Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e2GeESF-z7PZ9l-59q4vlzgKCAE.roa
File: e2GeESF-z7PZ9l-59q4vlzgKCAE.roa (raw, json)
Hash identifier: GqjAAR0NlfyN7JW+J9r4krG7UFMTn3dBLFMYN3YFSBo=
Subject key identifier: 7B:61:9E:11:21:7E:CF:B3:D9:F6:5F:B9:F6:AE:2F:97:38:0A:08:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189328D0A857E5B0569946517EE10D23CB9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e2GeESF-z7PZ9l-59q4vlzgKCAE.roa
Signing time: Fri 07 Jul 2023 22:50:51 +0000
ROA not before: Fri 07 Jul 2023 22:50:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210537
IP address blocks: 2a10:cc46:105::/48 maxlen: 48
2a0e:97c0:600::/44 maxlen: 48
2a0e:b107:17c0::/44 maxlen: 48
2a10:cc46:100::/48 maxlen: 48
2a10:cc46:102::/48 maxlen: 48
2a10:cc46:101::/48 maxlen: 48
2a10:cc46:104::/48 maxlen: 48
2a10:cc46:103::/48 maxlen: 48
2a10:cc46:106::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jul 2023 22:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:32:8d:0a:85:7e:5b:05:69:94:65:17:ee:10:d2:3c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 7 22:50:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b619e11217ecfb3d9f65fb9f6ae2f97380a0801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:3b:af:6e:e1:9b:6c:d2:d5:f8:2c:cd:1c:
db:e6:69:f7:b5:68:7c:af:03:1d:21:e6:83:7a:8b:
d5:49:13:d8:4d:0d:d9:1b:4d:1f:a5:23:15:a0:12:
0f:fa:d3:bf:28:f9:f3:ad:ca:99:a8:b3:ef:94:93:
7c:4c:af:ac:31:c1:fb:b1:2a:f5:67:0c:57:11:18:
4c:d4:18:dd:26:ea:de:ef:d3:f1:2a:1c:bd:f2:4f:
c9:ab:fe:15:92:20:82:48:50:94:de:18:02:ed:e7:
d7:d6:63:e7:d0:e8:7e:4b:e1:db:4b:51:92:d6:da:
31:e2:4e:3f:e2:0e:7e:21:a5:a1:6d:fc:f9:4f:69:
79:f1:3d:46:d4:09:ec:d4:5b:3a:36:fa:a9:ed:d6:
f4:08:ca:67:a5:57:d0:af:95:9f:25:63:33:c5:17:
e8:e4:7d:0f:f9:70:4f:25:84:ec:dc:44:d3:02:ce:
d0:ee:e5:3f:6a:78:6d:0b:50:a0:79:7c:33:ff:91:
e6:17:74:bd:fa:83:8d:2a:5a:3d:e3:45:92:89:89:
08:ac:12:1e:fd:be:27:99:97:ee:b1:2d:f6:bf:7a:
56:2a:49:06:b0:88:dd:9c:cb:16:3a:84:b3:3d:7b:
93:e7:5b:64:d7:a4:2f:93:c3:91:17:1b:70:2d:b5:
9e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:9E:11:21:7E:CF:B3:D9:F6:5F:B9:F6:AE:2F:97:38:0A:08:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e2GeESF-z7PZ9l-59q4vlzgKCAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:600::/44
2a0e:b107:17c0::/44
2a10:cc46:100::-2a10:cc46:106:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
51:c1:9f:89:5a:79:06:98:b9:89:e1:86:9d:ee:04:29:fc:21:
df:91:8c:97:6e:6f:24:24:a1:fe:6a:28:67:a2:91:f5:c1:da:
6e:0e:43:96:c2:85:07:08:ae:8b:37:c8:50:d7:be:12:09:81:
ea:2c:db:94:80:68:bd:08:d8:00:82:bb:17:b9:f4:92:2d:f7:
30:bc:df:7d:8c:fe:a2:90:5c:f8:73:f9:61:e5:d7:4e:b5:9f:
85:d7:f2:b9:8e:af:64:98:89:a0:a0:5b:2c:f6:8b:95:60:53:
d2:59:c8:63:14:d2:be:19:9e:5e:35:30:cb:e8:fd:41:5f:88:
aa:a9:99:e2:92:33:f2:b7:35:58:00:34:bb:82:5d:7e:ff:ab:
be:48:19:72:1d:01:31:e6:c6:ff:64:ce:27:6d:49:59:05:d2:
ab:fe:9e:72:06:ab:4f:a9:37:bd:37:26:15:8b:fc:50:e8:d4:
1f:ca:bf:22:66:cf:1c:49:19:83:b8:1b:71:7a:87:e3:85:70:
fe:13:02:60:80:3d:17:3b:6e:11:a7:92:5d:b5:2f:f5:aa:0c:
05:3a:02:ee:bb:11:90:ee:de:f2:7d:3e:b0:2b:a9:19:d1:5c:
c3:53:45:a9:03:2b:cd:22:2c:e7:fc:ef:e7:09:1b:ac:22:86:
f9:86:e6:5b
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAYkyjQqFflsFaZRlF+4Q0jy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNzA3MjI1MDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjYxOWUxMTIxN2VjZmIzZDlmNjVmYjlmNmFlMmY5NzM4MGEwODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQs7r27hm2zS1fgszRzb5mn3tWh8
rwMdIeaDeovVSRPYTQ3ZG00fpSMVoBIP+tO/KPnzrcqZqLPvlJN8TK+sMcH7sSr1
ZwxXERhM1BjdJure79PxKhy98k/Jq/4VkiCCSFCU3hgC7efX1mPn0Oh+S+HbS1GS
1tox4k4/4g5+IaWhbfz5T2l58T1G1Ans1Fs6Nvqp7db0CMpnpVfQr5WfJWMzxRfo
5H0P+XBPJYTs3ETTAs7Q7uU/anhtC1CgeXwz/5HmF3S9+oONKlo940WSiYkIrBIe
/b4nmZfusS32v3pWKkkGsIjdnMsWOoSzPXuT51tk16Qvk8ORFxtwLbWe2wIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFHthnhEhfs+z2fZfufauL5c4CggBMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZTJHZUVTRi16N1BaOWwtNTlxNHZsemdLQ0FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlAwcEKg6XwAYA
AwcEKg6xBxfAMBEDBgAqEMxGAQMHACoQzEYBBjANBgkqhkiG9w0BAQsFAAOCAQEA
UcGfiVp5Bpi5ieGGne4EKfwh35GMl25vJCSh/mooZ6KR9cHabg5DlsKFBwiuizfI
UNe+EgmB6izblIBovQjYAIK7F7n0ki33MLzffYz+opBc+HP5YeXXTrWfhdfyuY6v
ZJiJoKBbLPaLlWBT0lnIYxTSvhmeXjUwy+j9QV+IqqmZ4pIz8rc1WAA0u4Jdfv+r
vkgZch0BMebG/2TOJ21JWQXSq/6ecgarT6k3vTcmFYv8UOjUH8q/ImbPHEkZg7gb
cXqH44Vw/hMCYIA9FztuEaeSXbUv9aoMBToC7rsRkO7e8n0+sCupGdFcw1NFqQMr
zSIs5/zv5wkbrCKG+YbmWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org