Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFx1E4_ei7TU-_Ii-UMzh7XHKQc.roa
File: qFx1E4_ei7TU-_Ii-UMzh7XHKQc.roa (raw, json)
Hash identifier: vEcVZcCFC/Hb+emzFDamjv3tm5j6bYXpk5Yrzoc4+q0=
Subject key identifier: A8:5C:75:13:8F:DE:8B:B4:D4:FB:F2:22:F9:43:33:87:B5:C7:29:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C29F52A96EE7A2901D5CDC9DAC6EBFFFF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFx1E4_ei7TU-_Ii-UMzh7XHKQc.roa
Signing time: Sat 02 Dec 2023 09:56:22 +0000
ROA not before: Sat 02 Dec 2023 09:56:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211293
IP address blocks: 2a0e:b107:2190::/48 maxlen: 48
2a0e:b107:2195::/48 maxlen: 48
2a0e:b107:219a::/48 maxlen: 48
2a0e:b107:219f::/48 maxlen: 48
2a0e:b107:2194::/48 maxlen: 48
2a0e:b107:2199::/48 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0e:b107:2193::/48 maxlen: 48
2a0e:b107:2198::/48 maxlen: 48
2a0e:b107:219d::/48 maxlen: 48
2a0e:b107:21c0::/44 maxlen: 48
2a0e:b107:2192::/48 maxlen: 48
2a0e:b107:2197::/48 maxlen: 48
2a0e:b107:219c::/48 maxlen: 48
2a0e:b107:2191::/48 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2196::/48 maxlen: 48
2a0e:b107:219b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:f5:2a:96:ee:7a:29:01:d5:cd:c9:da:c6:eb:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 2 09:56:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85c75138fde8bb4d4fbf222f9433387b5c72907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:b5:90:53:a6:26:e3:88:44:6f:cf:bb:92:
6d:06:ae:fd:df:21:a8:87:ad:b6:a1:73:e8:ca:8f:
1a:8c:fb:e9:4d:3c:6d:38:ad:3f:94:a0:6e:e9:ca:
e0:6e:62:05:f9:fb:98:86:0a:72:d5:78:52:2a:11:
e6:19:27:e3:1e:92:6a:72:a9:5f:63:60:45:6d:32:
95:00:26:1e:a1:d5:c0:e4:52:2a:b5:fd:e1:23:db:
d7:bd:0f:db:82:7d:04:2b:6c:fc:28:9e:6b:be:e1:
1f:af:46:d7:db:ab:2f:9d:8a:f2:aa:0d:d2:22:0f:
04:fd:dc:b9:c8:fd:16:8c:2f:51:d8:70:a4:8c:01:
17:37:33:5c:7b:90:0f:ec:39:96:5d:da:40:ea:e1:
e8:e0:3e:15:23:cd:94:ec:a9:2d:d0:62:02:4d:ae:
d3:2e:9a:dd:8f:99:a5:05:75:d3:ac:8f:81:3b:27:
f5:2e:f5:00:8c:6b:cd:7c:e6:52:7b:a5:7b:fe:d5:
4f:0d:83:4f:72:6c:46:05:ce:dd:91:78:f5:b0:25:
65:71:3e:b4:80:e3:8a:04:9e:c9:6f:89:64:6d:4a:
88:2f:fc:32:26:e3:67:cb:66:92:f8:ae:9b:9c:1a:
03:10:5d:b0:5e:c6:d7:8a:54:bb:51:36:82:82:e2:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:75:13:8F:DE:8B:B4:D4:FB:F2:22:F9:43:33:87:B5:C7:29:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qFx1E4_ei7TU-_Ii-UMzh7XHKQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2190::-2a0e:b107:219d:ffff:ffff:ffff:ffff:ffff
