Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8mmAw8mBqTNFxHvJJQGyTJ00KM.roa
File: N8mmAw8mBqTNFxHvJJQGyTJ00KM.roa (raw, json)
Hash identifier: Bfx/7fj540CfTBD65334M5+sIWZtK3W+lvc8T2iQ6PI=
Subject key identifier: 37:C9:A6:03:0F:26:06:A4:CD:17:11:EF:24:94:06:C9:32:74:D0:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E80BBBFF50F50C2D7FC79DDB5F7E13
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8mmAw8mBqTNFxHvJJQGyTJ00KM.roa
Signing time: Mon 02 Jan 2023 05:15:33 +0000
ROA not before: Mon 02 Jan 2023 05:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:0b:bb:ff:50:f5:0c:2d:7f:c7:9d:db:5f:7e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37c9a6030f2606a4cd1711ef249406c93274d0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b7:19:dc:71:7f:12:a1:a5:e8:69:85:04:af:
d1:b0:21:b9:26:cd:7d:ab:85:56:c0:53:14:b0:8b:
bb:73:39:bc:e2:8d:e0:ad:a9:a4:e7:94:1e:d5:fc:
d9:70:08:44:61:ef:65:23:21:f4:6e:46:bb:0e:d2:
e4:9a:61:89:ee:10:85:e1:c7:aa:7f:9b:af:51:9d:
70:7b:90:50:ed:73:81:a5:09:3e:db:ec:40:57:17:
68:48:74:92:1d:3e:1e:1f:8e:c8:51:02:27:b2:00:
3a:25:f5:1b:b8:06:b0:b9:73:72:e1:1b:49:30:1a:
33:cc:39:67:f2:2a:8b:aa:3f:93:b4:bc:a2:39:94:
a5:96:c8:9d:93:71:92:1f:77:ad:56:18:9b:91:aa:
8e:85:be:e4:09:da:53:ba:c9:89:3e:3a:6b:74:41:
28:1a:1d:75:b8:30:fb:31:41:3e:cd:6c:5b:01:84:
d9:28:e0:80:34:d3:1a:23:78:eb:c6:71:76:6d:d2:
cd:bb:38:9a:5f:fb:aa:85:eb:70:b9:cb:7a:20:1b:
3d:2c:f3:60:ef:0f:ab:67:32:e1:ac:eb:3e:9b:4f:
a2:f7:fe:91:79:22:3e:a5:5c:68:ba:69:76:ec:41:
15:f7:c2:13:0b:2e:5f:f8:ac:d1:7b:be:84:66:26:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C9:A6:03:0F:26:06:A4:CD:17:11:EF:24:94:06:C9:32:74:D0:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N8mmAw8mBqTNFxHvJJQGyTJ00KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
Signature Algorithm: sha256WithRSAEncryption
56:fe:d0:78:db:80:bb:75:40:f8:4a:27:4d:f4:2f:63:44:b5:
5c:be:7d:70:15:c7:03:14:41:7c:bd:ce:e2:0a:2e:18:6f:44:
69:ac:0c:f2:47:98:42:34:21:ff:be:eb:1b:7d:b9:da:fe:1e:
50:c2:6f:8b:cf:d5:1c:3a:97:ef:a5:31:c6:e5:fb:42:23:d0:
03:de:51:47:40:c0:9e:f9:17:1a:9f:be:57:3a:ff:89:93:b7:
86:2b:9a:03:85:86:b6:6e:c4:5e:0d:7a:fd:7d:5d:77:f5:92:
62:cc:97:e6:dc:44:3e:e3:f8:e5:1b:0a:85:74:e0:6a:aa:81:
40:17:12:79:28:19:ba:56:94:ef:21:7b:2d:3b:65:9c:b1:c8:
76:46:31:c4:c4:5b:e0:06:98:22:a1:ad:fb:e8:5a:c1:c3:66:
2b:00:49:e0:68:01:0e:c5:73:ae:fd:60:07:36:af:c1:ea:4e:
5a:45:1c:84:11:e7:d1:02:c0:73:8f:5e:65:a1:80:61:b9:55:
7c:47:e1:bc:3e:bb:a8:16:cd:30:d0:87:65:2c:2b:0d:29:67:
c7:a6:ef:e4:b5:89:c7:61:3a:e1:7b:a0:ff:1d:d2:54:79:57:
31:d7:46:51:9d:3c:2c:e7:e4:1e:49:6c:15:b3:10:e6:a0:8b:
a5:54:b0:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw6Au7/1D1DC1/x53bX34TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2M5YTYwMzBmMjYwNmE0Y2QxNzExZWYyNDk0MDZjOTMyNzRkMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LcZ3HF/EqGl6GmFBK/RsCG5Js19
q4VWwFMUsIu7czm84o3gramk55Qe1fzZcAhEYe9lIyH0bka7DtLkmmGJ7hCF4ceq
f5uvUZ1we5BQ7XOBpQk+2+xAVxdoSHSSHT4eH47IUQInsgA6JfUbuAawuXNy4RtJ
MBozzDln8iqLqj+TtLyiOZSllsidk3GSH3etVhibkaqOhb7kCdpTusmJPjprdEEo
Gh11uDD7MUE+zWxbAYTZKOCANNMaI3jrxnF2bdLNuziaX/uqhetwuct6IBs9LPNg
7w+rZzLhrOs+m0+i9/6ReSI+pVxouml27EEV98ITCy5f+KzRe76EZiYT9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDfJpgMPJgakzRcR7ySUBskydNCjMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTjhtbUF3OG1CcVRORnhIdkpKUUd5VEowMEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAJA
AwcEKg6XwQEQMA0GCSqGSIb3DQEBCwUAA4IBAQBW/tB424C7dUD4SidN9C9jRLVc
vn1wFccDFEF8vc7iCi4Yb0RprAzyR5hCNCH/vusbfbna/h5Qwm+Lz9UcOpfvpTHG
5ftCI9AD3lFHQMCe+Rcan75XOv+Jk7eGK5oDhYa2bsReDXr9fV139ZJizJfm3EQ+
4/jlGwqFdOBqqoFAFxJ5KBm6VpTvIXstO2Wcsch2RjHExFvgBpgioa376FrBw2Yr
AEngaAEOxXOu/WAHNq/B6k5aRRyEEefRAsBzj15loYBhuVV8R+G8PruoFs0w0Idl
LCsNKWfHpu/ktYnHYTrhe6D/HdJUeVcx10ZRnTws5+QeSWwVsxDmoIulVLCH
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:30 2024 by rpki-client on console-fra.rpki-client.org