Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4NGMrb2VIfoA_sTeto7N3_Yldc.roa
File: W4NGMrb2VIfoA_sTeto7N3_Yldc.roa (raw, json)
Hash identifier: 4dkTccjgtDkZAR8LOqrbaSJCQcLWuLnleG8zADwmBCY=
Subject key identifier: 5B:83:46:32:B6:F6:54:87:E8:03:FB:13:7A:DA:3B:37:7F:D8:95:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F86D67742669B3D7C3C68561CE6B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4NGMrb2VIfoA_sTeto7N3_Yldc.roa
Signing time: Mon 02 Jan 2023 05:15:28 +0000
ROA not before: Mon 02 Jan 2023 05:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211024
IP address blocks: 2a0e:97c0:4d0::/48 maxlen: 48
2a0e:97c0:4df::/48 maxlen: 48
2a0e:97c0:4d2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f8:6d:67:74:26:69:b3:d7:c3:c6:85:61:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b834632b6f65487e803fb137ada3b377fd895d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:96:d9:29:a1:66:11:ab:9c:8e:47:1a:2d:
68:82:b2:ce:a0:7c:6f:a8:8c:17:d1:f7:61:e9:e9:
a8:ee:ac:32:bf:17:56:72:4d:65:e4:ff:3c:06:45:
66:a9:43:4c:ce:cf:39:5b:3a:25:e5:7d:e8:f3:ea:
4b:01:b9:ee:b7:97:a4:f2:68:e1:1d:eb:94:02:b4:
48:18:97:29:a4:44:db:0f:41:cf:6a:13:3f:af:4e:
9d:f6:75:f1:69:58:72:d7:11:e6:b7:48:65:b3:60:
5d:b5:37:bf:08:21:f7:99:2b:76:b2:cd:c6:d9:31:
23:a3:2f:e0:4a:37:2d:40:be:4e:23:c8:08:97:cf:
1c:bf:22:47:23:bc:7d:e3:56:a3:03:d0:4c:93:2f:
8f:59:f2:3a:ef:50:2f:8f:d2:26:b2:24:69:25:62:
d8:2c:bb:84:1d:8a:a8:4d:f4:ea:41:15:da:82:a3:
93:c6:04:3d:10:97:df:1c:88:11:a0:6b:27:10:f7:
7e:e9:69:13:10:ea:9d:82:1e:17:dc:d5:90:a9:8a:
60:1b:be:84:91:0c:b7:b7:be:c3:b5:49:28:4a:22:
8f:c4:19:f1:c6:31:62:75:bd:5d:c4:6e:d4:ea:21:
5e:ac:68:03:42:9b:19:88:e3:69:8e:a9:ea:d7:50:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:46:32:B6:F6:54:87:E8:03:FB:13:7A:DA:3B:37:7F:D8:95:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4NGMrb2VIfoA_sTeto7N3_Yldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4d0::/48
2a0e:97c0:4d2::/48
2a0e:97c0:4df::/48
Signature Algorithm: sha256WithRSAEncryption
43:e8:b5:e1:38:3a:1d:a3:92:a9:29:c6:8e:8c:45:3d:ca:dd:
4a:9c:7d:1d:6a:e7:d9:9b:f6:f7:50:d9:2d:6c:31:c6:56:c7:
f7:46:31:5a:4f:9e:92:44:8b:79:1e:8e:b3:87:71:13:74:38:
c6:71:dd:2c:8f:3e:10:5f:83:71:55:e1:a5:99:10:e5:9b:d6:
e9:9d:dd:7b:c5:a5:1c:9e:ea:ae:71:28:15:bc:54:e3:56:ef:
20:76:67:cb:b9:02:d2:bb:2e:18:b4:3f:e2:1a:89:9b:7f:00:
5f:d8:1b:6f:77:95:e6:5e:d4:2d:8b:f5:27:35:a8:5e:5c:b6:
27:90:cf:91:fe:de:fc:f7:e9:32:78:57:ca:9e:9b:df:8b:e3:
de:56:04:f6:c3:ca:43:e3:0f:48:ce:f5:04:f6:c5:52:fa:f0:
91:4b:c1:5e:f4:4f:4a:e6:ba:cb:c7:9c:e6:0b:37:3c:6f:0e:
72:f4:24:83:2a:76:cb:05:e1:10:70:4e:3f:22:38:ed:51:52:
8c:c3:fc:ba:4b:23:a9:5d:b8:78:4a:ed:41:b7:d2:75:15:25:
c7:60:e2:d7:ca:a2:a6:18:1d:fa:37:a0:0e:f0:40:55:ae:7f:
3d:c0:5a:0d:37:22:ab:36:da:90:cc:01:ac:a4:a4:2b:f4:04:
1c:6f:1a:b6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVw5/htZ3QmabPXw8aFYc5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjgzNDYzMmI2ZjY1NDg3ZTgwM2ZiMTM3YWRhM2IzNzdmZDg5NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoKW2SmhZhGrnI5HGi1ogrLOoHxv
qIwX0fdh6emo7qwyvxdWck1l5P88BkVmqUNMzs85Wzol5X3o8+pLAbnut5ek8mjh
HeuUArRIGJcppETbD0HPahM/r06d9nXxaVhy1xHmt0hls2BdtTe/CCH3mSt2ss3G
2TEjoy/gSjctQL5OI8gIl88cvyJHI7x941ajA9BMky+PWfI671Avj9ImsiRpJWLY
LLuEHYqoTfTqQRXagqOTxgQ9EJffHIgRoGsnEPd+6WkTEOqdgh4X3NWQqYpgG76E
kQy3t77DtUkoSiKPxBnxxjFidb1dxG7U6iFerGgDQpsZiONpjqnq11DiuQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFuDRjK29lSH6AP7E3raOzd/2JXXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVzROR01yYjJWSWZvQV9zVGV0bzdOM19ZbGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6XwATQ
AwcAKg6XwATSAwcAKg6XwATfMA0GCSqGSIb3DQEBCwUAA4IBAQBD6LXhODodo5Kp
KcaOjEU9yt1KnH0daufZm/b3UNktbDHGVsf3RjFaT56SRIt5Ho6zh3ETdDjGcd0s
jz4QX4NxVeGlmRDlm9bpnd17xaUcnuqucSgVvFTjVu8gdmfLuQLSuy4YtD/iGomb
fwBf2Btvd5XmXtQti/UnNaheXLYnkM+R/t789+kyeFfKnpvfi+PeVgT2w8pD4w9I
zvUE9sVS+vCRS8Fe9E9K5rrLx5zmCzc8bw5y9CSDKnbLBeEQcE4/IjjtUVKMw/y6
SyOpXbh4Su1Bt9J1FSXHYOLXyqKmGB36N6AO8EBVrn89wFoNNyKrNtqQzAGspKQr
9AQcbxq2
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:51 2024 by rpki-client on console-ams.rpki-client.org