Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FqXc8u72zGNVi1UGsjhqTZf8UTo.roa
File: FqXc8u72zGNVi1UGsjhqTZf8UTo.roa (raw, json)
Hash identifier: YKzXRNYrreew31uUlTGUXGeB6IY7Yzeu1unR6nXe5nk=
Subject key identifier: 16:A5:DC:F2:EE:F6:CC:63:55:8B:55:06:B2:38:6A:4D:97:FC:51:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AB7B0E9B712F71512C5AFFD4FC20E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FqXc8u72zGNVi1UGsjhqTZf8UTo.roa
Signing time: Tue 24 Jan 2023 16:09:34 +0000
ROA not before: Tue 24 Jan 2023 16:09:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6556
IP address blocks: 2a0e:b107:180::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:b7:b0:e9:b7:12:f7:15:12:c5:af:fd:4f:c2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16a5dcf2eef6cc63558b5506b2386a4d97fc513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:af:9a:15:e1:75:75:d3:59:31:a7:27:ce:
56:a3:14:c6:a8:9e:5f:1f:98:be:44:5b:96:00:11:
59:28:cd:94:bc:3f:19:76:6d:7b:d1:e3:0e:d0:9c:
0e:35:db:8e:1d:46:1b:b4:4a:79:1f:dd:4d:4a:45:
ba:45:ae:60:b8:48:d8:1a:2d:9b:52:3e:88:ce:4f:
9f:01:83:b3:77:95:0d:71:8e:d3:bc:2b:5a:11:d7:
ec:10:3b:7b:d3:f8:dc:c2:e3:43:03:26:43:81:63:
05:de:68:62:ab:6c:dd:79:99:b9:38:54:74:61:a9:
f5:d8:0c:1d:8b:f3:bf:7a:ad:0a:27:69:1b:14:4a:
41:9c:f0:6d:7f:78:a4:b9:65:86:0e:c2:82:12:60:
2a:29:90:e7:37:d3:84:a3:4a:5f:cf:fb:bc:78:c9:
76:cc:34:32:4f:90:03:e3:0f:6c:92:fa:28:46:e9:
1a:a8:bb:b9:04:ae:e4:5a:e7:52:61:27:b1:1e:53:
2d:b1:5f:0b:4d:24:65:8e:fc:48:dd:2f:95:ee:93:
1d:a4:55:e9:4d:d7:b9:7f:40:5e:13:75:e8:43:19:
04:69:fe:cb:10:26:70:4b:bf:f1:34:5c:53:32:33:
4f:72:22:e7:9e:a5:d3:ee:f7:b2:9f:92:7b:91:fc:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:DC:F2:EE:F6:CC:63:55:8B:55:06:B2:38:6A:4D:97:FC:51:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FqXc8u72zGNVi1UGsjhqTZf8UTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:180::/44
Signature Algorithm: sha256WithRSAEncryption
06:42:fe:39:aa:1a:4f:0b:fe:37:a5:28:b1:b0:d4:14:5f:f8:
d8:aa:84:2a:4e:d9:2c:51:98:b4:90:be:e3:68:84:d2:df:59:
9d:06:f9:98:ff:62:ea:8e:45:61:a8:96:31:0a:7e:61:c3:13:
23:bd:c3:d4:4b:f5:6f:ee:f4:7c:6b:ee:8b:19:2d:26:2c:27:
4f:01:7e:69:28:3b:90:b4:84:6e:a1:21:d5:5e:bd:98:3d:fa:
65:ba:61:fd:f2:8a:cd:e5:d1:38:ae:d1:77:0e:02:74:ac:71:
87:75:54:52:d2:09:93:a0:ee:5d:ca:d6:7c:de:1b:99:57:2d:
11:a8:90:69:87:47:15:77:1d:45:83:fb:d7:08:9b:f6:89:18:
d3:ec:a8:35:ab:a9:99:30:f7:73:21:3e:f7:f3:ff:2c:c5:a6:
55:2e:8e:d9:4d:83:e7:fb:4f:81:23:b7:e1:b1:97:4d:74:5a:
0b:38:28:c7:4d:14:54:fd:2d:f7:8c:dc:f8:06:6d:1e:49:c3:
d5:d5:09:db:d5:8c:9e:5b:ed:d5:ef:c4:55:ee:b7:fc:11:e7:
4a:c5:97:91:13:57:12:36:a6:f8:a5:fb:65:42:92:ba:a0:80:
aa:95:a7:36:6b:52:4a:11:4c:6b:91:ef:a1:b2:d4:8b:e0:bf:
9a:f3:11:cb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkirew6bcS9xUSxa/9T8IOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmE1ZGNmMmVlZjZjYzYzNTU4YjU1MDZiMjM4NmE0ZDk3ZmM1MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW6vmhXhdXXTWTGnJ85WoxTGqJ5f
H5i+RFuWABFZKM2UvD8Zdm170eMO0JwONduOHUYbtEp5H91NSkW6Ra5guEjYGi2b
Uj6Izk+fAYOzd5UNcY7TvCtaEdfsEDt70/jcwuNDAyZDgWMF3mhiq2zdeZm5OFR0
Yan12Awdi/O/eq0KJ2kbFEpBnPBtf3ikuWWGDsKCEmAqKZDnN9OEo0pfz/u8eMl2
zDQyT5AD4w9skvooRukaqLu5BK7kWudSYSexHlMtsV8LTSRljvxI3S+V7pMdpFXp
Tde5f0BeE3XoQxkEaf7LECZwS7/xNFxTMjNPciLnnqXT7veyn5J7kfx6EwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBal3PLu9sxjVYtVBrI4ak2X/FE6MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRnFYYzh1NzJ6R05WaTFVR3NqaHFUWmY4VVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwGA
MA0GCSqGSIb3DQEBCwUAA4IBAQAGQv45qhpPC/43pSixsNQUX/jYqoQqTtksUZi0
kL7jaITS31mdBvmY/2LqjkVhqJYxCn5hwxMjvcPUS/Vv7vR8a+6LGS0mLCdPAX5p
KDuQtIRuoSHVXr2YPfplumH98orN5dE4rtF3DgJ0rHGHdVRS0gmToO5dytZ83huZ
Vy0RqJBph0cVdx1Fg/vXCJv2iRjT7Kg1q6mZMPdzIT738/8sxaZVLo7ZTYPn+0+B
I7fhsZdNdFoLOCjHTRRU/S33jNz4Bm0eScPV1Qnb1YyeW+3V78RV7rf8EedKxZeR
E1cSNqb4pftlQpK6oICqlac2a1JKEUxrke+hstSL4L+a8xHL
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org