMdxo4=
Subject key identifier: 17:DD:BF:12:F1:56:EE:81:20:BC:06:CE:FB:CA:03:E0:DD:08:F4:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCDB2AF8D67D54597CD42B2402620E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F92_EvFW7oEgvAbO-8oD4N0I9AE.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138211
IP address blocks: 2a0e:b107:6d0::/44 maxlen: 48
2a0e:b107:580::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 16:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:db:2a:f8:d6:7d:54:59:7c:d4:2b:24:02:62:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ddbf12f156ee8120bc06cefbca03e0dd08f401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:3f:3d:36:c8:ba:c5:2f:f6:e6:1a:f0:05:
80:12:f3:70:39:fa:11:79:ef:93:49:0a:ff:ee:e8:
f0:ee:09:0d:1f:a3:2f:2d:21:81:d9:61:54:87:86:
7a:07:27:31:d5:d6:e9:94:fc:40:c9:95:4b:77:b8:
cf:42:8d:52:f0:c9:60:da:89:08:ef:5e:c6:68:a6:
7f:65:87:49:7c:ad:7d:13:3a:75:51:df:e9:c1:39:
26:c3:3c:ab:48:f3:6d:34:19:e0:d3:55:9e:1f:7e:
79:4c:a7:e5:8a:95:be:8d:45:3e:08:9e:37:43:96:
6d:1c:a5:b9:69:9c:5c:ba:24:2f:ee:58:6c:cc:88:
ba:1d:52:91:1c:12:49:3b:77:d0:b7:1b:cb:9b:08:
9a:9b:c1:10:d0:30:96:fd:04:92:df:32:94:21:09:
b6:f5:44:27:f4:f0:3c:0e:2c:4a:a1:9e:d3:30:cd:
3c:35:b4:2f:55:7d:09:94:72:55:c4:3d:c4:ae:c4:
6e:4a:75:64:69:ec:a3:1c:2b:0f:87:10:03:b0:72:
1e:53:10:93:e8:c6:14:f1:bc:fd:e6:ad:7c:07:7e:
3f:84:61:c6:9c:84:be:cd:d5:e6:e7:d6:ea:4b:8b:
71:41:5e:53:a8:37:e1:19:27:fc:40:78:9e:54:0d:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DD:BF:12:F1:56:EE:81:20:BC:06:CE:FB:CA:03:E0:DD:08:F4:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F92_EvFW7oEgvAbO-8oD4N0I9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:580::/44
2a0e:b107:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
c4:cf:e3:5d:ed:a2:86:2f:8d:c9:6a:3b:38:f5:67:f2:a9:cb:
78:da:85:50:ae:78:17:fe:52:c3:8f:c1:7b:f0:82:2b:70:ca:
9c:c5:fc:52:83:21:de:e3:70:55:fa:6c:06:1a:ea:09:98:aa:
0a:e0:13:38:3d:02:c6:6c:a6:80:09:bd:8b:f9:78:d2:06:6c:
62:ce:ab:c9:3e:e4:83:61:18:54:7e:57:e0:97:ca:5d:d2:2c:
48:09:72:52:0f:6f:d6:05:b7:18:09:5e:10:c4:d0:8e:3a:d7:
b4:c5:a3:92:12:ad:e2:41:08:63:d2:a7:c9:56:3d:3d:c3:83:
5f:d7:bd:6c:82:f7:d8:ac:29:af:d1:26:81:c8:a4:36:f1:74:
37:19:b2:20:8f:63:95:02:96:70:ea:e3:26:8c:81:a6:59:9b:
97:b9:82:4c:de:71:98:57:08:e8:7d:ed:20:3a:53:09:83:2b:
11:3b:74:7e:38:ed:97:1c:28:c8:52:40:f5:94:94:9b:dd:51:
2d:cf:88:c0:cf:5f:fd:60:2b:49:1e:9c:27:bf:87:93:98:12:
79:21:12:09:30:67:d3:b8:56:b9:fb:aa:32:cd:41:4a:e7:d1:
54:1d:70:05:27:d6:9e:df:5a:5f:e8:1d:76:58:d8:d3:b5:f9:
19:55:98:c3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJvNsq+NZ9VFl81CskAmIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2RkYmYxMmYxNTZlZTgxMjBiYzA2Y2VmYmNhMDNlMGRkMDhmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm0/PTbIusUv9uYa8AWAEvNwOfoR
ee+TSQr/7ujw7gkNH6MvLSGB2WFUh4Z6Bycx1dbplPxAyZVLd7jPQo1S8Mlg2okI
717GaKZ/ZYdJfK19Ezp1Ud/pwTkmwzyrSPNtNBng01WeH355TKflipW+jUU+CJ43
Q5ZtHKW5aZxcuiQv7lhszIi6HVKRHBJJO3fQtxvLmwiam8EQ0DCW/QSS3zKUIQm2
9UQn9PA8DixKoZ7TMM08NbQvVX0JlHJVxD3ErsRuSnVkaeyjHCsPhxADsHIeUxCT
6MYU8bz95q18B34/hGHGnIS+zdXm59bqS4txQV5TqDfhGSf8QHieVA22DQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBfdvxLxVu6BILwGzvvKA+DdCPQBMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRjkyX0V2Rlc3b0VndkFiTy04b0Q0TjBJOUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBwWA
AwcEKg6xBwbQMA0GCSqGSIb3DQEBCwUAA4IBAQDEz+Nd7aKGL43Jajs49Wfyqct4
2oVQrngX/lLDj8F78IIrcMqcxfxSgyHe43BV+mwGGuoJmKoK4BM4PQLGbKaACb2L
+XjSBmxizqvJPuSDYRhUflfgl8pd0ixICXJSD2/WBbcYCV4QxNCOOte0xaOSEq3i
QQhj0qfJVj09w4Nf171sgvfYrCmv0SaByKQ28XQ3GbIgj2OVApZw6uMmjIGmWZuX
uYJM3nGYVwjofe0gOlMJgysRO3R+OO2XHCjIUkD1lJSb3VEtz4jAz1/9YCtJHpwn
v4eTmBJ5IRIJMGfTuFa5+6oyzUFK59FUHXAFJ9ae31pf6B12WNjTtfkZVZjD
-----END CERTIFICATE-----
Generated at Sun Jan 14 17:31:00 2024 by rpki-client on console-fra.rpki-client.org