Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa
File: Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa (raw, json)
Hash identifier: JdunxPDDrphHsDZ0uGk+GQXhUh6MO3YrVYm3+zH/ugs=
Subject key identifier: 1F:2F:2E:4A:FB:D9:E9:DA:E5:A4:F6:7E:54:09:C5:53:DB:EE:A7:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CFA4259E869331B0346B6CE183A4C7984
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa
Signing time: Thu 11 Jan 2024 20:41:41 +0000
ROA not before: Thu 11 Jan 2024 20:41:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a0e:b107:1e10::/48 maxlen: 48
2a10:2f00:187::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Feb 2024 19:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:42:59:e8:69:33:1b:03:46:b6:ce:18:3a:4c:79:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 20:41:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2f2e4afbd9e9dae5a4f67e5409c553dbeea7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:94:e6:27:21:9d:27:92:99:88:d9:fb:79:
9b:d7:d0:f9:c5:35:9c:68:77:29:bf:f3:db:75:3e:
2c:4a:f2:bc:d3:ee:39:7b:d6:0b:37:71:81:08:10:
c3:b0:22:f0:fd:b7:c3:d1:fe:7b:cb:cb:3b:04:3c:
3c:1f:0d:07:b4:fb:ad:6a:b2:94:10:da:a1:c1:ac:
62:8f:98:f8:03:a6:35:86:ba:8a:e2:38:8e:79:df:
cb:f3:c0:60:a5:4e:90:6c:20:e0:48:64:d4:5b:b0:
a8:8d:f9:97:10:09:c4:7f:f5:3f:bc:91:86:19:1a:
5e:ad:54:ed:24:94:07:a2:02:05:3c:4c:58:89:c9:
c4:9b:57:02:21:c6:a1:1b:d9:21:89:e5:90:20:16:
fa:78:40:e7:06:51:06:29:3b:54:e4:22:40:15:71:
7d:4c:1a:7a:73:91:49:e1:fb:e9:50:19:8f:ec:59:
39:1c:e9:4a:0b:58:2a:cf:e0:e7:37:a2:55:45:87:
29:0c:0d:8f:ab:7e:26:d4:dc:48:55:82:b4:c7:93:
98:ea:42:75:31:9a:8c:2b:53:13:23:fa:87:e1:9d:
0a:c2:5a:68:7f:98:2d:ed:e2:42:8c:b3:72:a8:43:
95:17:fa:93:74:98:9c:79:03:ca:b0:c5:04:fe:f0:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:2E:4A:FB:D9:E9:DA:E5:A4:F6:7E:54:09:C5:53:DB:EE:A7:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hy8uSvvZ6drlpPZ-VAnFU9vup9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e10::/48
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
57:c7:53:37:b9:94:8c:b4:3f:da:fc:8b:83:d0:6f:f8:29:93:
1c:57:7b:23:80:bb:a4:9e:ef:1b:e1:c8:4d:61:9e:32:85:d7:
64:ea:50:03:ff:50:4b:18:8d:6b:b9:68:6f:82:16:10:7e:88:
87:51:a3:24:fd:fd:55:74:d5:13:da:4d:d0:a0:e2:94:c5:b2:
fe:56:f9:8f:9a:c4:ca:e5:8e:04:d0:8d:94:96:a4:b8:d5:27:
4c:87:98:97:15:08:c7:bf:92:f0:e7:03:d8:e2:58:ae:2c:25:
b3:87:c0:90:d7:ee:18:43:6c:34:9a:33:e6:26:bf:45:64:7c:
3d:1c:5f:3a:67:f6:6d:f0:81:61:76:43:0e:3c:ae:b0:5b:45:
24:02:51:ba:b1:5b:c3:0c:f1:58:a7:25:d0:c9:6f:b1:ef:bf:
f3:d3:ae:4f:da:48:ae:1f:49:d7:9c:d4:cc:9d:17:1b:23:c5:
d2:a7:ac:8f:ea:3a:a2:98:89:44:38:1b:81:c3:af:61:4c:d5:
d3:e5:25:5e:2f:b2:8f:11:d9:dc:35:09:ff:fd:f8:4d:45:2b:
10:7d:d8:55:b5:27:d7:6b:4c:06:c2:fa:01:b9:06:ae:0e:bf:
01:4e:75:8e:ee:8e:a4:46:cc:85:23:1d:0b:1a:2c:e9:96:b1:
23:6b:25:98
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYz6QlnoaTMbA0a2zhg6THmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTExMjA0MTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjJmMmU0YWZiZDllOWRhZTVhNGY2N2U1NDA5YzU1M2RiZWVhN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVSU5ichnSeSmYjZ+3mb19D5xTWc
aHcpv/PbdT4sSvK80+45e9YLN3GBCBDDsCLw/bfD0f57y8s7BDw8Hw0HtPutarKU
ENqhwaxij5j4A6Y1hrqK4jiOed/L88BgpU6QbCDgSGTUW7CojfmXEAnEf/U/vJGG
GRperVTtJJQHogIFPExYicnEm1cCIcahG9khieWQIBb6eEDnBlEGKTtU5CJAFXF9
TBp6c5FJ4fvpUBmP7Fk5HOlKC1gqz+DnN6JVRYcpDA2Pq34m1NxIVYK0x5OY6kJ1
MZqMK1MTI/qH4Z0Kwlpof5gt7eJCjLNyqEOVF/qTdJiceQPKsMUE/vC8mQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB8vLkr72ena5aT2flQJxVPb7qfWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSHk4dVN2dlo2ZHJscFBaLVZBbkZVOXZ1cDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBx4Q
AwcAKhAvAAGHMA0GCSqGSIb3DQEBCwUAA4IBAQBXx1M3uZSMtD/a/IuD0G/4KZMc
V3sjgLuknu8b4chNYZ4yhddk6lAD/1BLGI1ruWhvghYQfoiHUaMk/f1VdNUT2k3Q
oOKUxbL+VvmPmsTK5Y4E0I2UlqS41SdMh5iXFQjHv5Lw5wPY4liuLCWzh8CQ1+4Y
Q2w0mjPmJr9FZHw9HF86Z/Zt8IFhdkMOPK6wW0UkAlG6sVvDDPFYpyXQyW+x77/z
065P2kiuH0nXnNTMnRcbI8XSp6yP6jqimIlEOBuBw69hTNXT5SVeL7KPEdncNQn/
/fhNRSsQfdhVtSfXa0wGwvoBuQauDr8BTnWO7o6kRsyFIx0LGizplrEjayWY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org