2a0e:b107:219f::/48
2a0e:b107:21c0::/44
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
91:3f:37:e9:32:17:75:2a:e9:f2:9a:7d:e0:18:f9:a8:93:2b:
51:45:b0:f5:9e:df:c6:bc:80:bc:a4:a4:de:dd:30:96:c5:20:
84:17:a8:e8:dc:95:93:f0:6c:af:0c:59:48:73:6d:e1:41:15:
97:47:76:6f:e2:c2:4c:dc:75:9d:e4:69:3a:f1:48:24:a3:3b:
55:e5:ca:53:14:1e:76:88:8d:e6:00:df:40:86:14:12:64:bd:
9e:5e:39:90:a3:93:ea:7f:ca:ce:6b:a0:f8:3e:45:42:29:a0:
a0:f3:cd:6f:e0:c8:4c:25:52:bf:ac:55:f5:a8:c2:ba:12:3f:
0a:2e:56:7e:3e:9f:bb:38:dc:9b:75:49:ee:e1:01:5a:71:e8:
40:51:00:f6:cc:12:07:ae:4b:d2:89:62:f5:1e:03:2e:87:e1:
dd:0e:95:e1:1f:a8:d6:25:f7:c8:ae:03:71:ab:11:8a:81:01:
ea:f0:38:5f:34:7d:fe:98:1c:44:ef:08:38:f7:f7:9b:7a:bc:
56:a4:ea:03:60:c0:d4:78:e8:4f:69:2d:94:93:c6:a5:0c:41:
1d:32:31:d3:6b:d9:15:5b:32:ce:98:c6:60:d9:cb:93:c0:4d:
6a:73:bf:26:bb:3c:0f:23:2e:9b:7f:b3:62:72:14:33:90:7e:
ea:9c:73:1d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYwp9SqW7nopAdXNydrG6///MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMjAyMDk1NjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODVjNzUxMzhmZGU4YmI0ZDRmYmYyMjJmOTQzMzM4N2I1YzcyOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYK1kFOmJuOIRG/Pu5JtBq793yGo
h622oXPoyo8ajPvpTTxtOK0/lKBu6crgbmIF+fuYhgpy1XhSKhHmGSfjHpJqcqlf
Y2BFbTKVACYeodXA5FIqtf3hI9vXvQ/bgn0EK2z8KJ5rvuEfr0bX26svnYryqg3S
Ig8E/dy5yP0WjC9R2HCkjAEXNzNce5AP7DmWXdpA6uHo4D4VI82U7Kkt0GICTa7T
Lprdj5mlBXXTrI+BOyf1LvUAjGvNfOZSe6V7/tVPDYNPcmxGBc7dkXj1sCVlcT60
gOOKBJ7Jb4lkbUqIL/wyJuNny2aS+K6bnBoDEF2wXsbXilS7UTaCguI43wIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFKhcdROP3ou01PvyIvlDM4e1xykHMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcUZ4MUU0X2VpN1RVLV9JaS1VTXpoN1hIS1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvMBIDBwQqDrEH
IZADBwEqDrEHIZwDBwAqDrEHIZ8DBwQqDrEHIcADBwQqDrEHIiAwDQYJKoZIhvcN
AQELBQADggEBAJE/N+kyF3Uq6fKafeAY+aiTK1FFsPWe38a8gLykpN7dMJbFIIQX
qOjclZPwbK8MWUhzbeFBFZdHdm/iwkzcdZ3kaTrxSCSjO1XlylMUHnaIjeYA30CG
FBJkvZ5eOZCjk+p/ys5roPg+RUIpoKDzzW/gyEwlUr+sVfWowroSPwouVn4+n7s4
3Jt1Se7hAVpx6EBRAPbMEgeuS9KJYvUeAy6H4d0OleEfqNYl98iuA3GrEYqBAerw
OF80ff6YHETvCDj395t6vFak6gNgwNR46E9pLZSTxqUMQR0yMdNr2RVbMs6YxmDZ
y5PATWpzvya7PA8jLpt/s2JyFDOQfuqccx0=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org