Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y9P8s1qf-f_S0YlmpMWv51PdovA.roa
File: Y9P8s1qf-f_S0YlmpMWv51PdovA.roa (raw, json)
Hash identifier: YM86FWf8hdpCfAKQ3wpiLVqGdHHree5WGDZCY5mdm/Q=
Subject key identifier: 63:D3:FC:B3:5A:9F:F9:FF:D2:D1:89:66:A4:C5:AF:E7:53:DD:A2:F0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AE38F6114E3F41CFF2F65C45B59C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y9P8s1qf-f_S0YlmpMWv51PdovA.roa
Signing time: Tue 24 Jan 2023 16:09:45 +0000
ROA not before: Tue 24 Jan 2023 16:09:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209105
IP address blocks: 2a10:2f00:17f::/48 maxlen: 48
2a0e:b102:170::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:e3:8f:61:14:e3:f4:1c:ff:2f:65:c4:5b:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63d3fcb35a9ff9ffd2d18966a4c5afe753dda2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:94:36:96:39:93:31:dd:c7:cb:4b:06:88:
5d:85:39:57:2d:c8:25:62:c8:f5:3b:c9:f1:9e:62:
b0:d7:34:ba:c5:29:e8:a2:db:54:14:0e:84:fc:92:
be:87:5a:d7:16:62:40:86:8a:fc:b9:d5:31:d8:12:
95:7c:31:c6:b3:84:da:3a:6e:99:1c:29:37:d5:39:
6f:52:03:8e:45:6c:4e:18:95:e5:97:73:8d:bb:78:
93:6f:fe:fd:d8:3b:67:50:01:40:11:e3:2f:d2:eb:
2a:98:f8:73:97:d4:1e:fc:be:2d:9e:3b:b9:16:f8:
1c:56:57:d9:33:fb:1a:e0:ea:14:e6:82:05:91:a9:
44:66:d6:75:8d:00:7d:e4:96:55:2a:29:2b:66:a1:
ed:cf:df:14:fe:3c:63:b8:da:18:59:b3:89:8e:a0:
07:e7:0f:bc:da:f7:27:46:38:38:89:09:15:6a:a5:
7c:41:c1:73:4f:11:36:03:3a:2c:5e:80:56:41:88:
4c:63:01:a8:9b:69:a3:9e:16:15:56:89:1d:2f:4b:
04:d2:e2:ab:0a:d1:f9:5a:27:15:2f:8e:a4:2d:24:
12:b4:98:fd:ee:38:b3:53:82:6d:8f:e5:87:39:37:
e3:6c:6b:2a:4f:7f:df:14:5b:0d:a8:c0:ad:a2:ea:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D3:FC:B3:5A:9F:F9:FF:D2:D1:89:66:A4:C5:AF:E7:53:DD:A2:F0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y9P8s1qf-f_S0YlmpMWv51PdovA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b102:170::/44
2a10:2f00:17f::/48
Signature Algorithm: sha256WithRSAEncryption
1d:fe:90:2d:9f:a7:d3:37:3a:de:a3:27:a7:8d:2f:1f:2f:d7:
ae:e9:e8:31:e6:62:50:9f:09:7d:8c:34:f7:75:e2:91:f7:f9:
2e:81:74:b6:b7:9c:42:3b:88:db:bd:8a:76:15:61:16:b9:4b:
2d:83:b8:c8:27:1b:b3:68:d9:99:8c:5b:86:a4:a9:1b:54:b0:
2e:d9:bf:8e:97:65:ff:4c:31:da:5f:92:5f:31:0d:51:3d:07:
d2:5e:bc:a0:da:3a:94:87:31:6a:ac:d4:01:f2:8d:c4:db:86:
2f:67:8b:bc:86:ca:00:9b:ca:57:e4:c8:85:b2:dc:03:e6:fb:
e5:bf:bf:3f:56:fb:a0:78:a3:2d:67:df:34:fd:f2:ed:f4:55:
ca:7c:d0:97:8e:a1:45:04:26:17:92:a4:f1:66:27:a5:80:53:
57:6d:93:64:21:ff:8c:dc:38:25:cb:bc:ef:1e:7e:e0:d2:0f:
e2:66:0a:95:83:a0:c3:5b:48:ee:40:ae:6f:5f:d4:be:66:6e:
e6:27:87:8f:fe:f9:5d:b1:37:d2:71:64:97:bf:85:fd:8d:3e:
ba:5a:c6:bf:cb:b6:a0:10:af:51:51:b4:58:37:7b:f1:b5:94:
de:c6:57:3d:ee:8c:72:28:0e:44:3c:73:f0:7b:1a:bf:68:31:
99:a5:45:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXkiuOPYRTj9Bz/L2XEW1nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2QzZmNiMzVhOWZmOWZmZDJkMTg5NjZhNGM1YWZlNzUzZGRhMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit6UNpY5kzHdx8tLBohdhTlXLcgl
Ysj1O8nxnmKw1zS6xSnoottUFA6E/JK+h1rXFmJAhor8udUx2BKVfDHGs4TaOm6Z
HCk31TlvUgOORWxOGJXll3ONu3iTb/792DtnUAFAEeMv0usqmPhzl9Qe/L4tnju5
FvgcVlfZM/sa4OoU5oIFkalEZtZ1jQB95JZVKikrZqHtz98U/jxjuNoYWbOJjqAH
5w+82vcnRjg4iQkVaqV8QcFzTxE2AzosXoBWQYhMYwGom2mjnhYVVokdL0sE0uKr
CtH5WicVL46kLSQStJj97jizU4Jtj+WHOTfjbGsqT3/fFFsNqMCtourT9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGPT/LNan/n/0tGJZqTFr+dT3aLwMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWTlQOHMxcWYtZl9TMFlsbXBNV3Y1MVBkb3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xAgFw
AwcAKhAvAAF/MA0GCSqGSIb3DQEBCwUAA4IBAQAd/pAtn6fTNzreoyenjS8fL9eu
6egx5mJQnwl9jDT3deKR9/kugXS2t5xCO4jbvYp2FWEWuUstg7jIJxuzaNmZjFuG
pKkbVLAu2b+Ol2X/TDHaX5JfMQ1RPQfSXryg2jqUhzFqrNQB8o3E24YvZ4u8hsoA
m8pX5MiFstwD5vvlv78/VvugeKMtZ980/fLt9FXKfNCXjqFFBCYXkqTxZielgFNX
bZNkIf+M3Dgly7zvHn7g0g/iZgqVg6DDW0juQK5vX9S+Zm7mJ4eP/vldsTfScWSX
v4X9jT66Wsa/y7agEK9RUbRYN3vxtZTexlc97oxyKA5EPHPwexq/aDGZpUVB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:05 2024 by rpki-client on console-ams.rpki-client.org