Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iO1Rsj3M5PbSu83zXjz8j7EMTcA.roa
File: iO1Rsj3M5PbSu83zXjz8j7EMTcA.roa (raw, json)
Hash identifier: pibRwGI0Iz+e9fI9hNEGaj+iCTNVr8APiG8p+Pd4pFk=
Subject key identifier: 88:ED:51:B2:3D:CC:E4:F6:D2:BB:CD:F3:5E:3C:FC:8F:B1:0C:4D:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C257BD7D3930E54DBED472062C50C494A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iO1Rsj3M5PbSu83zXjz8j7EMTcA.roa
Signing time: Fri 01 Dec 2023 13:05:22 +0000
ROA not before: Fri 01 Dec 2023 13:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47157
IP address blocks: 2a0e:b107:19fa::/48 maxlen: 48
2a0e:b107:19fc::/48 maxlen: 48
2a0e:b107:19f1::/48 maxlen: 48
2a0e:b107:19fb::/48 maxlen: 48
2a0e:b107:19f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Dec 2023 17:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:7b:d7:d3:93:0e:54:db:ed:47:20:62:c5:0c:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 1 13:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88ed51b23dcce4f6d2bbcdf35e3cfc8fb10c4dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:e7:94:ac:1b:4f:47:1d:3c:07:0d:30:b9:
e3:b8:4c:51:24:32:e6:d9:6f:5f:e0:c9:47:fc:d1:
09:70:32:cf:77:15:db:b5:de:ce:92:95:1f:e2:50:
74:06:73:29:28:e6:9e:9d:9a:e5:58:e7:fb:dd:20:
8c:b8:53:fe:7c:68:09:a9:fc:8c:b1:96:f9:21:18:
d8:84:f6:eb:2a:39:f6:80:ef:c9:2a:c5:04:ff:33:
d3:1d:36:ed:dd:72:da:f9:65:35:cf:f1:a9:0f:8e:
a3:57:6b:57:8a:75:b8:0f:75:18:92:c6:60:2d:b6:
af:c4:51:32:7b:40:0b:26:75:5c:ba:3f:de:e7:9f:
c9:9b:fd:64:19:8b:7c:73:56:a4:79:3a:b3:4b:31:
9f:05:b7:89:ae:96:be:85:31:51:6b:92:71:f2:8e:
7f:87:0e:1f:3c:c6:ae:6d:a6:ad:41:3d:49:68:06:
48:9d:ef:dc:4e:87:77:de:48:7e:b0:15:b7:9b:3e:
46:49:6a:71:90:89:d2:0f:ed:a2:71:cf:dc:78:43:
b1:98:80:38:00:9a:da:dd:7a:1b:dd:f6:c7:80:4a:
a6:ec:1c:02:8e:bf:35:2e:56:48:39:49:9f:1b:9f:
b6:39:73:47:23:5b:ca:da:95:93:c7:d5:e6:c4:c8:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:51:B2:3D:CC:E4:F6:D2:BB:CD:F3:5E:3C:FC:8F:B1:0C:4D:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iO1Rsj3M5PbSu83zXjz8j7EMTcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19f1::/48
2a0e:b107:19f3::/48
2a0e:b107:19fa::-2a0e:b107:19fc:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cb:0d:5f:ed:44:dd:5b:21:01:d4:40:d8:49:5e:be:2e:4c:7b:
11:aa:81:68:fe:a8:17:23:8e:18:e5:64:f2:f2:c1:e1:fd:88:
07:66:0b:20:4e:fa:9a:e4:8f:3e:f8:0e:9e:40:06:a8:01:58:
0f:46:2f:05:b4:35:26:ec:e1:cf:d9:df:85:e2:a7:05:fc:69:
ef:77:fd:0a:d4:b6:1b:2e:bb:c6:b3:17:78:8a:46:b7:d3:c0:
47:17:c4:3c:71:dd:d2:79:f4:9e:a4:58:9a:ff:d8:32:84:ef:
58:dc:fd:4a:4c:ee:ec:21:25:17:2c:fd:e2:e7:bc:82:83:fd:
20:01:4d:6c:3e:8f:36:3a:f2:1e:52:50:d2:ad:10:c1:71:53:
d1:e5:54:19:54:78:df:4c:07:fc:fd:6f:80:dc:09:17:d1:5f:
a6:09:48:23:11:b1:c7:fa:6c:2e:0d:4d:ad:66:c4:c5:0c:90:
0d:9d:02:c5:21:a9:a3:af:ed:25:61:f5:5f:43:14:d4:a5:ef:
15:76:e9:1e:09:65:37:b3:79:6f:db:b4:0f:34:7a:d8:4a:6e:
21:fd:e9:d9:7e:23:fa:c0:21:3d:d1:b1:89:3c:a2:23:23:32:
b5:23:db:57:29:de:18:d5:30:27:a6:dc:1a:e0:0e:b1:15:1e:
9f:a1:4a:a4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYwle9fTkw5U2+1HIGLFDElKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMjAxMTMwNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGVkNTFiMjNkY2NlNGY2ZDJiYmNkZjM1ZTNjZmM4ZmIxMGM0ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjornlKwbT0cdPAcNMLnjuExRJDLm
2W9f4MlH/NEJcDLPdxXbtd7OkpUf4lB0BnMpKOaenZrlWOf73SCMuFP+fGgJqfyM
sZb5IRjYhPbrKjn2gO/JKsUE/zPTHTbt3XLa+WU1z/GpD46jV2tXinW4D3UYksZg
LbavxFEye0ALJnVcuj/e55/Jm/1kGYt8c1akeTqzSzGfBbeJrpa+hTFRa5Jx8o5/
hw4fPMaubaatQT1JaAZIne/cTod33kh+sBW3mz5GSWpxkInSD+2icc/ceEOxmIA4
AJra3Xob3fbHgEqm7BwCjr81LlZIOUmfG5+2OXNHI1vK2pWTx9XmxMhqBwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFIjtUbI9zOT20rvN8148/I+xDE3AMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaU8xUnNqM001UGJTdTgzelhqejhqN0VNVGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKg6xBxnx
AwcAKg6xBxnzMBIDBwEqDrEHGfoDBwAqDrEHGfwwDQYJKoZIhvcNAQELBQADggEB
AMsNX+1E3VshAdRA2Elevi5MexGqgWj+qBcjjhjlZPLyweH9iAdmCyBO+prkjz74
Dp5ABqgBWA9GLwW0NSbs4c/Z34XipwX8ae93/QrUthsuu8azF3iKRrfTwEcXxDxx
3dJ59J6kWJr/2DKE71jc/UpM7uwhJRcs/eLnvIKD/SABTWw+jzY68h5SUNKtEMFx
U9HlVBlUeN9MB/z9b4DcCRfRX6YJSCMRscf6bC4NTa1mxMUMkA2dAsUhqaOv7SVh
9V9DFNSl7xV26R4JZTezeW/btA80ethKbiH96dl+I/rAIT3RsYk8oiMjMrUj21cp
3hjVMCem3BrgDrEVHp+hSqQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org