Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTWPwogvvX5GhKz-HqqFNkBZj8I.roa
File: gTWPwogvvX5GhKz-HqqFNkBZj8I.roa (raw, json)
Hash identifier: 51yN+jsifEhM1Ev5mR3Jc+mIZpzQyvhA07dKbz7tELc=
Subject key identifier: 81:35:8F:C2:88:2F:BD:7E:46:84:AC:FE:1E:AA:85:36:40:59:8F:C2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018803C5C1209411B7BBB9B415B9BAB586FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTWPwogvvX5GhKz-HqqFNkBZj8I.roa
Signing time: Wed 10 May 2023 03:47:51 +0000
ROA not before: Wed 10 May 2023 03:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:97c6:4000::/34 maxlen: 48
2a06:de01:800::/38 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:c5:c1:20:94:11:b7:bb:b9:b4:15:b9:ba:b5:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 10 03:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81358fc2882fbd7e4684acfe1eaa853640598fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:5b:69:a1:2d:ea:23:33:0f:ed:b4:46:0e:
9d:23:00:1c:5e:22:ba:d6:26:1e:53:d7:1d:82:75:
2f:e8:7c:f9:e2:11:cb:ce:fe:84:dc:ad:bd:6b:bc:
43:29:e3:13:6a:3e:93:3a:c7:67:36:53:18:3c:85:
03:40:b5:4a:ed:cc:8c:db:18:8f:52:ff:fd:0d:4b:
ce:62:a9:8f:2a:ac:37:e3:c9:66:82:77:8d:36:1d:
b0:b2:9a:fe:f9:12:63:57:a5:b4:b4:eb:0e:ca:93:
e9:20:63:83:ac:48:55:b8:92:00:b4:3e:8c:19:59:
90:68:63:37:b3:57:95:74:d6:3c:aa:97:53:80:51:
1b:2a:38:f3:87:0b:94:73:19:4c:33:1d:d0:26:27:
5f:ae:ef:d6:c3:c1:44:6b:e5:4a:48:4f:97:30:5f:
4f:75:55:41:56:00:9b:56:e6:98:3e:5c:e9:88:d9:
83:7e:b4:b4:e4:95:19:31:f7:9c:c4:54:52:85:4e:
7b:47:8e:ea:9b:2a:69:55:c4:63:20:ea:82:c6:59:
b0:f2:3d:49:3f:12:16:b4:04:54:28:49:83:49:98:
37:16:89:f2:4c:26:4c:c9:74:37:ad:70:4a:d4:4d:
2d:8d:f0:36:1b:9e:eb:cc:89:fd:6e:25:4d:eb:a8:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:8F:C2:88:2F:BD:7E:46:84:AC:FE:1E:AA:85:36:40:59:8F:C2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gTWPwogvvX5GhKz-HqqFNkBZj8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a0e:97c6:4000::/34
Signature Algorithm: sha256WithRSAEncryption
99:11:83:13:ee:be:75:f9:03:b2:61:78:c5:e5:95:8f:2c:5b:
e8:06:fb:82:5a:5f:e9:07:a5:53:6a:8a:d6:9b:1c:87:8e:39:
9d:59:da:8e:64:86:59:bf:2b:8d:a3:8e:a2:0b:67:22:ea:87:
f4:29:8b:f4:e8:c8:af:ec:1e:12:05:63:e6:32:7e:17:71:6e:
ac:12:72:85:54:54:70:04:ee:67:47:38:f3:05:03:87:04:a0:
34:8e:eb:cb:00:b5:9f:51:ae:e9:94:20:f7:3b:95:7b:b5:d0:
d1:40:69:71:a5:52:17:30:96:68:c1:6c:b5:3c:68:1a:0c:28:
e0:13:45:a2:86:1c:7b:3d:d4:b8:d8:ff:67:93:40:31:4b:c3:
a2:a6:78:14:69:6e:d3:9c:f1:c9:be:8b:69:78:02:08:69:56:
d0:69:ed:89:7e:86:38:33:3a:9b:05:f6:95:2d:65:98:d8:45:
7e:79:2c:cb:6a:57:df:c6:ec:69:d8:20:04:30:84:a8:87:86:
37:2b:f4:be:3d:15:95:e4:45:ee:d9:b5:fc:e1:2e:b8:2f:f9:
49:5e:cf:fc:a0:39:59:fd:db:37:66:24:35:57:b2:c9:32:b0:
e2:12:07:9d:23:39:20:d2:8f:8b:5e:f9:18:90:2c:2c:58:65:
b5:f4:c3:71
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYgDxcEglBG3u7m0Fbm6tYb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNTEwMDM0NzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTM1OGZjMjg4MmZiZDdlNDY4NGFjZmUxZWFhODUzNjQwNTk4ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUlbaaEt6iMzD+20Rg6dIwAcXiK6
1iYeU9cdgnUv6Hz54hHLzv6E3K29a7xDKeMTaj6TOsdnNlMYPIUDQLVK7cyM2xiP
Uv/9DUvOYqmPKqw348lmgneNNh2wspr++RJjV6W0tOsOypPpIGODrEhVuJIAtD6M
GVmQaGM3s1eVdNY8qpdTgFEbKjjzhwuUcxlMMx3QJidfru/Ww8FEa+VKSE+XMF9P
dVVBVgCbVuaYPlzpiNmDfrS05JUZMfecxFRShU57R47qmyppVcRjIOqCxlmw8j1J
PxIWtARUKEmDSZg3FonyTCZMyXQ3rXBK1E0tjfA2G57rzIn9biVN66ia5QIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFIE1j8KIL71+RoSs/h6qhTZAWY/CMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZ1RXUHdvZ3Z2WDVHaEt6LUhxcUZOa0JaajhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYCKgbeAQgD
BgYqDpfGQDANBgkqhkiG9w0BAQsFAAOCAQEAmRGDE+6+dfkDsmF4xeWVjyxb6Ab7
glpf6QelU2qK1psch445nVnajmSGWb8rjaOOogtnIuqH9CmL9OjIr+weEgVj5jJ+
F3FurBJyhVRUcATuZ0c48wUDhwSgNI7rywC1n1Gu6ZQg9zuVe7XQ0UBpcaVSFzCW
aMFstTxoGgwo4BNFooYcez3UuNj/Z5NAMUvDoqZ4FGlu05zxyb6LaXgCCGlW0Gnt
iX6GODM6mwX2lS1lmNhFfnksy2pX38bsadggBDCEqIeGNyv0vj0VleRF7tm1/OEu
uC/5SV7P/KA5Wf3bN2YkNVeyyTKw4hIHnSM5INKPi175GJAsLFhltfTDcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org