Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa
File: oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa (raw, json)
Hash identifier: Hk6diYkKmuK7rok1qcHykiHTNuQB3JB4dsnGQ2n6uso=
Subject key identifier: A0:55:B5:BE:E4:3B:D1:8C:50:50:D2:18:5D:57:9D:F4:AF:4A:7F:B1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E784F0CFD6E68BB426887A0F10E48F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa
Signing time: Mon 02 Jan 2023 05:14:59 +0000
ROA not before: Mon 02 Jan 2023 05:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51076
IP address blocks: 2a0e:97c0:7e5::/48 maxlen: 48
2a0e:97c0:7e8::/48 maxlen: 48
2a0e:97c0:7e0::/48 maxlen: 48
2a0e:97c0:7e3::/48 maxlen: 48
2a0e:97c0:7e6::/48 maxlen: 48
2a0e:97c0:7e9::/48 maxlen: 48
2a0e:97c0:7e1::/48 maxlen: 48
2a0e:97c0:7e4::/48 maxlen: 48
2a0e:97c0:7e7::/48 maxlen: 48
2a0e:97c0:7ea::/48 maxlen: 48
2a0e:97c0:7e2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Apr 2023 22:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:84:f0:cf:d6:e6:8b:b4:26:88:7a:0f:10:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a055b5bee43bd18c5050d2185d579df4af4a7fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:8b:0f:34:4a:29:f3:09:d0:2a:91:2a:5e:
db:5a:4a:17:a8:73:21:1a:cf:2a:7d:19:79:ac:bc:
43:22:b3:cb:0a:3e:6c:ac:13:ad:26:98:66:55:04:
8d:01:c9:01:6f:29:0c:7d:7d:de:cb:49:07:ff:a3:
95:ec:fd:74:5b:ef:5f:14:90:de:9e:01:af:46:ff:
75:4a:1c:b1:94:56:54:9c:83:9e:32:35:76:57:2d:
6e:9e:2b:82:7c:30:ba:fd:84:c9:97:9f:70:36:45:
47:d1:37:8c:ab:1f:87:8d:90:7e:02:55:2a:a5:0f:
41:e6:79:a2:a8:d9:ef:18:f0:21:60:71:b1:87:17:
82:4b:af:c7:a8:74:2b:61:d0:a3:de:88:aa:f2:ef:
e5:b6:28:02:fa:82:29:9e:31:80:fe:e6:d1:51:58:
13:59:cb:3e:95:48:86:13:0c:57:46:14:5f:76:e5:
28:c6:bb:c1:58:b3:ea:0c:b4:7b:e0:79:bd:c8:19:
1d:c5:96:cf:06:26:47:aa:7d:5b:ee:1e:7e:93:2a:
04:5b:b7:b8:66:d5:d5:5e:3e:f9:2b:f2:82:c4:29:
8e:df:03:cc:87:cd:1a:af:1f:59:f2:fb:d8:3a:aa:
f9:59:8c:c5:0e:f3:9f:77:0d:50:b5:68:fa:b8:7e:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:B5:BE:E4:3B:D1:8C:50:50:D2:18:5D:57:9D:F4:AF:4A:7F:B1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oFW1vuQ70YxQUNIYXVed9K9Kf7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7e0::-2a0e:97c0:7ea:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:a3:e4:0f:04:af:d0:8d:5f:4e:ef:80:0d:63:06:72:e1:0d:
19:77:0c:7f:a7:4f:e6:1a:39:32:89:8c:1e:5d:95:67:d1:c1:
ee:8d:57:9c:42:0d:08:ea:0a:e4:d2:4a:0b:a2:f9:2c:49:31:
79:6a:e9:fa:39:8c:7d:9c:bf:73:ec:08:c8:52:97:13:37:4a:
d6:b7:71:04:ff:93:f8:5c:ee:fa:03:df:78:bb:2a:be:d6:28:
3f:dc:81:d9:7b:f7:74:bd:f5:2f:37:a8:e4:1f:0d:39:68:4b:
6b:b9:1a:d4:67:cd:3e:e7:b3:f7:56:ae:8c:5e:4c:74:81:84:
d3:0d:79:ba:1f:da:78:7a:89:81:1f:09:f0:4d:8f:f6:83:0a:
d0:88:a0:8a:e3:80:d7:75:69:8b:cf:b8:bb:ad:b0:5b:82:16:
a1:b7:de:7b:66:c1:1f:ad:35:3e:d4:5c:1b:c5:4a:3d:e1:98:
82:dc:9a:c3:e7:78:a9:81:f3:17:54:e3:a1:7d:0e:dd:ff:22:
c1:2e:1c:16:25:83:ee:7b:4c:48:00:ff:19:83:dd:b6:07:23:
bc:a6:e7:4b:f9:a3:73:fa:87:67:ba:ea:4c:07:d1:16:b9:c8:
dd:a0:a4:9b:e5:05:a4:41:c6:00:a4:cf:27:ba:3c:22:e5:7a:
5c:9d:8b:3d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVw54Twz9bmi7QmiHoPEOSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTAyMDUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDU1YjViZWU0M2JkMThjNTA1MGQyMTg1ZDU3OWRmNGFmNGE3ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KLDzRKKfMJ0CqRKl7bWkoXqHMh
Gs8qfRl5rLxDIrPLCj5srBOtJphmVQSNAckBbykMfX3ey0kH/6OV7P10W+9fFJDe
ngGvRv91ShyxlFZUnIOeMjV2Vy1uniuCfDC6/YTJl59wNkVH0TeMqx+HjZB+AlUq
pQ9B5nmiqNnvGPAhYHGxhxeCS6/HqHQrYdCj3oiq8u/ltigC+oIpnjGA/ubRUVgT
Wcs+lUiGEwxXRhRfduUoxrvBWLPqDLR74Hm9yBkdxZbPBiZHqn1b7h5+kyoEW7e4
ZtXVXj75K/KCxCmO3wPMh80arx9Z8vvYOqr5WYzFDvOfdw1QtWj6uH4TdwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKBVtb7kO9GMUFDSGF1XnfSvSn+xMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvb0ZXMXZ1UTcwWXhRVU5JWVhWZWQ5SzlLZjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUqDpfA
B+ADBwAqDpfAB+owDQYJKoZIhvcNAQELBQADggEBABKj5A8Er9CNX07vgA1jBnLh
DRl3DH+nT+YaOTKJjB5dlWfRwe6NV5xCDQjqCuTSSgui+SxJMXlq6fo5jH2cv3Ps
CMhSlxM3Sta3cQT/k/hc7voD33i7Kr7WKD/cgdl793S99S83qOQfDTloS2u5GtRn
zT7ns/dWroxeTHSBhNMNebof2nh6iYEfCfBNj/aDCtCIoIrjgNd1aYvPuLutsFuC
FqG33ntmwR+tNT7UXBvFSj3hmILcmsPneKmB8xdU46F9Dt3/IsEuHBYlg+57TEgA
/xmD3bYHI7ym50v5o3P6h2e66kwH0Ra5yN2gpJvlBaRBxgCkzye6PCLlelydiz0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:38 2024 by rpki-client on console-fra.rpki-client.org