Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R8OgKd3jZ9WOeU9b-0EAheh7R2g.roa
File: R8OgKd3jZ9WOeU9b-0EAheh7R2g.roa (raw, json)
Hash identifier: fJA8kK7vVcV0DgG05ekt3v8WokmbnoqxthaNu9F54do=
Subject key identifier: 47:C3:A0:29:DD:E3:67:D5:8E:79:4F:5B:FB:41:00:85:E8:7B:47:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF2E2A2CFE9209B0A6BE558EF3E78
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R8OgKd3jZ9WOeU9b-0EAheh7R2g.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211184
IP address blocks: 2a0e:b107:1940::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f2:e2:a2:cf:e9:20:9b:0a:6b:e5:58:ef:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c3a029dde367d58e794f5bfb410085e87b4768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:93:df:a0:b1:b7:df:99:ab:1f:99:fc:4b:
1f:65:93:43:ab:4c:36:d6:02:f9:11:9f:df:c9:92:
55:35:e6:d7:d9:2b:29:2d:7d:d6:7f:76:e4:ba:ca:
11:f7:8f:38:c4:1b:68:30:9b:ea:fc:71:f1:73:fb:
f4:b0:b1:ba:16:a3:5a:ef:c0:06:c2:ee:6f:33:05:
20:98:bb:37:e3:51:7c:b6:98:6f:d7:3c:7a:93:a2:
af:b0:a6:5f:84:63:2b:cc:0e:fc:c6:4a:32:95:28:
68:15:8b:93:6c:03:60:5d:8d:f6:b5:f3:ba:3c:02:
7f:da:c3:53:77:f1:fc:55:4b:f1:39:63:83:bf:8d:
18:9f:dd:23:6b:ff:39:9e:b4:a1:72:53:26:8f:9b:
8a:8f:11:82:75:0a:31:0c:21:33:c4:ac:3b:24:55:
52:76:08:00:71:34:26:36:8a:76:7c:65:b9:80:15:
15:19:09:c5:32:a7:a2:e4:a6:7f:6a:e3:67:9b:b1:
f5:a7:83:27:65:11:5c:13:b5:5a:a4:ff:37:cf:6a:
60:44:43:d4:bc:fd:b0:e7:05:02:e5:10:5e:d4:fa:
d1:88:76:05:cc:f5:29:dd:42:fc:8d:66:b9:34:26:
21:8a:d1:7a:04:34:1c:bb:74:63:e5:74:28:02:f3:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C3:A0:29:DD:E3:67:D5:8E:79:4F:5B:FB:41:00:85:E8:7B:47:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R8OgKd3jZ9WOeU9b-0EAheh7R2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1940::/44
Signature Algorithm: sha256WithRSAEncryption
29:f7:4c:48:2a:77:f9:7a:0e:9b:da:b8:d4:07:63:8f:fc:66:
69:fd:0d:3e:3d:27:f8:12:5c:25:e4:1a:2a:57:a7:ba:35:45:
8f:81:03:1a:93:df:77:6a:0d:34:65:d6:5c:94:a3:9b:37:dc:
76:fa:a8:dc:b0:cf:8e:15:37:39:f7:3d:1c:ca:78:fe:ab:6f:
19:fe:e4:53:2f:99:63:7e:a3:fe:bf:e7:93:de:43:e1:0d:db:
3c:97:e7:ee:50:09:94:c7:a1:ae:d4:ad:71:e8:7b:b4:91:ea:
2f:63:f0:13:ad:98:76:7c:8e:d7:61:2d:58:9b:c0:b2:4f:1f:
32:8b:d7:04:f0:15:7f:08:0f:7d:ca:7f:64:ea:fc:50:db:f0:
13:f7:5e:64:11:de:25:03:20:66:f9:8e:f2:70:85:c9:51:7f:
37:e9:47:cf:f2:13:1d:a2:9f:2d:46:fc:76:8d:ab:f0:c3:1f:
9d:bf:8f:ba:a0:dd:a3:ac:99:45:3e:92:db:05:79:98:f5:bd:
f2:b1:d3:61:a3:ee:47:6b:b1:09:84:ca:a5:53:a6:a1:35:23:
4b:a8:4f:73:7f:5c:a8:1c:d5:40:ba:58:f4:c4:40:e3:ed:94:
36:fc:99:b9:73:3a:4e:91:b7:b1:9d:83:9c:7d:09:6a:bf:08:
75:33:bb:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkivLios/pIJsKa+VY7z54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2MzYTAyOWRkZTM2N2Q1OGU3OTRmNWJmYjQxMDA4NWU4N2I0NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgCT36Cxt9+Zqx+Z/EsfZZNDq0w2
1gL5EZ/fyZJVNebX2SspLX3Wf3bkusoR9484xBtoMJvq/HHxc/v0sLG6FqNa78AG
wu5vMwUgmLs341F8tphv1zx6k6KvsKZfhGMrzA78xkoylShoFYuTbANgXY32tfO6
PAJ/2sNTd/H8VUvxOWODv40Yn90ja/85nrShclMmj5uKjxGCdQoxDCEzxKw7JFVS
dggAcTQmNop2fGW5gBUVGQnFMqei5KZ/auNnm7H1p4MnZRFcE7VapP83z2pgREPU
vP2w5wUC5RBe1PrRiHYFzPUp3UL8jWa5NCYhitF6BDQcu3Rj5XQoAvMo7wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEfDoCnd42fVjnlPW/tBAIXoe0doMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUjhPZ0tkM2paOVdPZVU5Yi0wRUFoZWg3UjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxlA
MA0GCSqGSIb3DQEBCwUAA4IBAQAp90xIKnf5eg6b2rjUB2OP/GZp/Q0+PSf4Elwl
5BoqV6e6NUWPgQMak993ag00ZdZclKObN9x2+qjcsM+OFTc59z0cynj+q28Z/uRT
L5ljfqP+v+eT3kPhDds8l+fuUAmUx6Gu1K1x6Hu0keovY/ATrZh2fI7XYS1Ym8Cy
Tx8yi9cE8BV/CA99yn9k6vxQ2/AT915kEd4lAyBm+Y7ycIXJUX836UfP8hMdop8t
Rvx2javwwx+dv4+6oN2jrJlFPpLbBXmY9b3ysdNho+5Ha7EJhMqlU6ahNSNLqE9z
f1yoHNVAulj0xEDj7ZQ2/Jm5czpOkbexnYOcfQlqvwh1M7uz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org