Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa
File: tVw1fNJii-AIpB1ju_T9SynsZfM.roa (raw, json)
Hash identifier: VZkt0lrdAOGRvJcLFKOxVbKKQaArWaRpLiT7wbiX0v4=
Subject key identifier: B5:5C:35:7C:D2:62:8B:E0:08:A4:1D:63:BB:F4:FD:4B:29:EC:65:F3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188EBC15C40F6E4A1FE4F4432C38ED09AE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa
Signing time: Sat 24 Jun 2023 04:54:57 +0000
ROA not before: Sat 24 Jun 2023 04:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204115
IP address blocks: 2a10:cc40:114::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jul 2023 22:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:eb:c1:5c:40:f6:e4:a1:fe:4f:44:32:c3:8e:d0:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 24 04:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b55c357cd2628be008a41d63bbf4fd4b29ec65f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:98:aa:9c:4d:b0:45:87:0d:97:12:45:be:
cc:a9:4e:ac:a5:9a:39:cb:20:c8:d1:97:df:0d:35:
b6:44:b6:80:54:4f:d9:48:37:a7:13:86:eb:3c:ac:
55:98:0e:ab:1d:f0:52:f4:ac:9a:51:90:65:d0:f2:
5b:1d:21:61:65:20:05:10:94:e0:7b:4f:ac:bd:df:
60:ba:b3:42:79:37:6b:c6:1a:51:2a:15:26:5c:36:
71:fe:07:a1:8d:ab:48:30:f5:eb:df:02:c6:57:c7:
de:97:b2:1d:6b:b3:3c:4a:ab:9c:28:e9:64:7b:44:
ed:31:e0:e9:33:30:03:ed:25:bf:9f:06:fd:2a:e7:
a7:a5:78:dc:a5:2d:e6:37:93:91:1d:5b:7f:68:2b:
1a:04:1e:99:10:4f:ad:06:11:03:a5:62:66:6b:a4:
fe:2f:99:0d:9e:c5:db:4a:aa:9a:17:8f:6a:f9:54:
a8:9c:87:8a:55:66:7b:d1:e6:29:af:cd:99:83:49:
58:9e:aa:22:19:fe:5c:a8:df:3f:8a:c2:91:ad:35:
aa:ce:f5:97:81:35:c3:d9:5f:ae:cf:74:d5:18:4e:
89:ef:9b:cc:56:29:e1:b2:f5:e0:58:cd:77:27:15:
6f:52:34:6d:fc:1d:4b:26:38:61:58:73:86:2b:00:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:35:7C:D2:62:8B:E0:08:A4:1D:63:BB:F4:FD:4B:29:EC:65:F3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tVw1fNJii-AIpB1ju_T9SynsZfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:114::/48
Signature Algorithm: sha256WithRSAEncryption
a6:37:43:76:6b:6a:f0:a7:5a:9f:ae:7c:8a:99:65:b1:33:0b:
bb:cf:c6:c7:7d:ac:23:22:dc:70:a0:dc:37:50:ee:b7:ec:1e:
11:d7:7e:f0:29:78:da:53:7e:ab:9f:87:8b:d8:90:85:c7:3a:
d8:a4:28:65:52:4c:9c:15:2b:34:ae:b3:57:3c:60:aa:0a:9a:
be:f4:a9:5f:38:1f:ec:f2:1d:01:ac:60:a3:5f:14:cc:28:7f:
f5:45:73:b2:04:04:69:43:7c:35:76:42:3f:eb:5f:b8:14:e9:
d0:47:9a:6b:6f:65:6a:45:37:48:b7:92:71:ed:10:50:1d:d8:
26:35:34:73:96:58:1f:f2:78:af:f4:cc:68:a1:f0:22:62:df:
b3:ab:d3:43:f6:e2:bb:8e:16:d5:14:4e:67:cb:9b:a4:2d:d4:
e1:04:43:52:34:da:3b:7e:37:5e:6d:32:c5:99:8d:36:b6:a4:
20:df:26:92:33:fa:2d:db:e6:83:c4:06:a2:cb:fc:da:51:b5:
40:a3:7d:db:2a:e1:2f:3a:22:d3:45:d1:9e:02:63:b9:0f:b4:
ba:ac:4b:bf:91:35:c4:12:be:c0:95:42:d1:83:66:4e:f4:4d:
dc:fc:05:7d:44:3c:8d:05:74:1e:c8:2b:d3:fb:6f:d0:c0:21:
18:8b:88:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYjrwVxA9uSh/k9EMsOO0JrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjI0MDQ1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVjMzU3Y2QyNjI4YmUwMDhhNDFkNjNiYmY0ZmQ0YjI5ZWM2NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L6YqpxNsEWHDZcSRb7MqU6spZo5
yyDI0ZffDTW2RLaAVE/ZSDenE4brPKxVmA6rHfBS9KyaUZBl0PJbHSFhZSAFEJTg
e0+svd9gurNCeTdrxhpRKhUmXDZx/gehjatIMPXr3wLGV8fel7Ida7M8SqucKOlk
e0TtMeDpMzAD7SW/nwb9KuenpXjcpS3mN5ORHVt/aCsaBB6ZEE+tBhEDpWJma6T+
L5kNnsXbSqqaF49q+VSonIeKVWZ70eYpr82Zg0lYnqoiGf5cqN8/isKRrTWqzvWX
gTXD2V+uz3TVGE6J75vMVinhsvXgWM13JxVvUjRt/B1LJjhhWHOGKwBQcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLVcNXzSYovgCKQdY7v0/Usp7GXzMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdFZ3MWZOSmlpLUFJcEIxanVfVDlTeW5zWmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDMQAEU
MA0GCSqGSIb3DQEBCwUAA4IBAQCmN0N2a2rwp1qfrnyKmWWxMwu7z8bHfawjItxw
oNw3UO637B4R137wKXjaU36rn4eL2JCFxzrYpChlUkycFSs0rrNXPGCqCpq+9Klf
OB/s8h0BrGCjXxTMKH/1RXOyBARpQ3w1dkI/61+4FOnQR5prb2VqRTdIt5Jx7RBQ
HdgmNTRzllgf8niv9MxoofAiYt+zq9ND9uK7jhbVFE5ny5ukLdThBENSNNo7fjde
bTLFmY02tqQg3yaSM/ot2+aDxAaiy/zaUbVAo33bKuEvOiLTRdGeAmO5D7S6rEu/
kTXEEr7AlULRg2ZO9E3c/AV9RDyNBXQeyCvT+2/QwCEYi4ju
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org