Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R5Yro5tK3Wz40dQrmLcjA7AiIwU.roa
File: R5Yro5tK3Wz40dQrmLcjA7AiIwU.roa (raw, json)
Hash identifier: RAHy0dTRpVfr0vq77/XqNxxX+lPNRiDuiiP7Pos5W0U=
Subject key identifier: 47:96:2B:A3:9B:4A:DD:6C:F8:D1:D4:2B:98:B7:23:03:B0:22:23:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C115A2DBB0C300318A6277432526
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R5Yro5tK3Wz40dQrmLcjA7AiIwU.roa
Signing time: Mon 02 Jan 2023 05:15:14 +0000
ROA not before: Mon 02 Jan 2023 05:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204901
IP address blocks: 2a0e:b107:f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c1:15:a2:db:b0:c3:00:31:8a:62:77:43:25:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47962ba39b4add6cf8d1d42b98b72303b0222305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:df:4d:56:db:e9:e0:bc:da:07:1c:8f:19:
f4:63:69:ba:34:41:a6:3d:9e:84:79:bd:02:1e:95:
b0:61:52:7b:18:4a:c8:06:e7:8b:b5:d6:86:f1:17:
11:e3:dd:01:b7:71:fd:59:3e:ef:20:9a:25:20:af:
d3:4e:4f:2c:e9:db:88:81:c9:94:44:20:59:06:7c:
9d:ef:4c:d0:7b:9a:da:1d:85:84:97:81:77:0c:c3:
90:18:fc:1a:01:b8:e8:49:bd:8a:5b:f7:60:b0:15:
f5:55:6e:5d:05:c6:bd:8d:22:de:3c:12:e1:36:b4:
9d:10:a2:05:a8:d0:1b:1c:b8:1a:25:57:3c:53:65:
ce:b1:c8:03:11:40:67:ba:b0:0c:32:bf:d5:33:55:
95:53:55:7c:cd:af:fd:73:b3:41:80:40:f2:8b:04:
b6:21:22:f3:a8:0c:aa:f8:94:21:5c:2f:3c:f1:a4:
e3:01:d8:19:6b:61:f9:32:27:49:d8:46:37:d0:27:
67:8e:87:86:fa:4d:04:b3:f9:30:d9:6a:21:fb:7e:
7f:38:55:74:15:f6:3f:79:ca:27:5d:63:f0:62:9d:
13:75:e2:9f:62:47:1b:d6:17:11:a1:37:8a:a9:c2:
6f:0d:c2:bf:4d:4c:f4:68:53:dc:b3:ca:8f:5c:4b:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:96:2B:A3:9B:4A:DD:6C:F8:D1:D4:2B:98:B7:23:03:B0:22:23:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R5Yro5tK3Wz40dQrmLcjA7AiIwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f0::/44
Signature Algorithm: sha256WithRSAEncryption
79:27:2f:c2:2e:c8:17:63:80:4d:0b:4a:e5:4f:43:b5:7a:c3:
63:f2:74:e6:b5:3e:0f:a3:14:5e:06:2f:cd:22:fd:92:ee:2b:
0f:3f:2b:17:1b:97:9b:9a:8b:78:ee:97:01:8b:67:77:1e:bf:
5e:a4:ed:ad:9c:2f:85:71:5c:35:33:2c:28:43:22:31:f3:70:
0d:d9:47:cf:88:2d:10:29:e2:4e:35:f5:ab:0f:da:2f:30:81:
eb:5b:18:d1:2f:6b:27:f9:86:4b:09:64:c8:c7:32:a4:6c:e4:
94:f4:6a:0f:01:7e:ee:02:99:9d:f4:72:2c:59:02:db:cd:44:
62:58:bd:af:86:57:fa:cf:cb:38:71:f0:28:f3:90:b2:bd:43:
04:74:1b:9b:1f:93:00:61:16:9b:1a:67:d3:98:b6:7f:f6:c3:
5c:47:8c:0a:8f:1b:32:c8:c5:03:17:3a:30:e1:73:b8:54:2f:
8b:3f:44:f7:4f:cd:f4:a4:dc:f3:d4:ab:cd:08:15:a6:ef:f7:
bc:76:39:78:5e:b7:39:7d:b2:da:88:f7:0f:d6:e5:82:e6:b8:
ae:d4:ab:4a:65:16:9d:28:69:45:58:4e:4c:40:18:b5:83:e3:
c9:b1:c5:32:17:bf:93:c6:34:10:10:ea:f9:3c:22:90:5d:3d:
56:4a:20:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw58EVotuwwwAximJ3QyUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzk2MmJhMzliNGFkZDZjZjhkMWQ0MmI5OGI3MjMwM2IwMjIyMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrbfTVbb6eC82gccjxn0Y2m6NEGm
PZ6Eeb0CHpWwYVJ7GErIBueLtdaG8RcR490Bt3H9WT7vIJolIK/TTk8s6duIgcmU
RCBZBnyd70zQe5raHYWEl4F3DMOQGPwaAbjoSb2KW/dgsBX1VW5dBca9jSLePBLh
NrSdEKIFqNAbHLgaJVc8U2XOscgDEUBnurAMMr/VM1WVU1V8za/9c7NBgEDyiwS2
ISLzqAyq+JQhXC888aTjAdgZa2H5MidJ2EY30CdnjoeG+k0Es/kw2Woh+35/OFV0
FfY/econXWPwYp0TdeKfYkcb1hcRoTeKqcJvDcK/TUz0aFPcs8qPXEvz1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEeWK6ObSt1s+NHUK5i3IwOwIiMFMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUjVZcm81dEszV3o0MGRRcm1MY2pBN0FpSXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDw
MA0GCSqGSIb3DQEBCwUAA4IBAQB5Jy/CLsgXY4BNC0rlT0O1esNj8nTmtT4PoxRe
Bi/NIv2S7isPPysXG5ebmot47pcBi2d3Hr9epO2tnC+FcVw1MywoQyIx83AN2UfP
iC0QKeJONfWrD9ovMIHrWxjRL2sn+YZLCWTIxzKkbOSU9GoPAX7uApmd9HIsWQLb
zURiWL2vhlf6z8s4cfAo85CyvUMEdBubH5MAYRabGmfTmLZ/9sNcR4wKjxsyyMUD
Fzow4XO4VC+LP0T3T830pNzz1KvNCBWm7/e8djl4Xrc5fbLaiPcP1uWC5riu1KtK
ZRadKGlFWE5MQBi1g+PJscUyF7+TxjQQEOr5PCKQXT1WSiD6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org