Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M95lwt3rfKeyyPTqU0qu3TmsWmk.roa
File: M95lwt3rfKeyyPTqU0qu3TmsWmk.roa (raw, json)
Hash identifier: Lo8HyAYt0dhPByQpv0JNkzm/TugO8AmLxT1H6AVzpaU=
Subject key identifier: 33:DE:65:C2:DD:EB:7C:A7:B2:C8:F4:EA:53:4A:AE:DD:39:AC:5A:69
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E810CD708972EE39A970781776F52E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M95lwt3rfKeyyPTqU0qu3TmsWmk.roa
Signing time: Mon 02 Jan 2023 05:15:34 +0000
ROA not before: Mon 02 Jan 2023 05:15:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212034
IP address blocks: 2a0e:b107:3e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:10:cd:70:89:72:ee:39:a9:70:78:17:76:f5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33de65c2ddeb7ca7b2c8f4ea534aaedd39ac5a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:b0:e1:c5:7d:3b:46:08:a9:65:71:9f:03:
73:cc:bf:0b:be:5c:c1:20:69:0f:42:0d:95:f5:d5:
e5:72:de:18:dc:72:83:6b:41:de:7b:8e:37:8f:33:
7a:6b:22:3f:dc:47:2e:8c:19:e5:ac:de:3d:c9:8b:
97:93:b7:98:c0:5a:02:1a:4d:bf:ac:94:00:fe:21:
77:2a:f1:22:b7:0e:2f:fd:10:52:17:8e:20:df:00:
51:5f:c1:7c:a0:88:98:50:4b:d8:26:5b:38:28:fe:
21:df:b9:14:46:c1:72:8c:a1:62:63:45:74:23:3a:
1e:80:81:10:9b:c8:15:ec:95:5a:68:8b:69:57:eb:
02:20:b2:97:97:3e:71:df:04:49:68:17:47:cf:05:
fd:ec:e3:09:6e:78:8b:1f:84:48:df:55:54:cc:5d:
c9:58:17:24:76:f5:56:fa:a9:d9:d8:9f:4f:c7:d6:
f2:04:75:24:35:45:18:66:f3:59:b5:24:15:63:a5:
27:96:01:9b:a9:56:ce:53:41:fc:eb:18:98:8e:4c:
8f:a9:f1:34:4b:34:3e:7d:17:8d:dd:6f:25:06:e5:
5c:8f:c9:41:68:6d:42:24:c4:7a:3d:8e:2e:67:01:
ec:3c:08:24:ea:74:84:b2:33:0a:3f:34:e3:a9:2d:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DE:65:C2:DD:EB:7C:A7:B2:C8:F4:EA:53:4A:AE:DD:39:AC:5A:69
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M95lwt3rfKeyyPTqU0qu3TmsWmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
13:92:fe:83:83:5f:9e:ef:12:6c:33:28:a5:fb:19:7a:dd:aa:
e6:29:4a:e1:88:c5:d6:7f:51:e8:58:8e:32:8a:6e:49:8b:e9:
a0:79:15:bc:27:08:64:3c:31:a0:8b:9b:c8:5e:09:ba:a4:06:
c6:c1:5b:8b:b4:66:ca:b0:67:0e:e6:1a:6d:46:a9:07:63:a0:
20:aa:de:5b:7a:08:4a:ed:cb:b8:c9:a6:fc:0f:a8:c1:8c:da:
12:42:af:96:1e:d4:f4:eb:70:91:a8:68:c4:9a:71:d0:4f:df:
04:a8:98:e5:16:12:cc:8d:e7:fc:90:0f:36:72:d2:b6:bf:91:
3f:73:88:d8:fc:5c:f9:84:86:a7:14:74:84:ed:94:27:f0:7d:
50:f5:ff:29:c9:99:9f:eb:d9:f2:b8:57:92:62:d5:a4:cc:6d:
11:18:3f:03:5f:20:73:1c:68:0a:f2:cb:58:e2:aa:85:15:3b:
54:be:38:58:e5:af:6c:1b:48:29:51:9a:ee:2b:a1:91:24:ad:
35:b1:f7:dd:04:98:d1:2f:fd:d7:b3:fb:e7:1f:3c:65:35:85:
5a:69:32:8d:3a:6c:c4:d2:e4:8d:5b:f3:4d:01:d2:3f:21:46:
7b:47:d1:c9:38:ef:d0:35:46:80:f8:39:5f:dd:ee:21:8c:dd:
9e:e4:9d:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw6BDNcIly7jmpcHgXdvUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2RlNjVjMmRkZWI3Y2E3YjJjOGY0ZWE1MzRhYWVkZDM5YWM1YTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCiw4cV9O0YIqWVxnwNzzL8LvlzB
IGkPQg2V9dXlct4Y3HKDa0Hee443jzN6ayI/3EcujBnlrN49yYuXk7eYwFoCGk2/
rJQA/iF3KvEitw4v/RBSF44g3wBRX8F8oIiYUEvYJls4KP4h37kURsFyjKFiY0V0
IzoegIEQm8gV7JVaaItpV+sCILKXlz5x3wRJaBdHzwX97OMJbniLH4RI31VUzF3J
WBckdvVW+qnZ2J9Px9byBHUkNUUYZvNZtSQVY6UnlgGbqVbOU0H86xiYjkyPqfE0
SzQ+fReN3W8lBuVcj8lBaG1CJMR6PY4uZwHsPAgk6nSEsjMKPzTjqS1R5QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDPeZcLd63ynssj06lNKrt05rFppMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTTk1bHd0M3JmS2V5eVBUcVUwcXUzVG1zV21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwPg
MA0GCSqGSIb3DQEBCwUAA4IBAQATkv6Dg1+e7xJsMyil+xl63armKUrhiMXWf1Ho
WI4yim5Ji+mgeRW8JwhkPDGgi5vIXgm6pAbGwVuLtGbKsGcO5hptRqkHY6Agqt5b
eghK7cu4yab8D6jBjNoSQq+WHtT063CRqGjEmnHQT98EqJjlFhLMjef8kA82ctK2
v5E/c4jY/Fz5hIanFHSE7ZQn8H1Q9f8pyZmf69nyuFeSYtWkzG0RGD8DXyBzHGgK
8stY4qqFFTtUvjhY5a9sG0gpUZruK6GRJK01sffdBJjRL/3Xs/vnHzxlNYVaaTKN
OmzE0uSNW/NNAdI/IUZ7R9HJOO/QNUaA+Dlf3e4hjN2e5J1n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org