Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa
File: MYEZJ0XhwNFx22Val7c2QHnqHno.roa (raw, json)
Hash identifier: L5j4egxzI711AwNNecFwgWsx5eOPwY/3HijhU4FoUl4=
Subject key identifier: 31:81:19:27:45:E1:C0:D1:71:DB:65:5A:97:B7:36:40:79:EA:1E:7A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185C35A66DEA621708C49C1DDD181838546
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa
Signing time: Wed 18 Jan 2023 05:29:19 +0000
ROA not before: Wed 18 Jan 2023 05:29:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41732
IP address blocks: 2a0e:b107:1400::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:5a:66:de:a6:21:70:8c:49:c1:dd:d1:81:83:85:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 18 05:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3181192745e1c0d171db655a97b7364079ea1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:7d:6b:21:03:00:a7:0e:6e:fb:d1:c9:8a:
c5:f4:2d:76:90:60:cf:1c:f7:8c:9b:59:11:61:86:
3a:6d:4b:3f:a3:86:ea:b8:90:b0:03:10:26:25:08:
7e:4f:dd:4d:f0:6c:5e:19:bc:bd:3e:43:b7:6c:61:
fb:d9:ce:00:0f:a7:e2:21:2b:d3:80:b7:d4:f7:f9:
47:88:90:d1:d5:95:62:19:8f:44:48:f5:d1:49:b4:
c8:b7:c6:b6:40:88:fd:00:c3:89:1e:df:2b:45:69:
fd:18:96:73:b3:f8:6f:d8:3a:35:24:ea:e7:11:c4:
9b:e8:e4:34:93:64:be:2f:d2:f5:cb:6a:ba:39:92:
aa:e9:5f:1e:59:30:0a:31:a5:17:74:52:fb:6b:2a:
fc:a1:b2:0a:90:ca:4b:41:7c:c2:c1:63:e3:2c:86:
bf:9b:ee:a5:34:26:3e:1f:18:18:9c:f4:00:e8:cf:
e2:d0:a7:97:4b:0d:a5:ac:cd:21:d7:33:72:7c:be:
91:98:4a:b0:44:07:4e:73:9e:93:97:bf:8c:e8:c1:
ec:35:72:db:47:16:41:4e:93:98:f8:24:08:fb:c3:
6f:58:93:d5:3f:5d:c4:90:26:1f:42:4a:6e:c6:ca:
a2:21:18:7c:76:2c:7b:b5:95:26:3d:51:c1:ee:f6:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:81:19:27:45:E1:C0:D1:71:DB:65:5A:97:B7:36:40:79:EA:1E:7A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MYEZJ0XhwNFx22Val7c2QHnqHno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1400::/44
Signature Algorithm: sha256WithRSAEncryption
73:f6:14:e7:a4:47:d0:3a:f4:d3:44:96:80:ea:7d:73:36:8a:
47:7b:89:9f:cb:2c:e7:78:ad:df:7c:83:f5:25:5a:a2:ea:99:
f4:7e:92:f1:dd:de:ae:3a:83:41:15:9b:00:45:83:ee:e2:b0:
f7:c5:08:f3:58:0f:f0:02:23:5a:09:12:6f:c4:80:a0:d3:ee:
c6:bb:0e:5f:89:44:a5:2f:4f:6d:84:38:0d:2e:e0:f3:96:d9:
69:68:b1:bd:5d:0a:7e:25:ee:0d:40:a0:5f:fd:d0:0d:1b:d0:
72:aa:1f:3d:7b:e1:f8:e0:d0:cd:82:fc:a7:6b:bc:74:fb:75:
36:2b:b0:ee:da:be:f0:1d:78:01:d5:bb:b0:7e:dc:08:f2:d0:
5e:b5:77:89:98:17:82:6f:cc:ce:6a:70:95:bf:a4:8a:33:6b:
c2:55:e2:e3:86:88:ae:25:94:69:17:7d:c0:1b:fa:0b:16:b2:
8a:c5:00:57:00:fe:ea:36:f6:48:50:af:c1:5a:90:f6:46:93:
7d:ee:03:17:fb:2a:fe:5f:05:5f:8d:af:bf:f1:c9:59:28:10:
20:fc:c0:2d:8d:56:9a:64:e3:1c:c4:92:39:78:b4:26:76:e4:
81:27:07:06:2c:17:b5:45:57:9c:21:f3:74:34:f1:6e:d4:43:
96:ee:66:d6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXDWmbepiFwjEnB3dGBg4VGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTE4MDUyOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTgxMTkyNzQ1ZTFjMGQxNzFkYjY1NWE5N2I3MzY0MDc5ZWExZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN99ayEDAKcObvvRyYrF9C12kGDP
HPeMm1kRYYY6bUs/o4bquJCwAxAmJQh+T91N8GxeGby9PkO3bGH72c4AD6fiISvT
gLfU9/lHiJDR1ZViGY9ESPXRSbTIt8a2QIj9AMOJHt8rRWn9GJZzs/hv2Do1JOrn
EcSb6OQ0k2S+L9L1y2q6OZKq6V8eWTAKMaUXdFL7ayr8obIKkMpLQXzCwWPjLIa/
m+6lNCY+HxgYnPQA6M/i0KeXSw2lrM0h1zNyfL6RmEqwRAdOc56Tl7+M6MHsNXLb
RxZBTpOY+CQI+8NvWJPVP13EkCYfQkpuxsqiIRh8dix7tZUmPVHB7vadRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDGBGSdF4cDRcdtlWpe3NkB56h56MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTVlFWkowWGh3TkZ4MjJWYWw3YzJRSG5xSG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxQA
MA0GCSqGSIb3DQEBCwUAA4IBAQBz9hTnpEfQOvTTRJaA6n1zNopHe4mfyyzneK3f
fIP1JVqi6pn0fpLx3d6uOoNBFZsARYPu4rD3xQjzWA/wAiNaCRJvxICg0+7Guw5f
iUSlL09thDgNLuDzltlpaLG9XQp+Je4NQKBf/dANG9Byqh89e+H44NDNgvyna7x0
+3U2K7Du2r7wHXgB1buwftwI8tBetXeJmBeCb8zOanCVv6SKM2vCVeLjhoiuJZRp
F33AG/oLFrKKxQBXAP7qNvZIUK/BWpD2RpN97gMX+yr+XwVfja+/8clZKBAg/MAt
jVaaZOMcxJI5eLQmduSBJwcGLBe1RVecIfN0NPFu1EOW7mbW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org