Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa
File: FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa (raw, json)
Hash identifier: PqLSqctFPNmref1bzW8hRTCQda01HGu2l+OQvkR6r24=
Subject key identifier: 16:90:71:74:64:23:59:18:CC:01:25:EA:90:6A:7B:A1:C5:31:46:E4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189231A454D58C25C6F5948CE3845CCE266
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa
Signing time: Tue 04 Jul 2023 22:51:11 +0000
ROA not before: Tue 04 Jul 2023 22:51:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61218
IP address blocks: 2a0e:97c0:4b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Jul 2023 11:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:23:1a:45:4d:58:c2:5c:6f:59:48:ce:38:45:cc:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 22:51:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1690717464235918cc0125ea906a7ba1c53146e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:5d:4f:0c:54:cc:ef:16:3a:ca:f0:0d:ed:
7a:35:85:45:05:14:c6:6e:7e:f7:28:77:48:2a:92:
29:91:b7:11:6f:22:56:5c:b6:51:90:0c:c4:a0:b7:
ff:55:50:d0:1e:9e:88:49:17:d9:f2:b0:17:63:f8:
c8:ea:19:52:af:12:25:17:89:ab:27:b4:10:6c:96:
7c:9b:c3:9c:a0:1f:23:b1:d6:ce:07:36:7c:3f:4e:
22:fb:24:a4:69:99:6d:35:e3:43:89:13:bb:fe:21:
e5:b8:7b:58:d3:38:65:df:6e:9c:36:f9:0d:2a:48:
93:f0:98:c1:86:25:8b:86:78:bf:be:9f:d4:67:35:
57:1a:86:65:02:1e:24:91:7f:17:ba:32:c9:4e:d9:
ff:a4:ff:44:0a:a8:86:31:c9:b1:07:ac:0a:bd:e3:
a7:84:78:4f:d4:cd:bf:36:4a:b5:cd:e4:1d:f5:36:
02:c1:d6:c1:8c:c5:1f:b0:68:3c:d3:75:04:da:b0:
55:2f:d9:15:f8:ac:65:ad:39:28:3c:7d:0f:6f:aa:
9d:a3:54:d7:53:98:3b:65:73:9e:dd:ff:b9:d2:8b:
87:b8:6c:41:82:3e:fd:5c:5a:18:0f:f4:45:0a:43:
ee:43:bc:0f:87:79:ac:50:6c:09:2d:66:65:b6:0e:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:71:74:64:23:59:18:CC:01:25:EA:90:6A:7B:A1:C5:31:46:E4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FpBxdGQjWRjMASXqkGp7ocUxRuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
2a:56:92:38:39:db:1c:e5:38:fb:fe:d1:76:68:15:41:fd:ed:
53:68:0c:5a:4e:f3:03:e1:9d:f8:27:0c:4e:5d:8a:6c:5c:7a:
17:95:36:d6:ad:b7:50:9b:c7:22:db:df:e4:45:07:ec:55:3c:
cf:de:19:87:14:a6:9c:18:7d:26:7e:66:dd:96:e8:6f:a1:16:
a3:68:d3:13:31:2b:d8:cf:e6:2d:84:a2:e6:c6:4a:c6:e3:18:
05:5f:8a:b1:7c:3e:e4:80:d8:5a:25:e3:54:77:cf:6a:79:fe:
37:72:0a:d7:9b:69:ae:19:39:76:bf:e3:7f:fe:71:10:01:f7:
a5:a2:86:b4:a9:7e:75:e0:9c:a1:c3:e0:e3:cf:c4:18:78:56:
9f:33:4a:cb:c1:e9:7d:b6:6c:61:ea:4f:82:4d:15:3d:34:f2:
3a:67:cf:19:f7:f1:1a:59:d9:76:95:ba:bc:69:ee:aa:10:61:
74:be:6a:c1:2d:62:88:11:a9:a1:39:73:9f:78:d4:28:46:05:
02:81:19:36:dd:0a:e4:cf:da:c0:ac:f0:98:92:a9:49:d5:ec:
17:43:ea:a2:1a:33:bb:55:d6:57:b2:2e:f6:99:e4:72:0a:e7:
96:4a:4e:fc:c1:16:c2:a4:9c:6f:37:76:17:d9:a5:9c:4a:68:
fe:95:27:b3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkjGkVNWMJcb1lIzjhFzOJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzA0MjI1MTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjkwNzE3NDY0MjM1OTE4Y2MwMTI1ZWE5MDZhN2JhMWM1MzE0NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYldTwxUzO8WOsrwDe16NYVFBRTG
bn73KHdIKpIpkbcRbyJWXLZRkAzEoLf/VVDQHp6ISRfZ8rAXY/jI6hlSrxIlF4mr
J7QQbJZ8m8OcoB8jsdbOBzZ8P04i+ySkaZltNeNDiRO7/iHluHtY0zhl326cNvkN
KkiT8JjBhiWLhni/vp/UZzVXGoZlAh4kkX8XujLJTtn/pP9ECqiGMcmxB6wKveOn
hHhP1M2/Nkq1zeQd9TYCwdbBjMUfsGg803UE2rBVL9kV+KxlrTkoPH0Pb6qdo1TX
U5g7ZXOe3f+50ouHuGxBgj79XFoYD/RFCkPuQ7wPh3msUGwJLWZltg6jNwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBaQcXRkI1kYzAEl6pBqe6HFMUbkMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRnBCeGRHUWpXUmpNQVNYcWtHcDdvY1V4UnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg6XwEsw
DQYJKoZIhvcNAQELBQADggEBACpWkjg52xzlOPv+0XZoFUH97VNoDFpO8wPhnfgn
DE5dimxceheVNtatt1CbxyLb3+RFB+xVPM/eGYcUppwYfSZ+Zt2W6G+hFqNo0xMx
K9jP5i2EoubGSsbjGAVfirF8PuSA2Fol41R3z2p5/jdyCtebaa4ZOXa/43/+cRAB
96WihrSpfnXgnKHD4OPPxBh4Vp8zSsvB6X22bGHqT4JNFT008jpnzxn38RpZ2XaV
urxp7qoQYXS+asEtYogRqaE5c5941ChGBQKBGTbdCuTP2sCs8JiSqUnV7BdD6qIa
M7tV1leyLvaZ5HIK55ZKTvzBFsKknG83dhfZpZxKaP6VJ7M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org