Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nJQgW3qz8_tVxSst8ZkrIrR8shE.roa
File: nJQgW3qz8_tVxSst8ZkrIrR8shE.roa (raw, json)
Hash identifier: YJ4D48sS/JhIR/SgPQ+bY0CKBfjy+4VDuXYaFVGIB1o=
Subject key identifier: 9C:94:20:5B:7A:B3:F3:FB:55:C5:2B:2D:F1:99:2B:22:B4:7C:B2:11
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01918578AA652B1083C44CE39BAE0F36320E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nJQgW3qz8_tVxSst8ZkrIrR8shE.roa
Signing time: Sat 24 Aug 2024 17:39:23 +0000
ROA not before: Sat 24 Aug 2024 17:39:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc3:3330::/44 maxlen: 48
2a10:ccc6:6660::/44 maxlen: 48
2a10:ccc6:6661::/48 maxlen: 48
2a10:ccc6:6662::/48 maxlen: 48
2a10:ccc6:666f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 06:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:78:aa:65:2b:10:83:c4:4c:e3:9b:ae:0f:36:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 24 17:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c94205b7ab3f3fb55c52b2df1992b22b47cb211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:83:28:16:34:de:8c:31:c1:d8:23:17:0b:
11:48:92:53:60:19:e2:ea:18:e6:72:a5:dd:e2:7a:
e8:4c:de:b2:57:af:28:a1:eb:80:55:e5:c4:e6:39:
18:75:f9:c6:76:0b:7d:24:59:c0:73:64:1b:ed:a7:
64:f8:8a:61:94:ce:ee:48:9b:f7:b0:6e:35:94:70:
9a:30:62:7b:e4:df:fb:94:dc:87:e5:2a:c4:8b:b3:
80:fd:4c:ae:76:9f:86:5b:7f:e1:7d:cc:2d:7a:f7:
60:1f:7b:45:d6:3c:5e:48:9c:98:8f:98:ba:39:11:
25:96:77:23:7b:2f:b9:93:70:d4:7e:10:c0:1b:49:
f3:cb:89:ef:c0:ca:e9:fa:72:c0:7b:d1:60:c3:dd:
bd:80:66:ef:08:1f:24:93:e4:a3:f1:a9:73:80:49:
52:20:1f:53:10:65:04:d1:0d:5e:d4:d8:b3:fb:66:
ee:0e:2f:5e:f6:54:ce:d3:c6:2b:68:58:2e:35:98:
96:38:20:3a:e9:53:61:03:b6:07:d6:d3:11:0f:0e:
52:77:6f:13:74:e0:51:14:8a:0e:e4:06:28:23:40:
37:be:39:f9:b2:d6:84:66:72:15:73:cb:13:ee:c2:
29:8e:80:71:d6:63:6c:ab:2f:58:73:80:d3:5a:c4:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:20:5B:7A:B3:F3:FB:55:C5:2B:2D:F1:99:2B:22:B4:7C:B2:11
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nJQgW3qz8_tVxSst8ZkrIrR8shE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:3330::/44
2a10:ccc6:6660::/44
Signature Algorithm: sha256WithRSAEncryption
71:f2:d5:b1:01:0a:7b:af:28:b1:66:3f:bf:a8:0a:47:a2:9c:
d8:c8:52:35:3f:62:e5:4a:d3:5c:d9:4f:5e:6e:52:84:f1:4e:
d4:30:b6:45:48:b8:52:54:8a:01:f7:7c:0e:b6:ac:7b:28:5b:
b9:37:93:f7:eb:5b:e1:50:8f:de:c8:32:76:32:d0:b1:03:f4:
70:86:ce:a2:e8:3c:f9:16:59:a8:29:2f:94:86:68:03:62:22:
21:e5:68:fc:c9:41:98:e4:de:03:e9:b0:58:ca:54:33:41:55:
33:a0:b9:14:06:3c:43:9a:2b:8b:65:db:cb:f5:c9:11:64:fc:
62:f9:74:b5:0f:fe:a3:e9:2d:84:5b:ed:7a:68:24:05:f5:b9:
c0:d3:98:8c:66:70:85:81:0e:16:eb:4b:9b:ad:e9:4c:80:b7:
a3:a8:3a:77:08:64:da:2b:e1:a4:3e:80:cb:b5:5f:e3:70:b8:
4b:14:84:82:b8:ab:a6:4e:58:2e:82:4c:f9:fd:7d:45:f2:37:
fb:14:05:ee:3d:4c:b1:49:e9:35:66:9b:2e:3b:97:30:18:e7:
16:08:01:9f:b4:98:f9:e4:46:c4:00:e6:72:f7:ad:b4:72:0e:
02:3a:33:0a:7d:15:6b:63:24:1c:3b:3a:29:e7:72:3c:60:0b:
e6:f8:98:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZGFeKplKxCDxEzjm64PNjIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwODI0MTczOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yzk0MjA1YjdhYjNmM2ZiNTVjNTJiMmRmMTk5MmIyMmI0N2NiMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QODKBY03owxwdgjFwsRSJJTYBni
6hjmcqXd4nroTN6yV68ooeuAVeXE5jkYdfnGdgt9JFnAc2Qb7adk+IphlM7uSJv3
sG41lHCaMGJ75N/7lNyH5SrEi7OA/Uyudp+GW3/hfcwtevdgH3tF1jxeSJyYj5i6
OREllncjey+5k3DUfhDAG0nzy4nvwMrp+nLAe9Fgw929gGbvCB8kk+Sj8alzgElS
IB9TEGUE0Q1e1Niz+2buDi9e9lTO08YraFguNZiWOCA66VNhA7YH1tMRDw5Sd28T
dOBRFIoO5AYoI0A3vjn5staEZnIVc8sT7sIpjoBx1mNsqy9Yc4DTWsQdJQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJyUIFt6s/P7VcUrLfGZKyK0fLIRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbkpRZ1czcXo4X3RWeFNzdDhaa3JJclI4c2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhDMwzMw
AwcEKhDMxmZgMA0GCSqGSIb3DQEBCwUAA4IBAQBx8tWxAQp7ryixZj+/qApHopzY
yFI1P2LlStNc2U9eblKE8U7UMLZFSLhSVIoB93wOtqx7KFu5N5P361vhUI/eyDJ2
MtCxA/Rwhs6i6Dz5FlmoKS+UhmgDYiIh5Wj8yUGY5N4D6bBYylQzQVUzoLkUBjxD
miuLZdvL9ckRZPxi+XS1D/6j6S2EW+16aCQF9bnA05iMZnCFgQ4W60ubrelMgLej
qDp3CGTaK+GkPoDLtV/jcLhLFISCuKumTlgugkz5/X1F8jf7FAXuPUyxSek1Zpsu
O5cwGOcWCAGftJj55EbEAOZy9620cg4COjMKfRVrYyQcOzop53I8YAvm+Jgt
-----END CERTIFICATE-----
Generated at Thu Aug 29 08:34:02 2024 by rpki-client on console-ams.rpki-client.org