Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa
File: jmam4Q730GJzWnG49K3MYxGUviQ.roa (raw, json)
Hash identifier: mrCcbVnIDpAnw6p2xe44+g760R9WqbJzXcSi+FtPALY=
Subject key identifier: 8E:66:A6:E1:0E:F7:D0:62:73:5A:71:B8:F4:AD:CC:63:11:94:BE:24
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7FA45F0CB6A20E69BC2E2DC466E3B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa
Signing time: Mon 02 Jan 2023 05:15:29 +0000
ROA not before: Mon 02 Jan 2023 05:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 2a10:cc44:202::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 Jun 2023 18:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:fa:45:f0:cb:6a:20:e6:9b:c2:e2:dc:46:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e66a6e10ef7d062735a71b8f4adcc631194be24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:4f:98:17:b5:a4:7c:fb:d5:49:f0:c3:8c:
82:33:69:07:65:5c:d6:bc:4e:37:db:bf:9f:fa:09:
24:d5:4e:7e:08:50:8c:7d:75:08:0d:b8:93:57:94:
89:b2:71:55:49:b3:c7:e6:05:66:df:e8:11:a3:10:
ab:cc:89:6d:d9:8b:f7:75:00:c2:3a:10:dd:4b:da:
ba:83:43:a8:04:3f:99:58:bd:36:b7:ff:ca:d8:fe:
c8:15:43:53:7b:3f:ff:91:71:51:66:53:8f:b8:04:
a0:7f:01:50:f7:02:b2:32:af:96:fc:90:ec:89:ff:
04:53:b4:b9:d4:f5:33:0e:e4:00:11:b7:02:1e:30:
ff:f5:75:a8:9f:af:08:d4:3a:10:0c:4e:4f:e6:77:
b7:63:f7:65:0a:35:bc:8a:45:2c:54:ce:09:73:ff:
58:d5:05:be:a8:8f:ed:27:32:18:82:1f:48:e2:5d:
d9:32:61:5f:75:5e:a8:95:18:38:de:60:79:45:9c:
ab:6e:2d:9d:49:e2:c2:ff:41:36:e3:fb:80:24:0c:
07:8a:40:3b:5e:f0:33:de:2a:57:19:56:be:75:f5:
4b:0f:01:b9:6b:ca:1b:8a:5f:5a:ea:bc:57:62:82:
3d:3a:15:f7:08:08:47:8f:b0:42:32:55:82:7f:a8:
b5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:A6:E1:0E:F7:D0:62:73:5A:71:B8:F4:AD:CC:63:11:94:BE:24
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jmam4Q730GJzWnG49K3MYxGUviQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc44:202::/48
Signature Algorithm: sha256WithRSAEncryption
45:76:bf:18:0d:9a:44:23:15:04:b9:eb:e2:73:70:2d:77:36:
9d:d0:b5:ca:a6:99:1d:d5:fc:ad:9d:87:b4:72:0c:93:d2:98:
e2:de:6c:be:6e:0b:2c:b3:77:7e:2b:1d:1d:0b:92:75:8c:af:
c8:60:83:2e:11:53:e4:61:ff:2d:94:32:7f:fc:d3:18:66:4f:
51:1a:99:f2:b5:65:fb:ed:1f:62:e8:8c:4b:71:25:9b:85:7f:
28:ec:98:3f:85:aa:6a:b2:c4:4b:c8:9c:b2:20:92:61:56:c2:
ef:2a:b8:51:1d:42:f9:64:e9:f7:8e:71:90:a1:82:ef:e2:06:
aa:09:93:48:a2:19:3c:c4:7d:4b:ec:42:9a:68:9c:37:83:9c:
1f:d9:e4:3c:43:71:f4:66:5d:60:bc:0a:c5:19:01:b3:a9:34:
48:05:e0:a7:94:8f:a5:fe:10:2a:b0:db:fe:20:48:1b:23:c5:
66:a9:d7:8a:1a:4b:b1:e4:ef:01:db:b2:a0:d2:cf:88:33:d5:
dd:55:f3:a6:21:be:df:4e:b7:bc:86:32:c8:ea:d6:4c:99:68:
9a:22:63:e7:75:ab:e5:09:89:22:b7:57:39:0f:fa:c8:84:44:
9c:37:3b:19:21:97:ea:f2:bc:a6:90:ce:2e:c5:40:17:30:87:
49:7a:0f:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVw5/pF8MtqIOabwuLcRm47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTY2YTZlMTBlZjdkMDYyNzM1YTcxYjhmNGFkY2M2MzExOTRiZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk19PmBe1pHz71Unww4yCM2kHZVzW
vE4327+f+gkk1U5+CFCMfXUIDbiTV5SJsnFVSbPH5gVm3+gRoxCrzIlt2Yv3dQDC
OhDdS9q6g0OoBD+ZWL02t//K2P7IFUNTez//kXFRZlOPuASgfwFQ9wKyMq+W/JDs
if8EU7S51PUzDuQAEbcCHjD/9XWon68I1DoQDE5P5ne3Y/dlCjW8ikUsVM4Jc/9Y
1QW+qI/tJzIYgh9I4l3ZMmFfdV6olRg43mB5RZyrbi2dSeLC/0E24/uAJAwHikA7
XvAz3ipXGVa+dfVLDwG5a8obil9a6rxXYoI9OhX3CAhHj7BCMlWCf6i1CwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI5mpuEO99Bic1pxuPStzGMRlL4kMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvam1hbTRRNzMwR0p6V25HNDlLM01ZeEdVdmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMRAIC
MA0GCSqGSIb3DQEBCwUAA4IBAQBFdr8YDZpEIxUEuevic3Atdzad0LXKppkd1fyt
nYe0cgyT0pji3my+bgsss3d+Kx0dC5J1jK/IYIMuEVPkYf8tlDJ//NMYZk9RGpny
tWX77R9i6IxLcSWbhX8o7Jg/hapqssRLyJyyIJJhVsLvKrhRHUL5ZOn3jnGQoYLv
4gaqCZNIohk8xH1L7EKaaJw3g5wf2eQ8Q3H0Zl1gvArFGQGzqTRIBeCnlI+l/hAq
sNv+IEgbI8VmqdeKGkux5O8B27Kg0s+IM9XdVfOmIb7fTre8hjLI6tZMmWiaImPn
davlCYkit1c5D/rIhEScNzsZIZfq8rymkM4uxUAXMIdJeg9Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org