Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPz5p5pW8h9EaIxKNaONODASSp8.roa
File: UPz5p5pW8h9EaIxKNaONODASSp8.roa (raw, json)
Hash identifier: x9yloyGppJ221tcIO6G1mq1nGOc7c4GViTWhHr+Uvhs=
Subject key identifier: 50:FC:F9:A7:9A:56:F2:1F:44:68:8C:4A:35:A3:8D:38:30:12:4A:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186C5261D024A1B58EDFCA6EED424DE5C25
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPz5p5pW8h9EaIxKNaONODASSp8.roa
Signing time: Thu 09 Mar 2023 06:54:14 +0000
ROA not before: Thu 09 Mar 2023 06:54:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18041
IP address blocks: 2a0e:b107:1310::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:26:1d:02:4a:1b:58:ed:fc:a6:ee:d4:24:de:5c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 9 06:54:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50fcf9a79a56f21f44688c4a35a38d3830124a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:a5:bd:1b:4e:7d:a6:c5:42:aa:d4:3b:16:
e7:54:56:1d:0f:d2:f2:30:12:22:5e:fe:2a:43:d3:
65:32:b7:eb:c0:85:81:cf:f6:3b:6d:50:d1:ba:a1:
c2:73:fd:29:f6:4e:a6:31:7e:b9:47:ca:a4:a2:93:
fd:f0:59:70:d5:f7:f8:47:27:50:cd:76:47:7d:9e:
12:24:74:81:ac:c3:10:46:30:6b:be:5f:5a:dd:96:
ee:2b:e5:a9:69:b4:08:fe:a8:48:55:cb:84:ea:aa:
58:78:8c:7a:39:4d:a6:79:65:4a:bf:da:e9:44:d8:
36:3d:b9:23:bc:10:8f:cc:ac:60:34:ff:d5:37:eb:
a0:85:65:79:08:ca:03:fd:d7:5c:de:a9:98:eb:59:
34:02:a0:94:55:2b:00:3d:58:63:fa:77:40:a4:73:
98:c9:34:d2:58:35:aa:50:aa:6f:29:09:19:08:04:
dd:4c:35:9f:6a:f0:af:b4:e2:4e:3f:19:d4:16:84:
e6:0a:ae:74:6d:cb:1d:6b:ae:14:5f:95:74:11:cc:
a2:39:c7:3b:fa:39:25:63:d1:4c:f7:4b:33:89:50:
e5:da:7d:cb:19:37:09:07:94:95:6b:91:05:76:a6:
19:d2:a4:08:19:fc:e7:1c:43:57:c0:72:8b:32:95:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:F9:A7:9A:56:F2:1F:44:68:8C:4A:35:A3:8D:38:30:12:4A:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UPz5p5pW8h9EaIxKNaONODASSp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1310::/44
Signature Algorithm: sha256WithRSAEncryption
7b:60:b7:7f:72:84:93:15:97:d2:25:ca:eb:41:e1:3f:94:57:
48:1b:41:15:12:d8:2b:7c:6a:f5:c1:45:57:51:bf:5e:d8:c5:
0a:11:66:0d:02:de:75:69:d0:16:29:38:e6:dc:04:a8:6f:ab:
7d:7a:1d:4e:46:d1:da:b4:fd:59:e8:b1:30:fd:4e:93:38:1a:
5b:c9:53:3d:15:04:63:e6:c1:cf:7e:74:87:f2:a2:94:8f:f5:
e5:df:bf:7d:5e:96:12:8d:a6:4d:3b:e2:c0:f8:04:b3:1e:c1:
4c:c2:2f:15:9e:8a:2d:84:59:ff:55:6a:8e:fc:c0:81:3c:96:
ea:7d:1e:07:1b:43:bc:a9:f6:86:c5:4f:3c:2f:a0:b1:0a:01:
ae:fc:75:86:37:2e:31:ec:54:1c:8d:2c:3b:4e:b9:11:a5:e4:
48:1b:ff:91:c9:05:3d:1a:11:42:23:93:96:b2:9e:af:2a:18:
a3:1e:f6:44:c4:f8:98:94:29:7f:a5:95:cb:3e:f3:16:09:fb:
00:e6:74:a9:97:66:3a:33:f2:32:61:11:58:23:38:85:9c:5a:
97:9a:19:b9:d6:82:e0:08:82:d2:a1:18:46:3a:04:d5:90:c2:
39:a2:ff:e1:6b:7e:ce:da:09:93:15:83:bc:57:85:3c:aa:9b:
2e:88:fe:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYbFJh0CShtY7fym7tQk3lwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzA5MDY1NDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGZjZjlhNzlhNTZmMjFmNDQ2ODhjNGEzNWEzOGQzODMwMTI0YTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvelvRtOfabFQqrUOxbnVFYdD9Ly
MBIiXv4qQ9NlMrfrwIWBz/Y7bVDRuqHCc/0p9k6mMX65R8qkopP98Flw1ff4RydQ
zXZHfZ4SJHSBrMMQRjBrvl9a3ZbuK+WpabQI/qhIVcuE6qpYeIx6OU2meWVKv9rp
RNg2PbkjvBCPzKxgNP/VN+ughWV5CMoD/ddc3qmY61k0AqCUVSsAPVhj+ndApHOY
yTTSWDWqUKpvKQkZCATdTDWfavCvtOJOPxnUFoTmCq50bcsda64UX5V0EcyiOcc7
+jklY9FM90sziVDl2n3LGTcJB5SVa5EFdqYZ0qQIGfznHENXwHKLMpXlRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFD8+aeaVvIfRGiMSjWjjTgwEkqfMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVVB6NXA1cFc4aDlFYUl4S05hT05PREFTU3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxMQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB7YLd/coSTFZfSJcrrQeE/lFdIG0EVEtgrfGr1
wUVXUb9e2MUKEWYNAt51adAWKTjm3ASob6t9eh1ORtHatP1Z6LEw/U6TOBpbyVM9
FQRj5sHPfnSH8qKUj/Xl3799XpYSjaZNO+LA+ASzHsFMwi8VnoothFn/VWqO/MCB
PJbqfR4HG0O8qfaGxU88L6CxCgGu/HWGNy4x7FQcjSw7TrkRpeRIG/+RyQU9GhFC
I5OWsp6vKhijHvZExPiYlCl/pZXLPvMWCfsA5nSpl2Y6M/IyYRFYIziFnFqXmhm5
1oLgCILSoRhGOgTVkMI5ov/ha37O2gmTFYO8V4U8qpsuiP60
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org