Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa
File: k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa (raw, json)
Hash identifier: hWtVcY0CeRQaInT2AOttnALoh+zHROpkJ7rz5XTq0Yk=
Subject key identifier: 93:49:4D:21:ED:7E:EC:47:6C:59:2D:F2:5A:B5:EA:93:12:C4:21:94
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186E22B2F939D912431036348B417E9A883
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa
Signing time: Tue 14 Mar 2023 22:08:46 +0000
ROA not before: Tue 14 Mar 2023 22:08:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199467
IP address blocks: 2a0e:b107:1f50::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:2b:2f:93:9d:91:24:31:03:63:48:b4:17:e9:a8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 14 22:08:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93494d21ed7eec476c592df25ab5ea9312c42194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:49:e9:e4:76:46:8a:ad:d7:6e:73:42:40:
7b:2c:c0:0a:f0:22:39:c7:d1:38:e2:44:9e:c4:b8:
71:eb:fe:e2:fd:2c:7f:05:a5:c8:7a:ff:05:a7:21:
64:13:25:f9:8d:d7:77:9e:36:2a:09:b3:f8:a4:34:
8b:b8:89:3d:03:47:3c:cf:e3:2b:10:93:0e:48:21:
c7:fb:d4:92:be:14:4c:1a:14:c0:9f:2c:99:c1:3d:
99:33:3e:85:cf:35:91:ef:4d:c5:79:7f:96:f2:da:
5a:fc:3e:08:1c:e8:ba:1f:fc:74:c2:8c:f4:89:cb:
8a:42:cc:9f:b1:9d:81:ac:62:8d:13:23:6e:19:7c:
e6:16:b5:11:18:e7:e5:ad:78:16:27:46:62:09:19:
01:d5:53:6a:79:1d:34:a8:86:25:6c:e1:b7:39:01:
57:8c:a2:98:4e:87:70:6c:7c:cf:9b:2b:ac:41:02:
b5:49:5a:8d:5f:b6:f0:83:a6:f3:31:81:57:ce:ca:
dc:d7:19:8e:e6:86:17:30:46:86:3a:93:8a:39:7c:
71:e8:e5:91:05:57:58:2c:ff:df:c9:e7:76:4f:09:
7f:6c:a6:12:cb:58:b6:bf:87:d4:a0:b1:5e:09:e2:
75:58:da:1c:29:8e:a3:14:e8:b6:c5:dd:1e:8a:bd:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:4D:21:ED:7E:EC:47:6C:59:2D:F2:5A:B5:EA:93:12:C4:21:94
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0lNIe1-7EdsWS3yWrXqkxLEIZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1f50::/44
Signature Algorithm: sha256WithRSAEncryption
50:5f:e6:81:de:b2:01:ee:d6:48:04:9c:d5:00:c1:c1:a4:43:
fe:bd:dc:74:22:64:a3:73:c5:12:e0:08:3c:fe:ef:11:cc:29:
6a:f8:f2:c7:15:a8:ca:62:6c:4f:9e:cc:e2:2b:f1:de:4b:b8:
10:c6:58:d2:35:e4:b8:d1:4d:2b:71:0c:43:e5:df:60:62:f4:
f2:a2:84:32:b0:96:44:00:cb:74:e5:f2:f0:0c:f2:71:8d:ac:
a4:48:6b:e1:58:46:81:ac:47:12:1f:f0:0d:ec:70:49:07:2c:
5e:a6:b3:86:fc:d0:84:e6:82:36:b5:5d:a3:b1:9a:5a:f0:8e:
a9:93:39:cd:b1:05:71:55:96:96:f9:3f:21:bb:45:4a:28:df:
ac:5e:d7:7b:90:bf:97:48:17:25:ad:15:6f:7b:32:d3:02:2d:
e8:fd:96:b4:13:a1:11:4d:93:33:f9:b8:a1:2b:3e:cb:f5:f2:
47:11:43:01:1d:e3:39:c9:7b:84:9c:9b:3d:1c:a8:27:b6:24:
32:74:73:1b:45:b7:59:0a:be:a0:c2:65:8c:9f:f7:32:d7:23:
47:b8:e9:05:07:44:00:07:99:6b:4c:71:cc:b8:08:e0:60:db:
37:2c:88:23:65:63:29:d3:3a:a2:5e:3a:fb:a3:a6:88:dd:85:
0d:fd:1c:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYbiKy+TnZEkMQNjSLQX6aiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzE0MjIwODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQ5NGQyMWVkN2VlYzQ3NmM1OTJkZjI1YWI1ZWE5MzEyYzQyMTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY5J6eR2Roqt125zQkB7LMAK8CI5
x9E44kSexLhx6/7i/Sx/BaXIev8FpyFkEyX5jdd3njYqCbP4pDSLuIk9A0c8z+Mr
EJMOSCHH+9SSvhRMGhTAnyyZwT2ZMz6FzzWR703FeX+W8tpa/D4IHOi6H/x0woz0
icuKQsyfsZ2BrGKNEyNuGXzmFrURGOflrXgWJ0ZiCRkB1VNqeR00qIYlbOG3OQFX
jKKYTodwbHzPmyusQQK1SVqNX7bwg6bzMYFXzsrc1xmO5oYXMEaGOpOKOXxx6OWR
BVdYLP/fyed2Twl/bKYSy1i2v4fUoLFeCeJ1WNocKY6jFOi2xd0eir1z1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJNJTSHtfuxHbFkt8lq16pMSxCGUMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvazBsTkllMS03RWRzV1MzeVdyWHFreExFSVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx9Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBQX+aB3rIB7tZIBJzVAMHBpEP+vdx0ImSjc8US
4Ag8/u8RzClq+PLHFajKYmxPnsziK/HeS7gQxljSNeS40U0rcQxD5d9gYvTyooQy
sJZEAMt05fLwDPJxjaykSGvhWEaBrEcSH/AN7HBJByxeprOG/NCE5oI2tV2jsZpa
8I6pkznNsQVxVZaW+T8hu0VKKN+sXtd7kL+XSBclrRVvezLTAi3o/Za0E6ERTZMz
+bihKz7L9fJHEUMBHeM5yXuEnJs9HKgntiQydHMbRbdZCr6gwmWMn/cy1yNHuOkF
B0QAB5lrTHHMuAjgYNs3LIgjZWMp0zqiXjr7o6aI3YUN/Rz4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org