Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K0j7r3zYOAEmmcS9-bVLS0QYjnU.roa
File: K0j7r3zYOAEmmcS9-bVLS0QYjnU.roa (raw, json)
Hash identifier: 57TN7UuexzxLaBnUlsefslhnN76CoMPfWqU9h7QYki0=
Subject key identifier: 2B:48:FB:AF:7C:D8:38:01:26:99:C4:BD:F9:B5:4B:4B:44:18:8E:75
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01907D2C6375B330A348783B5269DFA6974F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K0j7r3zYOAEmmcS9-bVLS0QYjnU.roa
Signing time: Thu 04 Jul 2024 09:56:19 +0000
ROA not before: Thu 04 Jul 2024 09:56:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216093
IP address blocks: 2a0e:97c0:df0::/48 maxlen: 48
2a0e:97c0:df1::/48 maxlen: 48
2a0e:97c0:df2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:2c:63:75:b3:30:a3:48:78:3b:52:69:df:a6:97:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 09:56:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b48fbaf7cd838012699c4bdf9b54b4b44188e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:dc:e0:c9:1e:76:4d:29:32:67:5e:62:5b:
66:93:13:78:e4:62:e9:c8:4a:e3:e6:2c:0a:70:c5:
54:69:56:dc:03:94:1d:f6:fa:43:7f:db:66:34:82:
4a:93:1d:f0:6f:87:04:61:fc:da:2b:d1:85:ec:75:
62:35:6d:22:d0:d6:84:21:27:7a:5b:8b:54:c3:66:
d1:b6:73:60:dc:b1:52:86:e6:bc:b5:98:6b:46:9b:
dd:1e:8c:ac:66:47:76:14:9a:b2:2f:47:7e:f3:2b:
28:6e:a3:a4:84:e1:31:d6:02:47:ed:00:26:1d:47:
67:b2:b4:ca:a4:22:cf:3b:46:e0:94:3f:75:10:c2:
3f:43:b9:a7:ca:33:8d:a5:8a:36:29:6e:7e:d1:9d:
20:64:37:12:9c:ff:04:a5:f2:e9:b5:f6:80:09:c2:
29:e8:dd:ab:8f:fd:db:93:a5:86:dc:5c:b3:55:48:
9b:8f:3e:ce:d5:bd:a9:2d:2a:79:20:ce:ff:fb:ac:
2e:8b:30:8b:af:cb:24:44:02:84:69:41:d8:7a:fe:
50:7a:9e:49:df:92:78:d0:3b:ed:11:d3:f0:3f:fe:
2c:6f:3e:1b:0c:03:f3:43:b4:d5:95:72:22:17:a3:
38:11:00:02:ba:61:ed:d5:cd:53:73:b6:5c:a6:1c:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:FB:AF:7C:D8:38:01:26:99:C4:BD:F9:B5:4B:4B:44:18:8E:75
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K0j7r3zYOAEmmcS9-bVLS0QYjnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:df0::-2a0e:97c0:df2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:8b:e9:5f:2f:0d:4c:b3:a7:f5:6e:89:99:4b:1e:db:75:2b:
e1:3d:0c:8b:62:e7:ab:5a:7f:aa:c3:52:57:ce:51:b2:8f:22:
54:bd:6d:d1:ec:12:d5:e4:ee:11:ff:84:fb:5b:97:26:69:9c:
08:c4:4e:6b:aa:5f:38:36:98:7c:42:7f:01:e6:80:7c:fc:4a:
ee:86:9c:77:41:18:5a:d7:99:e1:41:a1:41:fc:f5:c3:fd:c1:
2a:04:2c:91:7b:87:04:16:0c:9a:d1:4b:df:77:6b:6e:31:33:
ec:b2:74:2b:e0:6b:88:52:35:49:a6:5c:63:ae:8d:5f:ba:4d:
22:52:d6:67:cc:0e:d0:0b:04:73:95:36:c0:e1:0d:ea:95:fa:
c9:a0:4c:bd:43:16:97:75:ea:92:d3:0d:b5:e2:ad:cb:8d:1a:
d0:49:8a:49:92:e5:6b:20:f6:59:4a:5c:c6:de:0a:66:93:77:
f5:7c:be:2d:d3:a1:9f:6f:57:b6:df:5f:7a:cf:b7:d6:3b:ce:
bb:23:77:41:c8:91:9e:49:2c:ed:8c:eb:2f:55:17:df:2b:e0:
57:30:f8:10:6b:20:06:a3:7c:66:7a:f8:32:f6:31:35:9f:9b:
e3:d8:e8:6c:c7:a1:49:19:90:5d:d7:bc:42:70:f0:1a:53:b5:
cb:3d:92:9d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZB9LGN1szCjSHg7UmnfppdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwNzA0MDk1NjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQ4ZmJhZjdjZDgzODAxMjY5OWM0YmRmOWI1NGI0YjQ0MTg4ZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uPc4Mkedk0pMmdeYltmkxN45GLp
yErj5iwKcMVUaVbcA5Qd9vpDf9tmNIJKkx3wb4cEYfzaK9GF7HViNW0i0NaEISd6
W4tUw2bRtnNg3LFShua8tZhrRpvdHoysZkd2FJqyL0d+8ysobqOkhOEx1gJH7QAm
HUdnsrTKpCLPO0bglD91EMI/Q7mnyjONpYo2KW5+0Z0gZDcSnP8EpfLptfaACcIp
6N2rj/3bk6WG3FyzVUibjz7O1b2pLSp5IM7/+6wuizCLr8skRAKEaUHYev5Qep5J
35J40DvtEdPwP/4sbz4bDAPzQ7TVlXIiF6M4EQACumHt1c1Tc7ZcphzmcwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCtI+6982DgBJpnEvfm1S0tEGI51MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSzBqN3IzellPQUVtbWNTOS1iVkxTMFFZam5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqDpfA
DfADBwAqDpfADfIwDQYJKoZIhvcNAQELBQADggEBAE+L6V8vDUyzp/VuiZlLHtt1
K+E9DIti56taf6rDUlfOUbKPIlS9bdHsEtXk7hH/hPtblyZpnAjETmuqXzg2mHxC
fwHmgHz8Su6GnHdBGFrXmeFBoUH89cP9wSoELJF7hwQWDJrRS993a24xM+yydCvg
a4hSNUmmXGOujV+6TSJS1mfMDtALBHOVNsDhDeqV+smgTL1DFpd16pLTDbXircuN
GtBJikmS5Wsg9llKXMbeCmaTd/V8vi3ToZ9vV7bfX3rPt9Y7zrsjd0HIkZ5JLO2M
6y9VF98r4Fcw+BBrIAajfGZ6+DL2MTWfm+PY6GzHoUkZkF3XvEJw8BpTtcs9kp0=
-----END CERTIFICATE-----
Generated at Thu Jul 4 17:49:27 2024 by rpki-client on console-fra.rpki-client.org