Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa
File: js61YGQ4h8ug9S6XFlEIZXrDipg.roa (raw, json)
Hash identifier: QBOI3BPwCaEeY0UjvQ+JDaoCvikdWrZggUIphqwqS6A=
Subject key identifier: 8E:CE:B5:60:64:38:87:CB:A0:F5:2E:97:16:51:08:65:7A:C3:8A:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E785BD7AA0CBD3B833B762B10AA186
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa
Signing time: Mon 02 Jan 2023 05:14:59 +0000
ROA not before: Mon 02 Jan 2023 05:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56758
IP address blocks: 2a0e:97c0:660::/44 maxlen: 48
2a0e:b107:17a0::/44 maxlen: 48
2a10:cc40:b000::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:85:bd:7a:a0:cb:d3:b8:33:b7:62:b1:0a:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eceb560643887cba0f52e97165108657ac38a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:b1:cf:ad:9a:9b:4f:f5:b1:1e:6d:e0:60:
f0:0e:88:f3:b5:1e:a0:9b:59:e9:8d:41:f2:8f:10:
47:a3:95:b0:5a:19:7c:5f:2b:a3:5e:c6:b9:2f:47:
40:20:9e:95:67:a6:57:78:bf:f8:a9:6e:19:0c:29:
3b:2b:05:90:2a:46:46:15:52:a6:da:b8:4d:e8:b8:
36:a2:3d:63:cd:eb:29:14:44:09:c7:52:6e:03:bb:
24:43:47:bd:80:ac:de:68:43:b0:8b:fb:ac:5d:70:
3b:d2:b7:ef:a0:ee:4b:0b:e5:3d:85:6e:55:09:12:
e9:e6:9a:71:5f:fe:65:be:7a:e9:81:52:36:4c:71:
0e:11:ef:2b:81:0d:4f:6f:92:55:cc:d3:cc:17:54:
72:bd:5a:15:5e:09:57:40:fd:11:05:c2:b5:e7:2e:
92:3c:9d:7e:8e:24:d9:52:b2:a5:9c:d0:14:11:a0:
89:a7:71:79:39:be:3f:1b:95:24:5f:71:24:3a:1e:
a9:77:ad:56:8d:80:f9:aa:88:8b:65:fd:c0:80:3a:
68:fa:0f:ac:b0:04:d2:d0:b5:e2:bb:06:7a:02:11:
3a:cb:bc:0d:e2:95:f1:d9:2d:5f:2e:92:27:e6:a2:
4e:d1:9d:8f:0d:60:1d:d1:78:26:4c:c3:43:e9:f5:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:B5:60:64:38:87:CB:A0:F5:2E:97:16:51:08:65:7A:C3:8A:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/js61YGQ4h8ug9S6XFlEIZXrDipg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:660::/44
2a0e:b107:17a0::/44
2a10:cc40:b000::/44
Signature Algorithm: sha256WithRSAEncryption
05:05:d9:74:92:97:f9:ae:4c:2d:ec:02:3f:ec:65:30:bc:6c:
82:c9:17:6f:1f:60:44:14:2a:70:b0:23:db:75:b0:be:17:9a:
68:b2:fd:61:bc:07:e1:22:d5:47:bb:ab:81:a6:6a:ba:31:94:
ac:d3:e7:76:e2:1e:51:a0:5a:00:9a:47:03:8d:0e:7e:cc:f8:
41:ca:5e:af:d4:f2:65:d8:f3:5d:4b:32:e5:8c:08:b4:a2:75:
b3:96:6e:24:9b:e3:ea:8b:23:cc:11:ea:33:6f:40:f8:33:3b:
09:0e:24:28:1c:58:8a:92:1f:8a:a6:cd:a1:3a:ef:de:53:7c:
4f:99:cd:10:d4:b3:cc:16:2b:b9:1d:4c:bf:13:2e:ff:43:a8:
79:5c:0b:13:80:e9:44:53:b8:7e:c5:17:e4:14:9c:a3:b4:a1:
be:38:d9:13:90:8e:14:f3:f3:73:ff:e3:33:3c:2e:f4:ec:9f:
90:16:36:b9:3c:11:13:d8:3e:2b:8b:8c:51:26:bd:16:f2:b7:
4f:19:bd:b0:84:fb:8a:9a:fe:48:a9:1b:b4:5a:f3:9c:20:a1:
70:27:eb:4b:ce:8b:6a:29:5a:df:49:ec:20:98:86:16:3e:0a:
91:57:67:40:94:12:44:be:43:5a:70:52:00:2e:c4:b8:dc:b3:
c9:0a:0b:6e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVw54W9eqDL07gzt2KxCqGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWNlYjU2MDY0Mzg4N2NiYTBmNTJlOTcxNjUxMDg2NTdhYzM4YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL6xz62am0/1sR5t4GDwDojztR6g
m1npjUHyjxBHo5WwWhl8XyujXsa5L0dAIJ6VZ6ZXeL/4qW4ZDCk7KwWQKkZGFVKm
2rhN6Lg2oj1jzespFEQJx1JuA7skQ0e9gKzeaEOwi/usXXA70rfvoO5LC+U9hW5V
CRLp5ppxX/5lvnrpgVI2THEOEe8rgQ1Pb5JVzNPMF1RyvVoVXglXQP0RBcK15y6S
PJ1+jiTZUrKlnNAUEaCJp3F5Ob4/G5UkX3EkOh6pd61WjYD5qoiLZf3AgDpo+g+s
sATS0LXiuwZ6AhE6y7wN4pXx2S1fLpIn5qJO0Z2PDWAd0XgmTMND6fVg7wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFI7OtWBkOIfLoPUulxZRCGV6w4qYMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvanM2MVlHUTRoOHVnOVM2WEZsRUlaWHJEaXBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6XwAZg
AwcEKg6xBxegAwcEKhDMQLAAMA0GCSqGSIb3DQEBCwUAA4IBAQAFBdl0kpf5rkwt
7AI/7GUwvGyCyRdvH2BEFCpwsCPbdbC+F5posv1hvAfhItVHu6uBpmq6MZSs0+d2
4h5RoFoAmkcDjQ5+zPhByl6v1PJl2PNdSzLljAi0onWzlm4km+PqiyPMEeozb0D4
MzsJDiQoHFiKkh+Kps2hOu/eU3xPmc0Q1LPMFiu5HUy/Ey7/Q6h5XAsTgOlEU7h+
xRfkFJyjtKG+ONkTkI4U8/Nz/+MzPC707J+QFja5PBET2D4ri4xRJr0W8rdPGb2w
hPuKmv5IqRu0WvOcIKFwJ+tLzotqKVrfSewgmIYWPgqRV2dAlBJEvkNacFIALsS4
3LPJCgtu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org