Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa
File: PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa (raw, json)
Hash identifier: LZxpU1rH7z18ygmgz1DUhjYQlGWtIXbG1GNusPDHNWY=
Subject key identifier: 3D:15:21:67:57:34:AA:DA:6F:17:8B:73:4A:73:6E:1C:FB:05:AA:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E3D7CB0DB73738FFFA9D4AFB28BC3AD15
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa
Signing time: Thu 14 Mar 2024 15:02:45 +0000
ROA not before: Thu 14 Mar 2024 15:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 2a10:ccc3:ccc0::/46 maxlen: 48
2a10:ccc3:ccc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 14:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:7c:b0:db:73:73:8f:ff:a9:d4:af:b2:8b:c3:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 14 15:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d1521675734aada6f178b734a736e1cfb05aa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:2f:23:05:ee:9c:f4:64:d4:18:6f:2a:92:
8a:f4:6b:89:15:5d:ea:7e:7b:ce:6e:0d:a8:56:90:
bb:8b:6f:c3:91:83:42:2d:bb:b6:b7:9f:cf:5a:68:
4f:f0:5e:1f:b7:a8:21:02:1a:82:6f:f8:7d:d6:97:
59:5f:9a:77:51:ec:80:d1:7d:d0:97:4d:9a:0f:3c:
63:ec:ec:7d:d2:45:c1:c7:fb:9e:06:7d:01:ab:a1:
d3:02:de:c8:9d:db:2c:7f:08:c1:fa:f7:c0:d7:1d:
73:f2:2a:1f:3d:89:45:83:56:63:c2:3d:3f:15:a7:
f3:f2:12:0f:ec:7f:4b:1e:c4:03:44:99:eb:8a:6a:
61:68:a6:d8:67:2e:7d:04:9c:87:d1:27:1f:ee:ba:
3d:ad:e9:f5:5b:e9:73:6d:db:d5:c1:2b:f9:74:fb:
50:c4:6a:be:21:aa:94:b3:2f:f5:ac:af:dd:af:5a:
8a:a7:83:a0:1b:38:af:54:27:37:34:e5:47:19:4a:
50:80:e6:dd:67:4f:5f:46:bb:0c:d4:bc:ec:81:84:
57:66:52:4f:8c:ac:3e:7a:a7:e8:4f:ab:e5:b3:68:
71:3e:2f:27:a8:1f:d9:b2:ca:86:5e:3f:48:fe:96:
c7:f6:97:9d:dc:c3:65:4f:54:5d:fb:0a:8b:91:b9:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:15:21:67:57:34:AA:DA:6F:17:8B:73:4A:73:6E:1C:FB:05:AA:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ccc0::/46
2a10:ccc3:ccc6::/48
Signature Algorithm: sha256WithRSAEncryption
c1:eb:3f:67:65:b7:16:75:e5:16:7f:13:4f:cc:2d:07:75:20:
22:6b:2c:d2:c3:f2:df:4a:ed:ec:41:82:24:83:85:97:f9:f8:
06:e8:a4:8e:5e:a6:b9:6d:69:ce:54:c0:c3:b3:be:20:b8:72:
48:c8:94:9b:ab:aa:23:b9:3f:7c:91:64:fe:c6:c9:74:ab:26:
b6:16:47:4f:3b:66:ed:e3:34:ad:0e:46:43:10:a7:61:3e:35:
14:3d:1f:3e:89:95:e6:a6:bf:19:f9:98:34:ec:16:bf:f4:ec:
18:4d:8e:d8:c2:1b:95:26:7f:85:39:5e:54:86:39:62:18:a2:
c9:ad:6a:3d:a6:c7:4e:67:66:ca:f8:bc:8a:3f:27:b5:cd:aa:
18:3d:7d:50:50:f2:fb:a9:e2:f9:80:da:85:78:98:a3:fa:0c:
b1:50:36:59:b3:bf:ac:24:d3:a9:87:3e:98:f7:e1:a3:d4:5a:
3a:3f:4a:f7:23:95:c7:87:05:ab:c5:ca:fd:04:b8:2c:f4:65:
50:13:21:70:69:ab:ed:12:8d:1e:5b:b8:7f:9e:d7:d9:ac:45:
3a:a5:24:f2:73:e6:36:ef:24:c4:04:b9:a3:77:32:a7:d6:db:
9f:ae:29:37:c1:04:45:90:1d:94:02:e5:db:c0:f0:93:53:47:
ef:1f:37:cf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY49fLDbc3OP/6nUr7KLw60VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMzE0MTUwMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE1MjE2NzU3MzRhYWRhNmYxNzhiNzM0YTczNmUxY2ZiMDVhYTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIUvIwXunPRk1BhvKpKK9GuJFV3q
fnvObg2oVpC7i2/DkYNCLbu2t5/PWmhP8F4ft6ghAhqCb/h91pdZX5p3UeyA0X3Q
l02aDzxj7Ox90kXBx/ueBn0Bq6HTAt7IndssfwjB+vfA1x1z8iofPYlFg1Zjwj0/
Fafz8hIP7H9LHsQDRJnrimphaKbYZy59BJyH0Scf7ro9ren1W+lzbdvVwSv5dPtQ
xGq+IaqUsy/1rK/dr1qKp4OgGzivVCc3NOVHGUpQgObdZ09fRrsM1LzsgYRXZlJP
jKw+eqfoT6vls2hxPi8nqB/ZssqGXj9I/pbH9ped3MNlT1Rd+wqLkbnvsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD0VIWdXNKrabxeLc0pzbhz7BaprMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUFJVaFoxYzBxdHB2RjR0elNuTnVIUHNGcW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcCKhDMw8zA
AwcAKhDMw8zGMA0GCSqGSIb3DQEBCwUAA4IBAQDB6z9nZbcWdeUWfxNPzC0HdSAi
ayzSw/LfSu3sQYIkg4WX+fgG6KSOXqa5bWnOVMDDs74guHJIyJSbq6ojuT98kWT+
xsl0qya2FkdPO2bt4zStDkZDEKdhPjUUPR8+iZXmpr8Z+Zg07Ba/9OwYTY7YwhuV
Jn+FOV5UhjliGKLJrWo9psdOZ2bK+LyKPye1zaoYPX1QUPL7qeL5gNqFeJij+gyx
UDZZs7+sJNOphz6Y9+Gj1Fo6P0r3I5XHhwWrxcr9BLgs9GVQEyFwaavtEo0eW7h/
ntfZrEU6pSTyc+Y27yTEBLmjdzKn1tufrik3wQRFkB2UAuXbwPCTU0fvHzfP
-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org