Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa
File: MJwoJMFqdAR0vMU1unue0FPBDC0.roa (raw, json)
Hash identifier: qDYFJTdZmJ7rV0KcruXhslxmjgQc+isPilLI0yCHFwY=
Subject key identifier: 30:9C:28:24:C1:6A:74:04:74:BC:C5:35:BA:7B:9E:D0:53:C1:0C:2D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A2394102795956CB547673C42D840300A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa
Signing time: Wed 23 Aug 2023 18:07:00 +0000
ROA not before: Wed 23 Aug 2023 18:07:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151633
IP address blocks: 2a06:de00:6b::/48 maxlen: 48
2a06:de00:66::/48 maxlen: 48
2a06:de00:61::/48 maxlen: 48
2a06:de00:6c::/48 maxlen: 48
2a06:de00:6f::/48 maxlen: 48
2a06:de00:6a::/48 maxlen: 48
2a06:de00:65::/48 maxlen: 48
2a06:de00:60::/48 maxlen: 48
2a06:de00:63::/48 maxlen: 48
2a06:de00:6e::/48 maxlen: 48
2a06:de00:69::/48 maxlen: 48
2a06:de00:64::/48 maxlen: 48
2a06:de00:67::/48 maxlen: 48
2a06:de00:62::/48 maxlen: 48
2a06:de00:6d::/48 maxlen: 48
2a06:de00:68::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Sep 2023 17:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:94:10:27:95:95:6c:b5:47:67:3c:42:d8:40:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 23 18:07:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=309c2824c16a740474bcc535ba7b9ed053c10c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:1f:4f:e3:0b:8e:b0:22:c3:36:e3:b3:41:
fe:c3:4c:c3:9c:cf:e2:fc:24:de:79:87:04:46:4d:
39:45:d1:de:8e:f8:70:9b:2c:a6:92:de:43:f7:e2:
2f:53:a4:ac:ab:b8:0e:78:e2:d7:11:72:28:13:25:
e0:e2:5f:b1:56:16:89:7a:6b:0d:c9:3c:7e:ee:d3:
d2:04:3d:db:20:68:90:93:52:8a:3e:05:03:6c:c7:
d2:7c:33:05:58:00:34:9a:28:72:4b:08:36:a0:3b:
7b:71:6f:ed:cc:de:bf:eb:52:21:2a:38:da:62:5b:
41:81:a8:43:2a:cc:70:ff:77:b4:21:00:a9:d5:0d:
29:2c:e4:07:4d:14:6c:18:ab:36:8a:85:5e:d3:7c:
0e:91:6f:d0:65:fc:2d:04:1d:86:77:ae:d4:da:5e:
0b:6e:e6:31:c2:b9:0c:c2:9f:a1:72:25:40:27:84:
fb:93:ef:d6:0e:83:2a:55:50:47:d8:10:cd:b8:b6:
50:13:bf:c2:4e:60:6c:06:59:d7:b7:28:a8:ce:f3:
16:2d:00:dd:8a:71:fe:ec:33:8b:1c:8e:7d:7b:8d:
0b:34:f8:6c:28:d4:63:d6:fd:c3:30:bf:84:bf:12:
26:d3:41:1d:f4:54:65:1d:23:c6:32:de:5a:30:11:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:28:24:C1:6A:74:04:74:BC:C5:35:BA:7B:9E:D0:53:C1:0C:2D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MJwoJMFqdAR0vMU1unue0FPBDC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:60::/44
Signature Algorithm: sha256WithRSAEncryption
30:73:12:7f:3f:84:99:5e:c1:34:e0:5a:96:6c:9d:12:fd:8c:
78:d2:7e:f7:0a:b3:f7:90:1c:21:d6:1d:ba:da:28:a5:2f:b9:
80:0a:d9:8c:ee:cb:55:ee:6d:c0:3d:09:26:7f:34:85:4c:66:
19:d4:9f:87:b9:26:bb:fa:e9:b5:f4:b4:81:c0:a4:8b:4c:0c:
46:47:9e:43:d0:8e:73:c2:e5:f1:25:79:99:9c:8b:9f:40:cb:
40:af:b2:67:12:0f:68:20:d7:5a:af:09:a9:d4:48:30:d1:e2:
cd:9b:8f:21:da:bd:4a:53:a2:03:0a:df:75:f2:fe:27:58:19:
41:45:7c:dc:91:cd:f5:e8:03:27:d0:6a:78:ef:74:c2:f4:ea:
51:fb:79:b1:6b:4b:9c:bd:86:73:67:77:fd:b7:3a:98:ad:42:
be:12:c7:bb:db:15:18:1b:29:65:d5:0a:67:e6:91:d1:d0:9f:
d8:2e:82:e9:0f:c3:c7:49:1c:9f:24:e0:ec:c4:4c:a2:ea:d4:
0c:a5:2f:b5:47:7e:43:eb:d4:5d:99:62:21:6d:72:ae:ad:31:
47:5e:ca:2e:47:4a:ff:df:3e:55:33:96:5e:d3:26:64:11:93:
cd:7a:92:49:5c:68:23:22:87:4f:e6:95:0e:bd:34:d1:87:3e:
f8:c2:38:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYojlBAnlZVstUdnPELYQDAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODIzMTgwNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDljMjgyNGMxNmE3NDA0NzRiY2M1MzViYTdiOWVkMDUzYzEwYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjscfT+MLjrAiwzbjs0H+w0zDnM/i
/CTeeYcERk05RdHejvhwmyymkt5D9+IvU6Ssq7gOeOLXEXIoEyXg4l+xVhaJemsN
yTx+7tPSBD3bIGiQk1KKPgUDbMfSfDMFWAA0mihySwg2oDt7cW/tzN6/61IhKjja
YltBgahDKsxw/3e0IQCp1Q0pLOQHTRRsGKs2ioVe03wOkW/QZfwtBB2Gd67U2l4L
buYxwrkMwp+hciVAJ4T7k+/WDoMqVVBH2BDNuLZQE7/CTmBsBlnXtyiozvMWLQDd
inH+7DOLHI59e40LNPhsKNRj1v3DML+EvxIm00Ed9FRlHSPGMt5aMBGxbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDCcKCTBanQEdLzFNbp7ntBTwQwtMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTUp3b0pNRnFkQVIwdk1VMXVudWUwRlBCREMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAABg
MA0GCSqGSIb3DQEBCwUAA4IBAQAwcxJ/P4SZXsE04FqWbJ0S/Yx40n73CrP3kBwh
1h262iilL7mACtmM7stV7m3APQkmfzSFTGYZ1J+HuSa7+um19LSBwKSLTAxGR55D
0I5zwuXxJXmZnIufQMtAr7JnEg9oINdarwmp1Egw0eLNm48h2r1KU6IDCt918v4n
WBlBRXzckc316AMn0Gp473TC9OpR+3mxa0ucvYZzZ3f9tzqYrUK+Ese72xUYGyll
1Qpn5pHR0J/YLoLpD8PHSRyfJODsxEyi6tQMpS+1R35D69RdmWIhbXKurTFHXsou
R0r/3z5VM5Ze0yZkEZPNepJJXGgjIodP5pUOvTTRhz74wjhl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org