Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uOBUXjijtMybC1JjCxE4jL9oKF8.roa
File: uOBUXjijtMybC1JjCxE4jL9oKF8.roa (raw, json)
Hash identifier: uhPjfTmBYaJV16WMH3Yoq4BqwhUV0PFY3mdhRSP7sgA=
Subject key identifier: B8:E0:54:5E:38:A3:B4:CC:9B:0B:52:63:0B:11:38:8C:BF:68:28:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188E8CA607DD011879E30381B5F6B0FDED6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uOBUXjijtMybC1JjCxE4jL9oKF8.roa
Signing time: Fri 23 Jun 2023 15:05:57 +0000
ROA not before: Fri 23 Jun 2023 15:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198025
IP address blocks: 2a06:de00:de0f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:ca:60:7d:d0:11:87:9e:30:38:1b:5f:6b:0f:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 23 15:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e0545e38a3b4cc9b0b52630b11388cbf68285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:66:bc:14:a5:9b:67:2d:2a:f2:ad:25:7c:
d7:5b:ca:48:01:e2:fb:f8:87:5e:c4:9f:ed:be:3d:
00:74:ac:9e:98:29:52:c7:e1:0e:8e:df:1f:c6:68:
8f:e7:a5:87:07:92:cb:0c:e7:61:95:43:67:75:7d:
24:fd:b9:88:36:68:b8:87:c4:23:70:85:c5:04:66:
82:4b:4b:6c:f3:f0:59:c9:4a:42:7b:c7:40:e9:73:
40:3d:16:7b:3f:17:b0:1a:96:ee:f0:6f:d7:5c:2b:
ab:09:6d:e0:2e:79:8d:2c:3c:19:03:9d:10:3d:41:
a1:f5:d0:bd:ad:b4:1c:ac:71:f3:01:f5:d4:4d:ac:
9e:1a:dd:44:54:aa:5b:af:14:64:88:fe:09:a2:41:
15:7d:46:5d:c9:2d:32:fd:fa:f7:c9:65:69:74:4e:
8a:17:a5:dd:e7:9b:ac:5d:fa:52:d0:70:1e:50:7b:
a8:c4:36:23:36:d2:99:cd:ba:11:7a:dc:06:8b:76:
2d:f8:cd:29:0e:ca:7e:09:3d:a5:a4:52:82:31:2b:
43:0d:72:52:fc:0c:8c:db:4a:8c:c9:c7:a2:04:6e:
26:ec:23:9c:f3:b8:2d:74:70:26:9b:1e:a5:0e:bf:
0f:89:4a:b4:5b:51:23:73:22:e8:fd:11:54:12:f5:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:54:5E:38:A3:B4:CC:9B:0B:52:63:0B:11:38:8C:BF:68:28:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uOBUXjijtMybC1JjCxE4jL9oKF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de0f::/48
Signature Algorithm: sha256WithRSAEncryption
4b:5b:07:7e:f0:04:91:59:2d:ee:4d:ba:b4:5c:fe:0e:0d:43:
4f:61:20:c3:5b:1c:42:38:fe:f9:ba:59:24:4e:0b:92:26:85:
27:8f:f8:ed:67:0b:fd:d6:84:23:16:2b:26:5d:5f:b7:be:c5:
da:a0:a5:ba:b7:73:f4:72:85:45:53:b9:bb:32:9b:7f:77:57:
87:a2:19:09:60:1e:44:16:c7:da:5e:e7:49:06:ae:3d:6b:da:
4d:a2:d1:0a:8e:a7:a3:36:6c:23:69:fc:c8:99:5f:d8:31:99:
6b:f5:ef:e7:0c:85:5d:12:06:ea:12:cb:c9:b8:4d:a8:7e:59:
63:26:8c:c5:fb:1f:2a:ad:45:b8:70:ce:92:2c:a1:6e:13:22:
87:53:4c:c1:64:7c:28:91:54:d7:45:7a:33:6b:61:2e:ad:95:
23:58:b0:12:3a:4e:67:4e:4b:9d:d2:cf:64:3c:d7:7a:20:a5:
21:05:6d:e2:19:1a:fd:42:a1:fc:b3:cb:0c:62:57:a9:9a:90:
c8:e8:aa:63:ff:e5:24:c1:c1:2a:42:24:88:e7:6f:01:5c:5f:
de:0a:2f:f9:74:d9:2f:d2:6f:b0:87:c3:06:df:56:b7:03:1c:
54:57:b0:eb:99:53:d8:57:9f:d1:7c:77:64:d2:7b:39:e6:94:
3a:ff:23:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYjoymB90BGHnjA4G19rD97WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjIzMTUwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGUwNTQ1ZTM4YTNiNGNjOWIwYjUyNjMwYjExMzg4Y2JmNjgyODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvplmvBSlm2ctKvKtJXzXW8pIAeL7
+IdexJ/tvj0AdKyemClSx+EOjt8fxmiP56WHB5LLDOdhlUNndX0k/bmINmi4h8Qj
cIXFBGaCS0ts8/BZyUpCe8dA6XNAPRZ7PxewGpbu8G/XXCurCW3gLnmNLDwZA50Q
PUGh9dC9rbQcrHHzAfXUTayeGt1EVKpbrxRkiP4JokEVfUZdyS0y/fr3yWVpdE6K
F6Xd55usXfpS0HAeUHuoxDYjNtKZzboRetwGi3Yt+M0pDsp+CT2lpFKCMStDDXJS
/AyM20qMyceiBG4m7COc87gtdHAmmx6lDr8PiUq0W1EjcyLo/RFUEvWIMQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLjgVF44o7TMmwtSYwsROIy/aChfMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdU9CVVhqaWp0TXliQzFKakN4RTRqTDlvS0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAN4P
MA0GCSqGSIb3DQEBCwUAA4IBAQBLWwd+8ASRWS3uTbq0XP4ODUNPYSDDWxxCOP75
ulkkTguSJoUnj/jtZwv91oQjFismXV+3vsXaoKW6t3P0coVFU7m7Mpt/d1eHohkJ
YB5EFsfaXudJBq49a9pNotEKjqejNmwjafzImV/YMZlr9e/nDIVdEgbqEsvJuE2o
flljJozF+x8qrUW4cM6SLKFuEyKHU0zBZHwokVTXRXoza2EurZUjWLASOk5nTkud
0s9kPNd6IKUhBW3iGRr9QqH8s8sMYlepmpDI6Kpj/+UkwcEqQiSI528BXF/eCi/5
dNkv0m+wh8MG31a3AxxUV7DrmVPYV5/RfHdk0ns55pQ6/yOJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org