Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-k6iC8k4YsYdv8acMeKUvQCbyU.roa
File: V-k6iC8k4YsYdv8acMeKUvQCbyU.roa (raw, json)
Hash identifier: nZAnUqRGF+L1PfE5qginOIVTrHazp6CXjEyrpM2fJmo=
Subject key identifier: 57:E9:3A:88:2F:24:E1:8B:18:76:FF:1A:70:C7:8A:52:F4:02:6F:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F2B1C60685B589B1E03AA3CF1E17
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-k6iC8k4YsYdv8acMeKUvQCbyU.roa
Signing time: Mon 02 Jan 2023 05:15:27 +0000
ROA not before: Mon 02 Jan 2023 05:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210836
IP address blocks: 2a0e:97c0:750::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f2:b1:c6:06:85:b5:89:b1:e0:3a:a3:cf:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e93a882f24e18b1876ff1a70c78a52f4026f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:10:10:35:6a:38:37:e8:d2:d2:41:df:33:
55:9c:2b:89:dc:64:1e:38:97:d7:99:92:70:10:e0:
1a:fa:63:9c:72:f7:0c:0b:87:d7:03:35:06:f9:02:
36:22:1f:b5:cd:e7:6b:43:c5:8f:b5:33:94:ec:f1:
d2:a5:32:42:17:0f:86:ab:16:f9:c0:27:c5:9c:cc:
0b:98:74:dc:de:ea:c0:fd:73:95:20:ff:19:04:8b:
d9:6f:ac:15:86:12:e6:e2:92:e1:a3:3f:43:ce:8f:
c4:dd:b1:16:2f:7b:a8:5f:72:2d:e1:b8:d1:96:ab:
e6:d8:78:2a:dc:65:a9:69:d8:1d:24:fe:3c:06:4e:
29:d6:06:e8:2d:88:67:2c:e8:8e:b4:b6:41:8f:32:
e0:e4:01:b3:05:aa:89:92:30:67:a0:6c:4a:58:b0:
f3:22:66:ad:6f:f2:f1:90:68:1c:8b:66:62:65:61:
4a:df:b9:26:0d:c3:99:6d:68:c1:f9:5f:96:54:c6:
02:14:eb:fe:78:71:14:36:08:1e:b3:75:62:2f:f7:
f8:f8:cc:2a:f7:63:78:a0:96:05:cd:db:86:6c:35:
40:8d:9e:70:71:a0:c4:07:56:6c:f1:d0:67:bd:16:
31:39:71:70:d0:7e:ed:a7:2c:62:31:20:98:05:71:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E9:3A:88:2F:24:E1:8B:18:76:FF:1A:70:C7:8A:52:F4:02:6F:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-k6iC8k4YsYdv8acMeKUvQCbyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:750::/44
Signature Algorithm: sha256WithRSAEncryption
38:c0:72:8e:67:7c:7a:87:e8:81:94:2b:c7:36:af:3c:33:8c:
b0:fb:3e:75:24:46:d5:9d:7b:b3:f9:e9:6b:a4:a1:2d:98:bc:
51:53:22:ac:08:9b:67:ac:49:58:1b:a6:f3:5f:82:e8:cb:83:
b8:6d:4b:0b:57:83:f7:6f:2a:4d:f7:50:5c:8e:43:36:24:9a:
85:58:9c:27:91:6b:4e:f0:c5:44:92:9e:23:7b:53:6a:c3:51:
9c:a2:44:e9:97:2c:0c:4b:6b:22:4e:4b:13:70:f8:99:48:d6:
5b:d3:84:9e:c0:38:82:95:78:47:0c:f6:c6:2f:18:58:6c:2a:
71:14:d0:7c:8d:8f:92:cf:2e:27:ec:88:03:f5:e9:ab:16:18:
07:45:17:7c:ed:4c:08:e1:af:0a:66:df:c9:47:04:53:55:8e:
28:43:c0:a8:69:87:b6:43:c6:12:d2:42:01:96:f9:14:73:cf:
db:31:80:14:2e:d3:90:f2:5b:b1:ab:c5:1b:70:b6:00:dc:21:
ce:d3:20:64:52:dd:62:3e:fd:0e:d5:77:fd:b7:e2:0d:12:70:
9d:d8:96:32:59:66:fd:24:c8:c8:76:bc:36:93:4c:4a:e4:b3:
c8:84:5f:40:5e:e8:b6:3e:f3:60:0a:6c:1d:17:20:ea:a4:2c:
4b:93:99:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5/KxxgaFtYmx4Dqjzx4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2U5M2E4ODJmMjRlMThiMTg3NmZmMWE3MGM3OGE1MmY0MDI2ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitIQEDVqODfo0tJB3zNVnCuJ3GQe
OJfXmZJwEOAa+mOccvcMC4fXAzUG+QI2Ih+1zedrQ8WPtTOU7PHSpTJCFw+Gqxb5
wCfFnMwLmHTc3urA/XOVIP8ZBIvZb6wVhhLm4pLhoz9Dzo/E3bEWL3uoX3It4bjR
lqvm2Hgq3GWpadgdJP48Bk4p1gboLYhnLOiOtLZBjzLg5AGzBaqJkjBnoGxKWLDz
Imatb/LxkGgci2ZiZWFK37kmDcOZbWjB+V+WVMYCFOv+eHEUNgges3ViL/f4+Mwq
92N4oJYFzduGbDVAjZ5wcaDEB1Zs8dBnvRYxOXFw0H7tpyxiMSCYBXGFewIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFfpOogvJOGLGHb/GnDHilL0Am8lMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVi1rNmlDOGs0WXNZZHY4YWNNZUtVdlFDYnlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAdQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA4wHKOZ3x6h+iBlCvHNq88M4yw+z51JEbVnXuz
+elrpKEtmLxRUyKsCJtnrElYG6bzX4Loy4O4bUsLV4P3bypN91BcjkM2JJqFWJwn
kWtO8MVEkp4je1Nqw1GcokTplywMS2siTksTcPiZSNZb04SewDiClXhHDPbGLxhY
bCpxFNB8jY+Szy4n7IgD9emrFhgHRRd87UwI4a8KZt/JRwRTVY4oQ8CoaYe2Q8YS
0kIBlvkUc8/bMYAULtOQ8luxq8UbcLYA3CHO0yBkUt1iPv0O1Xf9t+INEnCd2JYy
WWb9JMjIdrw2k0xK5LPIhF9AXui2PvNgCmwdFyDqpCxLk5lA
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:50 2024 by rpki-client on console-ams.rpki-client.org