Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZbHHJImf8ylPSTrXJqtCyVDQLE.roa
File: eZbHHJImf8ylPSTrXJqtCyVDQLE.roa (raw, json)
Hash identifier: kBfx0iBjcSF/4+Xb24qwj4JCh92823b4kRtjpzYqj4U=
Subject key identifier: 79:96:C7:1C:92:26:7F:CC:A5:3D:24:EB:5C:9A:AD:0B:25:43:40:B1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC4681EA4C94F03EDB05DEBE4A75A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZbHHJImf8ylPSTrXJqtCyVDQLE.roa
Signing time: Tue 24 Jan 2023 16:09:37 +0000
ROA not before: Tue 24 Jan 2023 16:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140098
IP address blocks: 2a0e:b107:700::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c4:68:1e:a4:c9:4f:03:ed:b0:5d:eb:e4:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7996c71c92267fcca53d24eb5c9aad0b254340b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:bd:2a:db:28:1a:07:74:03:b3:9a:ea:c0:
86:34:05:96:55:c8:e1:fd:72:66:cc:b0:56:d1:1f:
89:c4:e2:f5:d4:1c:24:e3:47:3e:ec:cc:dc:59:94:
37:82:cd:00:f1:07:2e:7d:e0:74:35:03:c2:57:fb:
37:00:0f:cf:ff:ef:2c:ef:90:38:18:6a:21:25:31:
c6:a3:03:45:5f:df:0a:b3:55:37:49:57:1c:d9:e1:
5b:43:15:88:f3:2e:a5:9a:d6:ed:a9:bd:f8:a4:9b:
42:62:f2:d2:fa:81:ef:db:e0:6a:54:96:79:6a:2e:
e2:e4:e2:31:06:43:c4:ec:70:0c:e1:95:1e:12:be:
56:6e:d0:20:eb:87:1f:6f:3f:23:42:c4:33:8e:98:
9c:21:19:1d:2b:9f:10:98:b9:74:1f:44:36:2a:7b:
2b:2b:f8:eb:8a:62:b2:f3:12:ff:0d:01:2e:2b:24:
cc:6d:39:37:df:3f:89:33:2a:00:04:96:59:72:8e:
20:fd:de:a9:b1:4b:b3:06:90:96:b9:82:e6:e2:1f:
01:8e:7a:02:f4:f6:95:7b:70:a0:55:73:f3:8e:f4:
b1:7e:34:66:43:b1:35:00:33:ac:13:de:13:7c:8e:
d1:a3:55:d3:ab:2b:5b:03:3b:44:37:e6:d9:83:b1:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:C7:1C:92:26:7F:CC:A5:3D:24:EB:5C:9A:AD:0B:25:43:40:B1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZbHHJImf8ylPSTrXJqtCyVDQLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:700::/48
Signature Algorithm: sha256WithRSAEncryption
05:26:6c:2e:96:be:f1:86:00:73:5b:42:59:a5:ed:62:81:01:
12:72:74:f8:12:f1:4c:2e:3b:fe:a1:6b:37:80:b1:de:0d:09:
24:59:42:01:cb:48:a5:d9:ea:a1:f6:a9:69:42:10:19:43:5f:
6d:1c:ee:9d:f6:3e:8d:1d:cc:9c:bd:de:34:ab:90:a3:95:8e:
1e:dc:16:2b:70:98:a7:18:1e:1d:c9:32:58:3b:73:d9:c5:75:
f1:d1:e7:94:bf:6e:84:1d:f7:f7:2a:07:a1:1e:68:ed:dd:66:
9a:dc:ff:d7:e8:c2:fb:11:af:9f:8c:04:a5:35:4f:ab:d8:0d:
76:89:5c:52:b5:de:c8:b8:2f:2e:b3:69:0a:b3:27:0d:b0:19:
bb:07:21:69:0d:4b:2a:82:52:e5:8b:34:db:41:80:7f:53:29:
44:56:61:7e:07:5c:91:6b:10:10:ba:3e:56:6c:81:6f:3a:04:
bd:36:00:0d:52:79:d4:21:bf:6d:2d:8a:b2:60:3c:33:1b:04:
0d:0e:4f:de:5f:84:1f:86:97:2b:66:51:04:c0:0a:a7:c3:19:
f4:73:71:e7:f0:f6:b4:03:c8:c5:83:e9:60:f2:0d:6e:78:ff:
b8:f6:a3:24:8f:e5:51:d6:d5:0e:e9:10:1b:90:3e:aa:97:45:
7c:3e:6d:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkisRoHqTJTwPtsF3r5KdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTk2YzcxYzkyMjY3ZmNjYTUzZDI0ZWI1YzlhYWQwYjI1NDM0MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8i9KtsoGgd0A7Oa6sCGNAWWVcjh
/XJmzLBW0R+JxOL11Bwk40c+7MzcWZQ3gs0A8QcufeB0NQPCV/s3AA/P/+8s75A4
GGohJTHGowNFX98Ks1U3SVcc2eFbQxWI8y6lmtbtqb34pJtCYvLS+oHv2+BqVJZ5
ai7i5OIxBkPE7HAM4ZUeEr5WbtAg64cfbz8jQsQzjpicIRkdK58QmLl0H0Q2Knsr
K/jrimKy8xL/DQEuKyTMbTk33z+JMyoABJZZco4g/d6psUuzBpCWuYLm4h8BjnoC
9PaVe3CgVXPzjvSxfjRmQ7E1ADOsE94TfI7Ro1XTqytbAztEN+bZg7FZJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHmWxxySJn/MpT0k61yarQslQ0CxMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZVpiSEhKSW1mOHlsUFNUclhKcXRDeVZEUUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwcA
MA0GCSqGSIb3DQEBCwUAA4IBAQAFJmwulr7xhgBzW0JZpe1igQEScnT4EvFMLjv+
oWs3gLHeDQkkWUIBy0il2eqh9qlpQhAZQ19tHO6d9j6NHcycvd40q5CjlY4e3BYr
cJinGB4dyTJYO3PZxXXx0eeUv26EHff3KgehHmjt3Waa3P/X6ML7Ea+fjASlNU+r
2A12iVxStd7IuC8us2kKsycNsBm7ByFpDUsqglLlizTbQYB/UylEVmF+B1yRaxAQ
uj5WbIFvOgS9NgANUnnUIb9tLYqyYDwzGwQNDk/eX4QfhpcrZlEEwAqnwxn0c3Hn
8Pa0A8jFg+lg8g1ueP+49qMkj+VR1tUO6RAbkD6ql0V8Pm0t
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:51 2024 by rpki-client on console-ams.rpki-client.org