Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aekW1q3qzwqGE_Y3mz45fv23U6s.roa
File: aekW1q3qzwqGE_Y3mz45fv23U6s.roa (raw, json)
Hash identifier: muAEQ91vj3UNfcTuMR/M3OrVS+BSTT1js9ALUZQy/3c=
Subject key identifier: 69:E9:16:D6:AD:EA:CF:0A:86:13:F6:37:9B:3E:39:7E:FD:B7:53:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7C214C2DEDA98649A95D9E6B394E4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aekW1q3qzwqGE_Y3mz45fv23U6s.roa
Signing time: Mon 02 Jan 2023 05:15:14 +0000
ROA not before: Mon 02 Jan 2023 05:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205092
IP address blocks: 2a0e:97c0:b00::/48 maxlen: 48
2a0e:97c0:b01::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:c2:14:c2:de:da:98:64:9a:95:d9:e6:b3:94:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e916d6adeacf0a8613f6379b3e397efdb753ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:ac:c9:94:cc:22:01:83:c7:e5:89:19:56:
ed:f9:0a:49:46:2b:c6:d5:5f:9b:06:85:3d:6b:79:
11:52:ea:89:cc:81:55:0d:07:1a:2f:e0:0b:d1:a1:
31:fb:ef:3f:3b:d7:d0:79:22:64:e1:88:9b:ad:e9:
37:38:6f:f1:72:86:49:81:58:e9:f1:ae:72:84:8d:
65:28:df:b3:19:15:b9:b0:57:a2:e3:c9:80:c4:48:
2c:7b:be:88:45:8d:4d:02:65:d5:f7:a9:57:b2:4c:
ed:a4:72:20:98:33:48:59:ea:cc:08:55:be:ff:42:
9d:9b:70:55:ea:ed:cc:58:27:83:ea:52:b5:2c:ec:
7c:03:99:99:83:79:90:35:35:ef:2b:d5:15:f5:5e:
e5:52:44:4a:65:c3:84:02:bc:0d:01:0a:59:f7:9d:
28:9e:e2:1a:c1:98:b0:c0:b9:43:6c:8c:4a:f5:dd:
27:64:6e:b9:a0:09:f0:7b:28:53:f9:87:b9:19:ca:
ea:5e:75:83:94:01:bd:f2:67:d4:0e:aa:30:7e:7b:
79:61:7c:b3:78:79:ab:7c:a2:f6:22:2c:5f:58:d5:
11:3c:ce:7d:01:f2:cb:1d:df:9c:74:e7:2c:9f:e6:
92:8d:18:f6:26:0b:7a:fe:0f:cb:9b:51:2a:ac:98:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:16:D6:AD:EA:CF:0A:86:13:F6:37:9B:3E:39:7E:FD:B7:53:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aekW1q3qzwqGE_Y3mz45fv23U6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b00::/47
Signature Algorithm: sha256WithRSAEncryption
7b:e6:83:f5:93:20:07:af:60:81:f6:e5:bd:ac:97:7e:fa:bb:
66:66:04:ea:dd:73:7b:77:b3:a8:7b:17:bb:fc:02:c1:e6:08:
e6:9d:8b:36:4c:08:15:86:8c:3a:8a:6e:03:b1:3f:83:dd:17:
7e:ff:97:e5:09:c2:3d:a1:1e:93:4a:be:cd:d1:91:ed:95:59:
58:90:fc:32:0b:c4:61:41:ca:45:7c:0f:4b:ce:29:3e:ab:12:
9c:d2:4f:f8:53:fa:e6:f5:a1:70:73:eb:e3:44:bd:c4:4d:26:
da:0f:db:98:d3:4e:ef:a8:04:2a:09:b3:63:0e:f2:db:b5:75:
78:fc:65:e3:3d:db:74:b4:80:e7:6e:ee:de:86:a9:aa:88:20:
80:03:d8:fb:0e:ce:93:cf:0c:71:fe:a3:5a:e8:df:4f:ad:2d:
44:c7:74:91:6d:09:d6:e1:89:52:25:f2:48:d3:86:09:36:72:
3f:c2:fc:24:b8:ab:3a:61:72:92:b4:3c:36:dd:a2:76:e3:5b:
5b:7d:f8:90:7f:54:18:de:f9:97:5d:b5:70:7a:73:f3:f1:86:
14:7b:1b:49:f1:88:1b:5f:24:f7:dc:69:15:24:6e:75:51:f4:
f9:a6:07:47:b4:df:fb:1f:ba:0b:95:de:15:aa:94:f7:55:56:
9c:02:59:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw58IUwt7amGSaldnms5TkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWU5MTZkNmFkZWFjZjBhODYxM2Y2Mzc5YjNlMzk3ZWZkYjc1M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMCsyZTMIgGDx+WJGVbt+QpJRivG
1V+bBoU9a3kRUuqJzIFVDQcaL+AL0aEx++8/O9fQeSJk4Yibrek3OG/xcoZJgVjp
8a5yhI1lKN+zGRW5sFei48mAxEgse76IRY1NAmXV96lXskztpHIgmDNIWerMCFW+
/0Kdm3BV6u3MWCeD6lK1LOx8A5mZg3mQNTXvK9UV9V7lUkRKZcOEArwNAQpZ950o
nuIawZiwwLlDbIxK9d0nZG65oAnweyhT+Ye5GcrqXnWDlAG98mfUDqowfnt5YXyz
eHmrfKL2IixfWNURPM59AfLLHd+cdOcsn+aSjRj2Jgt6/g/Lm1EqrJis2wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGnpFtat6s8KhhP2N5s+OX79t1OrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYWVrVzFxM3F6d3FHRV9ZM216NDVmdjIzVTZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6XwAsA
MA0GCSqGSIb3DQEBCwUAA4IBAQB75oP1kyAHr2CB9uW9rJd++rtmZgTq3XN7d7Oo
exe7/ALB5gjmnYs2TAgVhow6im4DsT+D3Rd+/5flCcI9oR6TSr7N0ZHtlVlYkPwy
C8RhQcpFfA9Lzik+qxKc0k/4U/rm9aFwc+vjRL3ETSbaD9uY007vqAQqCbNjDvLb
tXV4/GXjPdt0tIDnbu7ehqmqiCCAA9j7Ds6Tzwxx/qNa6N9PrS1Ex3SRbQnW4YlS
JfJI04YJNnI/wvwkuKs6YXKStDw23aJ241tbffiQf1QY3vmXXbVwenPz8YYUextJ
8YgbXyT33GkVJG51UfT5pgdHtN/7H7oLld4VqpT3VVacAll9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org