Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa
File: j1t6yn342yullAskos5gwd-n7JY.roa (raw, json)
Hash identifier: Rdu0ugZ7mWodweuj/oJdL/FzB8LofcmV3zIiJ50Xqyo=
Subject key identifier: 8F:5B:7A:CA:7D:F8:DB:2B:A5:94:0B:24:A2:CE:60:C1:DF:A7:EC:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7EA2AB6A32AD860BABE18620297A9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa
Signing time: Mon 02 Jan 2023 05:15:25 +0000
ROA not before: Mon 02 Jan 2023 05:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210503
IP address blocks: 2a0e:97c0:630::/48 maxlen: 48
2a0e:97c0:63f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Dec 2023 23:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ea:2a:b6:a3:2a:d8:60:ba:be:18:62:02:97:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f5b7aca7df8db2ba5940b24a2ce60c1dfa7ec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:90:5b:a4:17:86:fd:4c:51:92:1e:cf:2a:
1d:00:fa:51:73:b5:86:af:8e:01:18:46:78:4c:ad:
04:38:40:a6:ce:fb:ac:cb:70:8b:29:ba:5b:99:6b:
7f:a2:23:ab:08:e3:bd:1a:e1:d8:83:77:de:93:df:
6c:58:e7:60:0a:2d:ff:24:1b:1d:bb:bb:7c:bf:cb:
45:aa:d7:8b:7c:f2:20:83:78:64:84:27:99:8c:94:
69:73:1e:33:20:ca:3e:1f:81:44:a0:20:4c:67:da:
cd:b0:fb:70:d4:0a:1f:23:f6:f1:93:cd:d5:5c:d0:
24:e9:ed:63:f4:15:66:f6:4c:2d:72:a5:ee:b2:bd:
2f:e9:62:52:c9:1f:c3:e7:aa:52:1b:74:23:df:6b:
24:10:75:a1:fa:b4:6a:44:57:0c:e0:d0:5a:da:94:
56:ec:c7:08:7b:f5:76:26:cd:3e:6c:48:14:ed:c1:
5c:8c:f8:5b:21:26:e2:cd:f0:91:e0:52:bd:c6:33:
80:c2:6a:ae:d7:3f:ef:02:a8:90:74:dc:2e:88:57:
d3:af:e9:a8:4d:4f:eb:20:23:d0:6a:ae:d5:71:75:
71:73:70:c7:e6:13:d2:db:3d:2c:8c:81:34:70:de:
6a:e5:d5:86:0a:15:f3:a0:7a:ab:e4:44:a6:c1:f5:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:7A:CA:7D:F8:DB:2B:A5:94:0B:24:A2:CE:60:C1:DF:A7:EC:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j1t6yn342yullAskos5gwd-n7JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:630::/48
2a0e:97c0:63f::/48
Signature Algorithm: sha256WithRSAEncryption
aa:8a:67:0f:60:bc:48:95:37:9e:1b:a1:f3:15:05:03:d1:bf:
e5:5e:8f:8a:a6:40:b1:c9:c9:be:4b:a2:7f:4a:a9:d2:3f:47:
31:8b:48:66:87:ff:88:8c:14:4f:f9:67:33:86:3e:46:70:bb:
72:2e:6c:12:0f:a8:80:b5:74:18:b7:c6:ff:6f:35:5e:81:59:
5e:88:d3:40:22:ca:76:d7:57:0e:0d:6c:7e:53:53:e9:61:7e:
04:5b:10:19:d2:2a:a2:f9:73:b3:35:f7:07:61:4b:9a:d1:56:
ed:dd:78:0d:b0:21:6b:f7:28:f3:e0:3b:94:56:25:ce:ec:2b:
3c:67:1d:1f:56:3e:3a:77:cb:db:75:37:d9:b5:82:32:5c:a2:
ec:1f:ba:24:05:e3:94:62:8c:f4:56:e1:1f:7e:e1:a6:1f:a5:
38:2c:c2:6e:1f:05:58:be:01:38:f3:4a:56:eb:c4:59:a0:b1:
b4:00:2a:eb:16:82:1b:ae:9e:e8:a1:4e:88:b9:f4:90:81:37:
bc:04:68:9b:16:5c:92:cb:5b:b2:82:94:b1:3f:58:65:0b:f9:
09:f9:79:59:2d:2b:90:4d:34:b5:05:34:7a:37:90:3c:05:74:
12:9e:14:e7:06:55:2f:f9:bd:81:cb:27:8a:b7:ba:2c:6e:b2:
ea:66:19:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw5+oqtqMq2GC6vhhiApepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjViN2FjYTdkZjhkYjJiYTU5NDBiMjRhMmNlNjBjMWRmYTdlYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4CQW6QXhv1MUZIezyodAPpRc7WG
r44BGEZ4TK0EOECmzvusy3CLKbpbmWt/oiOrCOO9GuHYg3fek99sWOdgCi3/JBsd
u7t8v8tFqteLfPIgg3hkhCeZjJRpcx4zIMo+H4FEoCBMZ9rNsPtw1AofI/bxk83V
XNAk6e1j9BVm9kwtcqXusr0v6WJSyR/D56pSG3Qj32skEHWh+rRqRFcM4NBa2pRW
7McIe/V2Js0+bEgU7cFcjPhbISbizfCR4FK9xjOAwmqu1z/vAqiQdNwuiFfTr+mo
TU/rICPQaq7VcXVxc3DH5hPS2z0sjIE0cN5q5dWGChXzoHqr5ESmwfVTvQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI9besp9+NsrpZQLJKLOYMHfp+yWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvajF0NnluMzQyeXVsbEFza29zNWd3ZC1uN0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAYw
AwcAKg6XwAY/MA0GCSqGSIb3DQEBCwUAA4IBAQCqimcPYLxIlTeeG6HzFQUD0b/l
Xo+KpkCxycm+S6J/SqnSP0cxi0hmh/+IjBRP+Wczhj5GcLtyLmwSD6iAtXQYt8b/
bzVegVleiNNAIsp211cODWx+U1PpYX4EWxAZ0iqi+XOzNfcHYUua0Vbt3XgNsCFr
9yjz4DuUViXO7Cs8Zx0fVj46d8vbdTfZtYIyXKLsH7okBeOUYoz0VuEffuGmH6U4
LMJuHwVYvgE480pW68RZoLG0ACrrFoIbrp7ooU6IufSQgTe8BGibFlySy1uygpSx
P1hlC/kJ+XlZLSuQTTS1BTR6N5A8BXQSnhTnBlUv+b2ByyeKt7osbrLqZhmA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org