Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pLqftcaUrpLMuL7fwb8d0AB02A8.roa
File: pLqftcaUrpLMuL7fwb8d0AB02A8.roa (raw, json)
Hash identifier: 6oIMLovLaI9bk9MaRyB2ayaiR658f/fIkEL2aem4PLs=
Subject key identifier: A4:BA:9F:B5:C6:94:AE:92:CC:B8:BE:DF:C1:BF:1D:D0:00:74:D8:0F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD1098D374A293880EB9B868AE873
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pLqftcaUrpLMuL7fwb8d0AB02A8.roa
Signing time: Tue 24 Jan 2023 16:09:40 +0000
ROA not before: Tue 24 Jan 2023 16:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203521
IP address blocks: 2a0e:b107:1b80::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d1:09:8d:37:4a:29:38:80:eb:9b:86:8a:e8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ba9fb5c694ae92ccb8bedfc1bf1dd00074d80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:7e:12:94:b6:3a:28:ac:14:79:56:24:6d:
16:e6:2c:e4:d8:eb:39:69:0b:e8:04:9d:ff:52:a3:
b2:a7:4d:8f:c0:d0:41:2e:e9:2e:6c:cb:9f:1e:36:
27:ae:3d:14:d4:e5:b5:61:8d:27:71:8d:4f:b0:47:
ba:d2:f8:bb:7d:44:50:3e:88:37:1f:f1:c9:a4:46:
c8:ad:50:91:d9:c4:50:e4:81:b4:6b:49:83:d6:e1:
bb:d1:f7:ab:05:1b:c7:8f:43:99:b4:d1:e9:b6:85:
c5:49:78:68:99:8f:69:de:66:d7:dc:e4:cd:51:20:
9f:13:30:65:a0:35:99:aa:d0:45:f7:50:eb:70:1f:
37:41:c2:b9:3c:15:13:1a:70:21:46:5d:e2:fd:46:
4a:e2:e9:56:ca:ff:61:a2:23:3a:ec:a6:7b:3c:0c:
61:1a:a4:9a:d8:06:88:5c:5e:54:5e:d3:d8:82:d2:
53:5f:9c:88:2a:aa:64:41:9c:b0:10:12:71:4c:f8:
9c:9e:7c:48:8c:6f:7b:54:82:03:16:a5:53:c1:d4:
c7:cf:22:fc:7a:f7:7b:e0:31:73:83:45:32:57:3c:
8b:2d:f5:e5:8d:fa:cb:5a:a2:c7:98:fc:9e:a7:61:
d4:87:70:27:9e:42:54:a0:e1:f3:f2:90:e1:d4:81:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:9F:B5:C6:94:AE:92:CC:B8:BE:DF:C1:BF:1D:D0:00:74:D8:0F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pLqftcaUrpLMuL7fwb8d0AB02A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b80::/44
Signature Algorithm: sha256WithRSAEncryption
30:e8:2e:2a:1e:61:95:34:ab:2f:11:dc:ec:30:0e:74:d6:e8:
b0:3f:1f:a6:83:6f:c1:f4:18:9f:bf:17:03:ac:91:88:0b:cd:
64:d8:81:0a:e3:89:78:73:dd:9d:f8:23:96:95:8e:9b:80:a2:
f0:13:33:5a:79:20:4d:40:d7:82:48:ce:24:45:86:76:60:33:
71:06:6d:f4:de:e1:41:63:15:e8:b4:01:5b:9f:5c:b1:79:98:
fe:5f:84:ec:a7:2e:12:91:65:e6:c4:d1:e0:a7:1f:4a:0e:bb:
4b:22:0a:12:2a:00:6d:49:32:6d:f9:3f:5c:26:f2:b0:84:34:
af:76:40:4e:04:b7:6a:35:5d:b4:7e:83:3c:c2:0d:7c:30:dd:
11:5f:f8:f7:6b:ec:58:61:ef:28:87:55:7b:00:c4:6f:40:e6:
05:02:55:61:1f:ee:29:e4:74:27:3a:72:d0:44:29:93:51:f2:
1e:d3:e9:cc:8b:d4:a6:0a:46:c5:71:a1:56:14:6c:df:20:69:
75:5c:b0:d7:ed:7a:4a:e5:ba:73:7d:1d:94:15:d0:86:44:02:
a2:8a:ae:5a:03:7a:ad:43:a3:e3:fa:ec:08:5c:f6:84:9c:df:
b6:18:dd:8f:72:fd:57:25:35:f7:19:68:b9:77:ed:0e:c4:43:
27:5a:2c:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXkitEJjTdKKTiA65uGiuhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGJhOWZiNWM2OTRhZTkyY2NiOGJlZGZjMWJmMWRkMDAwNzRkODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIZ+EpS2OiisFHlWJG0W5izk2Os5
aQvoBJ3/UqOyp02PwNBBLukubMufHjYnrj0U1OW1YY0ncY1PsEe60vi7fURQPog3
H/HJpEbIrVCR2cRQ5IG0a0mD1uG70ferBRvHj0OZtNHptoXFSXhomY9p3mbX3OTN
USCfEzBloDWZqtBF91DrcB83QcK5PBUTGnAhRl3i/UZK4ulWyv9hoiM67KZ7PAxh
GqSa2AaIXF5UXtPYgtJTX5yIKqpkQZywEBJxTPicnnxIjG97VIIDFqVTwdTHzyL8
evd74DFzg0UyVzyLLfXljfrLWqLHmPyep2HUh3AnnkJUoOHz8pDh1IFhEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKS6n7XGlK6SzLi+38G/HdAAdNgPMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcExxZnRjYVVycExNdUw3ZndiOGQwQUIwMkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxuA
MA0GCSqGSIb3DQEBCwUAA4IBAQAw6C4qHmGVNKsvEdzsMA501uiwPx+mg2/B9Bif
vxcDrJGIC81k2IEK44l4c92d+COWlY6bgKLwEzNaeSBNQNeCSM4kRYZ2YDNxBm30
3uFBYxXotAFbn1yxeZj+X4Tspy4SkWXmxNHgpx9KDrtLIgoSKgBtSTJt+T9cJvKw
hDSvdkBOBLdqNV20foM8wg18MN0RX/j3a+xYYe8oh1V7AMRvQOYFAlVhH+4p5HQn
OnLQRCmTUfIe0+nMi9SmCkbFcaFWFGzfIGl1XLDX7XpK5bpzfR2UFdCGRAKiiq5a
A3qtQ6Pj+uwIXPaEnN+2GN2Pcv1XJTX3GWi5d+0OxEMnWiy5
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org