Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v02QJniguJZCDqksYCGeweooUsU.roa
File: v02QJniguJZCDqksYCGeweooUsU.roa (raw, json)
Hash identifier: pIEM7Or86DayBXkS+uE4wyGBK6D37BInX7OLvPIvPSw=
Subject key identifier: BF:4D:90:26:78:A0:B8:96:42:0E:A9:2C:60:21:9E:C1:EA:28:52:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187CE178BD84DC7C99F543EB45362672E61
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v02QJniguJZCDqksYCGeweooUsU.roa
Signing time: Sat 29 Apr 2023 17:37:42 +0000
ROA not before: Sat 29 Apr 2023 17:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207401
IP address blocks: 2a0e:b107:4e0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:17:8b:d8:4d:c7:c9:9f:54:3e:b4:53:62:67:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 29 17:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf4d902678a0b896420ea92c60219ec1ea2852c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:35:d9:a6:7f:cf:58:ef:0a:91:47:40:be:
69:94:58:53:19:fd:3c:ff:43:76:d6:8a:12:64:ac:
75:4c:b5:a2:a0:ca:31:cc:57:27:3d:4b:10:d2:39:
f2:bc:36:68:8b:7f:0c:e7:cd:48:5d:cf:74:68:28:
a3:72:5f:88:26:2b:95:01:cf:cf:ef:93:86:ba:2e:
ac:48:ca:75:d5:47:07:61:9d:bf:69:de:9c:68:32:
b8:6c:d2:1c:ed:58:58:fc:30:70:77:aa:79:13:4a:
9e:ad:36:39:5b:1c:f0:57:36:7c:93:cb:16:9e:a5:
e2:ee:e9:82:17:e9:11:ad:30:aa:5b:b4:b3:7f:1b:
2d:c5:12:e3:9c:04:28:ce:63:73:24:b4:e8:55:2e:
86:c4:6e:df:db:4c:1c:ff:26:ac:8e:9d:43:02:ac:
61:34:fb:cd:17:61:97:2e:60:e7:17:f2:eb:50:ff:
e3:e9:33:10:df:a9:83:0e:4e:db:dd:49:27:16:2e:
0f:12:02:42:3c:f0:20:c7:e6:67:f3:20:1f:01:86:
34:ab:57:26:26:2c:57:9c:59:55:8b:ac:90:4d:f0:
5e:ca:4d:33:8c:ba:20:cd:4a:a6:1e:e4:e2:78:e3:
4d:a9:01:d0:c7:ac:ac:35:3c:ff:06:0f:a0:99:42:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4D:90:26:78:A0:B8:96:42:0E:A9:2C:60:21:9E:C1:EA:28:52:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v02QJniguJZCDqksYCGeweooUsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:4e0::/48
Signature Algorithm: sha256WithRSAEncryption
8b:ec:2f:0e:61:8c:3a:06:6c:c0:55:ae:1c:81:0c:cf:01:9f:
ee:38:41:69:5e:d8:3e:09:d5:9b:8b:ab:b2:72:b5:38:5e:27:
30:25:8f:0c:73:66:5f:60:b0:ab:5c:69:9e:30:6c:21:db:e2:
5b:d4:b6:44:14:dd:71:48:32:5e:30:62:db:51:19:3c:ac:11:
64:b6:c0:5a:cd:d0:1a:3f:a6:fd:a0:64:ea:52:72:41:aa:29:
3c:7f:44:46:6c:e2:46:1b:3d:b5:77:aa:d9:a6:1b:14:db:12:
d6:99:a8:af:2b:88:6f:04:a9:d9:74:88:59:a4:5a:d0:83:4d:
2b:ac:10:ab:f7:de:69:9d:e4:f9:15:c7:e7:75:9b:0b:4a:af:
16:fb:70:eb:20:44:99:7e:18:e9:d2:b7:73:ae:7d:a0:d8:69:
26:d4:24:f0:bd:eb:22:83:88:1a:05:11:85:8d:ac:5a:7e:22:
16:42:32:ef:79:1b:5a:43:70:1f:de:4d:94:59:7a:5e:2f:83:
f5:d9:0a:a2:19:26:a7:1d:00:4a:6e:da:38:78:9a:cd:c6:b5:
3a:8a:b1:95:ec:43:51:53:30:ba:21:a7:14:fa:98:dc:19:47:
6a:47:51:36:cb:7f:d6:48:9b:5e:91:c0:98:f7:66:84:a6:3b:
85:a1:64:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYfOF4vYTcfJn1Q+tFNiZy5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNDI5MTczNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjRkOTAyNjc4YTBiODk2NDIwZWE5MmM2MDIxOWVjMWVhMjg1MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx012aZ/z1jvCpFHQL5plFhTGf08
/0N21ooSZKx1TLWioMoxzFcnPUsQ0jnyvDZoi38M581IXc90aCijcl+IJiuVAc/P
75OGui6sSMp11UcHYZ2/ad6caDK4bNIc7VhY/DBwd6p5E0qerTY5WxzwVzZ8k8sW
nqXi7umCF+kRrTCqW7SzfxstxRLjnAQozmNzJLToVS6GxG7f20wc/yasjp1DAqxh
NPvNF2GXLmDnF/LrUP/j6TMQ36mDDk7b3UknFi4PEgJCPPAgx+Zn8yAfAYY0q1cm
JixXnFlVi6yQTfBeyk0zjLogzUqmHuTieONNqQHQx6ysNTz/Bg+gmULUmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL9NkCZ4oLiWQg6pLGAhnsHqKFLFMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdjAyUUpuaWd1SlpDRHFrc1lDR2V3ZW9vVXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwTg
MA0GCSqGSIb3DQEBCwUAA4IBAQCL7C8OYYw6BmzAVa4cgQzPAZ/uOEFpXtg+CdWb
i6uycrU4XicwJY8Mc2ZfYLCrXGmeMGwh2+Jb1LZEFN1xSDJeMGLbURk8rBFktsBa
zdAaP6b9oGTqUnJBqik8f0RGbOJGGz21d6rZphsU2xLWmaivK4hvBKnZdIhZpFrQ
g00rrBCr995pneT5FcfndZsLSq8W+3DrIESZfhjp0rdzrn2g2Gkm1CTwvesig4ga
BRGFjaxafiIWQjLveRtaQ3Af3k2UWXpeL4P12QqiGSanHQBKbto4eJrNxrU6irGV
7ENRUzC6IacU+pjcGUdqR1E2y3/WSJtekcCY92aEpjuFoWQn
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org