Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qu7vQPS4YY6iVNO8P-w0NbOi-sE.roa
File: Qu7vQPS4YY6iVNO8P-w0NbOi-sE.roa (raw, json)
Hash identifier: olSRdtduUWuduYzczAqKzE1kKimIx/mA++27pABMsqM=
Subject key identifier: 42:EE:EF:40:F4:B8:61:8E:A2:54:D3:BC:3F:EC:34:35:B3:A2:FA:C1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01898BF4DBF89BE05D500A4614286754B593
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qu7vQPS4YY6iVNO8P-w0NbOi-sE.roa
Signing time: Tue 25 Jul 2023 07:30:27 +0000
ROA not before: Tue 25 Jul 2023 07:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24381
IP address blocks: 2a0e:b107:2228::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:f4:db:f8:9b:e0:5d:50:0a:46:14:28:67:54:b5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 25 07:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42eeef40f4b8618ea254d3bc3fec3435b3a2fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:4e:d8:e5:02:91:4d:44:40:14:f0:ef:90:
61:a6:2a:ee:ce:1c:82:c8:15:9b:ca:ef:bf:da:ac:
df:40:bd:48:54:06:cf:ac:73:ac:57:b2:ad:80:73:
b7:c0:1f:f9:30:8e:04:e5:26:33:e9:20:fc:49:fb:
27:b5:25:61:02:71:fd:79:30:02:9f:dc:ad:16:29:
b5:31:fc:6b:f9:c0:fb:a1:12:a4:18:4e:74:d1:89:
8f:1a:4e:9d:de:c0:27:b1:5e:c5:5f:2a:b3:18:69:
60:6c:90:ac:d7:0d:df:0a:7e:92:7d:66:c6:4c:6d:
a0:ba:ba:07:6e:8b:c0:d9:32:01:7e:da:44:a7:3a:
53:53:78:4f:00:9e:a7:2e:f9:d2:af:cf:15:cf:a1:
1e:d4:c4:c2:e3:5b:a9:ee:08:3a:70:46:d1:4e:e2:
4a:d1:df:be:0d:55:bc:14:3a:eb:97:84:d2:51:37:
d1:9c:d3:98:f1:02:ba:f7:f4:86:54:92:38:d5:f9:
84:36:53:02:11:73:85:d5:3d:ef:d5:d6:2a:46:0c:
f5:9e:29:41:6f:d6:d9:22:0f:71:3a:19:7e:6d:6f:
d8:c0:02:7d:28:4d:42:ba:5a:eb:35:7c:0d:8c:3e:
b5:16:35:98:7e:a7:e4:64:39:25:41:6f:c7:b6:78:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:EF:40:F4:B8:61:8E:A2:54:D3:BC:3F:EC:34:35:B3:A2:FA:C1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qu7vQPS4YY6iVNO8P-w0NbOi-sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
22:27:fa:f1:98:7f:13:18:e0:e9:10:0d:bb:6a:c3:12:51:29:
38:02:ec:aa:92:7e:89:c4:36:c8:c9:b6:ff:a3:8e:73:ca:f0:
a2:c4:52:29:5a:db:b0:79:5b:ca:e8:04:df:74:ed:a1:e3:81:
e2:4e:53:ae:ed:91:c8:c8:3d:1e:f3:11:ae:ec:2f:28:39:bf:
fd:6b:4b:a6:ee:51:60:05:95:c2:60:98:e0:08:7c:49:46:da:
1d:c8:39:d5:70:12:be:dc:ad:7b:a2:e2:01:1a:aa:97:c2:ce:
98:f7:c7:1e:16:54:02:85:2f:49:d6:74:41:1d:2d:3e:bd:4e:
f2:ba:86:29:73:69:9d:99:66:c7:06:90:c6:15:53:c1:f2:a2:
1a:7f:5d:2a:a4:20:91:be:7f:7b:88:35:80:a1:b3:bc:38:e6:
2c:c2:34:db:2d:f9:4b:04:43:2c:0b:a8:82:da:1b:a6:e4:c0:
d8:03:cc:07:b4:16:ab:b2:d3:ec:89:ff:1f:5d:22:9c:45:9f:
c4:b5:bd:64:62:ed:81:13:7b:6a:a7:b3:bc:dc:17:78:5c:f8:
6b:b9:11:85:dd:d7:e5:df:b4:5f:87:93:ea:4a:5f:73:51:11:
f7:36:21:9b:3d:e4:7f:11:8a:1f:ec:9b:07:e0:3b:fd:0a:22:
22:23:fa:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYmL9Nv4m+BdUApGFChnVLWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzI1MDczMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmVlZWY0MGY0Yjg2MThlYTI1NGQzYmMzZmVjMzQzNWIzYTJmYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptFO2OUCkU1EQBTw75BhpiruzhyC
yBWbyu+/2qzfQL1IVAbPrHOsV7KtgHO3wB/5MI4E5SYz6SD8SfsntSVhAnH9eTAC
n9ytFim1Mfxr+cD7oRKkGE500YmPGk6d3sAnsV7FXyqzGGlgbJCs1w3fCn6SfWbG
TG2guroHbovA2TIBftpEpzpTU3hPAJ6nLvnSr88Vz6Ee1MTC41up7gg6cEbRTuJK
0d++DVW8FDrrl4TSUTfRnNOY8QK69/SGVJI41fmENlMCEXOF1T3v1dYqRgz1nilB
b9bZIg9xOhl+bW/YwAJ9KE1CulrrNXwNjD61FjWYfqfkZDklQW/HtngNZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFELu70D0uGGOolTTvD/sNDWzovrBMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUXU3dlFQUzRZWTZpVk5POFAtdzBOYk9pLXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByIg
MA0GCSqGSIb3DQEBCwUAA4IBAQAiJ/rxmH8TGODpEA27asMSUSk4Auyqkn6JxDbI
ybb/o45zyvCixFIpWtuweVvK6ATfdO2h44HiTlOu7ZHIyD0e8xGu7C8oOb/9a0um
7lFgBZXCYJjgCHxJRtodyDnVcBK+3K17ouIBGqqXws6Y98ceFlQChS9J1nRBHS0+
vU7yuoYpc2mdmWbHBpDGFVPB8qIaf10qpCCRvn97iDWAobO8OOYswjTbLflLBEMs
C6iC2hum5MDYA8wHtBarstPsif8fXSKcRZ/Etb1kYu2BE3tqp7O83Bd4XPhruRGF
3dfl37Rfh5PqSl9zURH3NiGbPeR/EYof7JsH4Dv9CiIiI/qF
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org