Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_WbzA4dYNPZkYk8TzaI7uK_u2ww.roa
File: _WbzA4dYNPZkYk8TzaI7uK_u2ww.roa (raw, json)
Hash identifier: tWuUbxJKWw9n8W1Y7LX1YS1UrstU7oe1xPvoEwBwPrI=
Subject key identifier: FD:66:F3:03:87:58:34:F6:64:62:4F:13:CD:A2:3B:B8:AF:EE:DB:0C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CAEC9548003A33FC3666528D87D23274A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_WbzA4dYNPZkYk8TzaI7uK_u2ww.roa
Signing time: Thu 28 Dec 2023 04:57:59 +0000
ROA not before: Thu 28 Dec 2023 04:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216419
IP address blocks: 2a06:de01:503::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:c9:54:80:03:a3:3f:c3:66:65:28:d8:7d:23:27:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 04:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd66f303875834f664624f13cda23bb8afeedb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:56:eb:a8:0f:59:15:11:d5:65:29:be:13:
6e:26:00:2c:49:7a:47:e3:33:70:b4:8f:55:ed:0a:
49:39:15:c5:f0:13:1a:64:3b:9c:62:e6:c4:1a:1b:
91:51:f6:fc:c6:9e:37:83:7c:74:b8:f9:40:1d:67:
8f:d8:3d:c8:cd:1a:cd:31:19:0f:ce:da:31:70:10:
f7:a7:0f:1b:d7:db:de:47:11:13:f1:6d:b0:f9:9a:
ef:cc:32:5a:ab:81:bd:82:77:6c:af:38:f2:25:d1:
9a:f9:cd:e9:ff:3b:eb:f3:c1:0d:07:d8:46:7a:35:
19:2b:e3:67:37:ee:00:eb:dc:67:41:01:f8:fd:0d:
35:af:94:4f:32:ae:7d:ac:5c:7a:40:df:a7:ad:64:
cb:09:38:04:22:ba:19:c0:65:d7:49:56:dd:c7:46:
1c:9c:e5:d7:ed:3c:f5:8e:4d:63:7e:f5:48:84:e1:
12:35:5d:ef:85:c7:3b:ca:35:85:84:a0:6c:b7:9d:
a0:b7:a8:d0:26:19:89:20:e2:25:10:e7:5d:a0:b4:
29:58:af:c4:ba:3c:ec:88:65:2f:6e:17:9f:f2:cc:
b7:0d:39:e7:97:4c:21:cf:f2:87:e7:19:2e:75:fa:
0a:b1:73:0b:26:05:a9:4d:e8:40:cc:47:a6:e0:f5:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:F3:03:87:58:34:F6:64:62:4F:13:CD:A2:3B:B8:AF:EE:DB:0C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_WbzA4dYNPZkYk8TzaI7uK_u2ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:503::/48
Signature Algorithm: sha256WithRSAEncryption
2b:08:f3:ff:94:65:69:60:76:73:0d:ee:db:48:8a:d1:14:bd:
88:37:76:7f:2a:ca:4c:92:76:bd:0d:9b:a0:fa:84:75:92:4e:
28:86:f8:c5:10:93:2a:e3:cf:7f:b6:1c:88:95:2f:98:28:cf:
ae:2a:db:4d:62:ff:9d:3f:dd:26:b8:1c:36:0d:86:b4:99:c8:
18:ee:1c:2c:cb:d2:14:02:9d:ea:20:8c:89:4d:df:64:a1:6f:
2d:ac:05:75:d5:b6:64:ef:d7:df:af:73:9c:de:ed:e0:cc:97:
7d:61:c0:c5:22:13:f9:90:39:59:c4:c1:59:e9:7a:b7:03:40:
db:68:af:aa:0f:6d:dd:a8:72:9b:35:5f:d1:6f:78:0a:69:b9:
10:ee:72:80:ba:bd:d0:f0:cd:6e:fb:c4:e0:cc:4e:b7:82:97:
9e:39:7a:d5:31:99:8f:a5:fd:e9:c1:5a:dd:37:79:6d:fe:76:
c2:82:15:5e:f4:94:a6:ce:03:95:7a:7f:e0:43:76:66:f9:80:
a2:65:9b:0e:d6:ef:74:a8:e8:2c:d3:67:87:6d:14:79:af:ed:
5b:27:c3:83:40:60:ee:93:1a:52:91:e5:7c:9f:ea:06:bb:a1:
0f:63:c9:f8:45:ba:ea:aa:40:9b:b8:5b:c7:1a:cd:3c:03:54:
5c:a0:a4:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYyuyVSAA6M/w2ZlKNh9IydKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMjI4MDQ1NzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDY2ZjMwMzg3NTgzNGY2NjQ2MjRmMTNjZGEyM2JiOGFmZWVkYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzhW66gPWRUR1WUpvhNuJgAsSXpH
4zNwtI9V7QpJORXF8BMaZDucYubEGhuRUfb8xp43g3x0uPlAHWeP2D3IzRrNMRkP
ztoxcBD3pw8b19veRxET8W2w+ZrvzDJaq4G9gndsrzjyJdGa+c3p/zvr88ENB9hG
ejUZK+NnN+4A69xnQQH4/Q01r5RPMq59rFx6QN+nrWTLCTgEIroZwGXXSVbdx0Yc
nOXX7Tz1jk1jfvVIhOESNV3vhcc7yjWFhKBst52gt6jQJhmJIOIlEOddoLQpWK/E
ujzsiGUvbhef8sy3DTnnl0whz/KH5xkudfoKsXMLJgWpTehAzEem4PWKWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP1m8wOHWDT2ZGJPE82iO7iv7tsMMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvX1diekE0ZFlOUFprWWs4VHphSTd1S191Mnd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAQUD
MA0GCSqGSIb3DQEBCwUAA4IBAQArCPP/lGVpYHZzDe7bSIrRFL2IN3Z/KspMkna9
DZug+oR1kk4ohvjFEJMq489/thyIlS+YKM+uKttNYv+dP90muBw2DYa0mcgY7hws
y9IUAp3qIIyJTd9koW8trAV11bZk79ffr3Oc3u3gzJd9YcDFIhP5kDlZxMFZ6Xq3
A0DbaK+qD23dqHKbNV/Rb3gKabkQ7nKAur3Q8M1u+8TgzE63gpeeOXrVMZmPpf3p
wVrdN3lt/nbCghVe9JSmzgOVen/gQ3Zm+YCiZZsO1u90qOgs02eHbRR5r+1bJ8OD
QGDukxpSkeV8n+oGu6EPY8n4RbrqqkCbuFvHGs08A1RcoKQa
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org