Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjyQp1bmQaUphVJ0otlCL-UyT9s.roa
File: fjyQp1bmQaUphVJ0otlCL-UyT9s.roa (raw, json)
Hash identifier: w9UYCtaQLSa1kP+EhWbVdJQ7FoPU7orDYy69gtDz4LM=
Subject key identifier: 7E:3C:90:A7:56:E6:41:A5:29:85:52:74:A2:D9:42:2F:E5:32:4F:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC86538EDC74619A04BDE24E8E48A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjyQp1bmQaUphVJ0otlCL-UyT9s.roa
Signing time: Tue 24 Jan 2023 16:09:38 +0000
ROA not before: Tue 24 Jan 2023 16:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142164
IP address blocks: 2a0e:b107:1470::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c8:65:38:ed:c7:46:19:a0:4b:de:24:e8:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3c90a756e641a529855274a2d9422fe5324fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:ef:6e:51:c9:aa:de:39:e6:68:aa:e5:0d:
15:28:30:67:bb:cd:f0:3e:30:78:ad:fa:67:2a:c8:
1d:4a:26:44:ad:1f:70:3b:b4:ee:03:34:14:9f:06:
aa:d5:8f:46:3c:f1:65:98:8c:67:cf:83:a3:e5:b9:
14:82:e4:bc:d8:76:2a:a3:9e:a6:30:e3:59:05:43:
7f:e6:26:af:6b:98:32:be:91:9a:1c:4e:27:3d:8a:
c2:64:0c:b7:ac:15:92:5b:88:98:b2:14:5e:92:5e:
4f:7f:b6:f6:fa:0b:eb:ec:62:41:79:1d:60:54:ca:
fc:03:55:f2:0f:eb:24:05:a1:be:50:8f:58:71:09:
1c:9f:2f:8e:00:ad:24:9f:2c:2d:b4:cb:69:b9:6e:
a9:60:41:75:0a:fd:ca:1b:50:ba:c4:dc:a7:52:28:
04:56:40:62:9f:99:ee:6e:6b:a3:9c:95:17:9f:23:
2a:68:0c:e0:93:14:79:83:5d:ec:e5:d7:77:9c:3e:
2d:77:7e:fe:43:f8:05:a1:91:1d:08:43:ad:2a:79:
6c:58:18:5b:f7:d6:71:74:45:f8:95:99:83:ff:17:
32:e4:7f:21:2c:ee:e8:28:da:e5:98:e1:76:7c:90:
42:96:3d:48:fe:d9:9a:42:ff:d9:29:eb:0b:14:9b:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:90:A7:56:E6:41:A5:29:85:52:74:A2:D9:42:2F:E5:32:4F:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fjyQp1bmQaUphVJ0otlCL-UyT9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1470::/44
Signature Algorithm: sha256WithRSAEncryption
6b:74:2c:6e:bf:65:49:82:38:3a:39:98:9d:46:ad:a6:23:94:
cc:d1:57:62:81:0e:94:db:ad:16:10:06:28:53:08:40:b8:89:
d4:8e:98:0d:50:5f:2f:3e:00:2f:4f:00:76:8a:ea:98:57:cf:
62:77:82:c5:5d:4b:5f:09:05:c6:4f:36:9a:77:d0:84:9d:63:
45:11:51:5a:22:47:ec:aa:bd:eb:b3:5d:e0:49:8f:88:97:a4:
58:1f:fa:6c:f9:1c:b0:33:61:22:7f:b0:3d:fe:c0:f4:e0:0e:
2a:8b:aa:c2:04:b8:96:00:56:e0:20:ac:18:79:13:86:85:0a:
68:e5:59:f0:a4:e3:df:3c:9e:e6:c4:84:c7:1d:7f:be:e6:c6:
69:df:a6:94:c2:a5:ac:2c:c5:cd:d2:4e:d8:b9:0f:aa:c0:80:
43:90:a6:36:33:2a:b5:97:79:c3:d1:9a:1e:00:d7:a4:c5:2f:
e0:af:17:95:ef:a6:3f:56:93:e9:c3:14:33:7a:d4:a6:a9:26:
ed:4f:0b:f6:03:16:97:08:a3:dd:47:03:d7:e5:54:6b:97:cb:
b9:19:d0:cd:c9:db:86:51:9b:a2:73:0e:6a:a8:80:bc:61:36:
f0:16:87:97:5e:cb:0d:5b:09:16:ee:eb:74:eb:d5:5a:df:38:
b7:87:c4:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkishlOO3HRhmgS94k6OSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNjOTBhNzU2ZTY0MWE1Mjk4NTUyNzRhMmQ5NDIyZmU1MzI0ZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9DvblHJqt455miq5Q0VKDBnu83w
PjB4rfpnKsgdSiZErR9wO7TuAzQUnwaq1Y9GPPFlmIxnz4Oj5bkUguS82HYqo56m
MONZBUN/5iava5gyvpGaHE4nPYrCZAy3rBWSW4iYshRekl5Pf7b2+gvr7GJBeR1g
VMr8A1XyD+skBaG+UI9YcQkcny+OAK0knywttMtpuW6pYEF1Cv3KG1C6xNynUigE
VkBin5nubmujnJUXnyMqaAzgkxR5g13s5dd3nD4td37+Q/gFoZEdCEOtKnlsWBhb
99ZxdEX4lZmD/xcy5H8hLO7oKNrlmOF2fJBClj1I/tmaQv/ZKesLFJuNcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH48kKdW5kGlKYVSdKLZQi/lMk/bMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZmp5UXAxYm1RYVVwaFZKMG90bENMLVV5VDlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxRw
MA0GCSqGSIb3DQEBCwUAA4IBAQBrdCxuv2VJgjg6OZidRq2mI5TM0VdigQ6U260W
EAYoUwhAuInUjpgNUF8vPgAvTwB2iuqYV89id4LFXUtfCQXGTzaad9CEnWNFEVFa
Ikfsqr3rs13gSY+Il6RYH/ps+RywM2Eif7A9/sD04A4qi6rCBLiWAFbgIKwYeROG
hQpo5VnwpOPfPJ7mxITHHX++5sZp36aUwqWsLMXN0k7YuQ+qwIBDkKY2Myq1l3nD
0ZoeANekxS/grxeV76Y/VpPpwxQzetSmqSbtTwv2AxaXCKPdRwPX5VRrl8u5GdDN
yduGUZuicw5qqIC8YTbwFoeXXssNWwkW7ut069Va3zi3h8R9
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:32 2024 by rpki-client on console-fra.rpki-client.org