Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa
File: Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa (raw, json)
Hash identifier: LK50/+5qL6pHYYcM/9Ftds/Wm0V5vAEO29qfNm9cUA0=
Subject key identifier: 25:BF:C5:AC:7E:00:78:2B:37:88:DE:B5:7B:3F:DB:06:D3:AF:68:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189B34CBA7C4D394E1CA668E8FBBA95F138
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa
Signing time: Tue 01 Aug 2023 22:51:37 +0000
ROA not before: Tue 01 Aug 2023 22:51:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202256
IP address blocks: 2a10:ccc7:9000::/40 maxlen: 48
2a10:ccc7:9200::/40 maxlen: 48
2a10:ccc7:9300::/40 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a06:de01:800::/38 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Sep 2023 11:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:4c:ba:7c:4d:39:4e:1c:a6:68:e8:fb:ba:95:f1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 1 22:51:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25bfc5ac7e00782b3788deb57b3fdb06d3af68fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:b3:0d:c7:1c:4c:05:c5:b2:94:05:2e:59:
21:b0:73:5a:21:69:85:28:ce:06:6c:28:57:ef:2d:
75:29:ba:b3:48:a8:e3:30:c9:b4:a9:3d:88:b4:23:
86:cf:25:0d:15:f9:be:27:24:6a:90:e2:7d:a2:be:
2f:84:9b:68:34:6e:22:f4:c3:0c:89:93:a8:66:5a:
01:28:57:df:fb:92:5f:a4:f6:4d:86:79:19:b6:4e:
74:cd:02:7b:c0:cc:b7:e6:d3:ea:7d:10:5d:f0:b1:
0b:0d:74:1a:07:93:dd:bd:b3:66:2f:87:d4:82:c4:
64:ec:15:2f:cb:3b:85:df:84:da:22:e5:e1:65:26:
3b:20:f6:70:2c:61:a9:a4:02:d7:e1:10:96:be:e0:
74:a0:49:43:d6:76:87:d3:a3:89:9e:58:aa:c6:e5:
6d:48:32:e0:ec:6c:38:92:b1:50:e6:18:b3:d2:40:
cf:5b:03:bd:1d:20:85:89:2f:8c:55:2a:b0:3a:91:
2d:08:88:09:e2:7a:e3:69:4e:7c:a0:a7:29:0a:f7:
3f:f7:9a:6a:75:42:16:e8:e1:36:5e:80:1a:b1:10:
80:09:08:07:2a:91:55:83:a7:a4:82:a8:bd:e5:26:
bc:ee:a8:99:22:c6:d9:9b:1a:39:7c:c1:83:2e:d0:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:C5:AC:7E:00:78:2B:37:88:DE:B5:7B:3F:DB:06:D3:AF:68:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jb_FrH4AeCs3iN61ez_bBtOvaP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a0e:97c6:4000::/34
2a10:ccc7:9000::/40
2a10:ccc7:9200::/39
Signature Algorithm: sha256WithRSAEncryption
bd:fe:d8:18:db:59:82:8e:28:dd:e3:12:9d:a6:14:7c:56:c4:
e2:cd:1b:4a:e3:81:41:6f:8e:f0:b4:80:e4:bd:98:bb:f1:08:
ac:0f:a6:56:5f:85:c4:82:54:5b:96:bc:4a:58:01:5f:d7:ee:
a8:bb:d8:21:ae:22:76:78:ea:11:6c:c0:cd:a9:04:3b:72:81:
4d:b0:c5:18:21:8f:8a:a8:2a:49:8e:58:27:ea:c8:aa:29:b7:
f5:47:78:68:9b:93:25:8a:b3:03:e3:70:e4:9e:9c:0a:f2:2c:
d8:8f:ee:8c:3a:d8:8f:11:6e:e2:ee:e7:44:78:00:24:50:7d:
01:15:cb:7e:80:e9:75:2d:33:69:a7:57:36:70:a6:da:4a:72:
66:64:94:09:81:f2:0a:1e:1b:79:45:8e:5e:05:33:23:5b:fe:
72:0b:fb:70:5b:da:7d:02:c1:fb:a6:bd:fe:cb:1d:ba:1b:98:
e9:5b:e0:3a:0e:5d:08:67:7c:e2:db:99:5b:b1:f2:32:43:f4:
c5:be:ea:c5:7e:d4:14:dd:65:59:55:37:e4:e0:44:85:94:57:
0f:eb:64:ca:5c:cd:05:70:a6:dd:b4:7b:da:41:fe:3e:1e:0a:
24:4c:56:e4:a3:5b:1f:b0:fb:97:61:9f:b3:91:d8:d3:c2:90:
80:63:47:fc
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYmzTLp8TTlOHKZo6Pu6lfE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODAxMjI1MTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWJmYzVhYzdlMDA3ODJiMzc4OGRlYjU3YjNmZGIwNmQzYWY2OGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvmzDcccTAXFspQFLlkhsHNaIWmF
KM4GbChX7y11KbqzSKjjMMm0qT2ItCOGzyUNFfm+JyRqkOJ9or4vhJtoNG4i9MMM
iZOoZloBKFff+5JfpPZNhnkZtk50zQJ7wMy35tPqfRBd8LELDXQaB5PdvbNmL4fU
gsRk7BUvyzuF34TaIuXhZSY7IPZwLGGppALX4RCWvuB0oElD1naH06OJnliqxuVt
SDLg7Gw4krFQ5hiz0kDPWwO9HSCFiS+MVSqwOpEtCIgJ4nrjaU58oKcpCvc/95pq
dUIW6OE2XoAasRCACQgHKpFVg6ekgqi95Sa87qiZIsbZmxo5fMGDLtDkGwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCW/xax+AHgrN4jetXs/2wbTr2j+MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSmJfRnJINEFlQ3MzaU42MWV6X2JCdE92YVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAAjAgAwYCKgbeAQgD
BgYqDpfGQAMGACoQzMeQAwYBKhDMx5IwDQYJKoZIhvcNAQELBQADggEBAL3+2Bjb
WYKOKN3jEp2mFHxWxOLNG0rjgUFvjvC0gOS9mLvxCKwPplZfhcSCVFuWvEpYAV/X
7qi72CGuInZ46hFswM2pBDtygU2wxRghj4qoKkmOWCfqyKopt/VHeGibkyWKswPj
cOSenAryLNiP7ow62I8RbuLu50R4ACRQfQEVy36A6XUtM2mnVzZwptpKcmZklAmB
8goeG3lFjl4FMyNb/nIL+3Bb2n0Cwfumvf7LHbobmOlb4DoOXQhnfOLbmVux8jJD
9MW+6sV+1BTdZVlVN+TgRIWUVw/rZMpczQVwpt20e9pB/j4eCiRMVuSjWx+w+5dh
n7OR2NPCkIBjR/w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org