Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvCshw_YznggRARbpwiX1xvNGQg.roa
File: vvCshw_YznggRARbpwiX1xvNGQg.roa (raw, json)
Hash identifier: dfWdC66LYdSJjmpnwAM9iMUj34sCpXRai3iOltvhRNE=
Subject key identifier: BE:F0:AC:87:0F:D8:CE:78:20:44:04:5B:A7:08:97:D7:1B:CD:19:08
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48ADDC2175E29DB4DF78E81ABE61837
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvCshw_YznggRARbpwiX1xvNGQg.roa
Signing time: Tue 24 Jan 2023 16:09:43 +0000
ROA not before: Tue 24 Jan 2023 16:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207726
IP address blocks: 2a0e:b107:1060::/48 maxlen: 48
2a0e:b107:ce0::/44 maxlen: 48
2a0e:b107:1050::/44 maxlen: 48
2a0e:b107:cf0::/44 maxlen: 48
2a0e:b107:1060::/44 maxlen: 48
2a0e:b107:560::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:dd:c2:17:5e:29:db:4d:f7:8e:81:ab:e6:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef0ac870fd8ce782044045ba70897d71bcd1908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:8a:8a:81:d1:28:c9:bb:f6:8a:2c:c2:c9:
f5:11:60:73:0f:da:5e:d7:fd:41:9c:4b:4e:9a:95:
75:a6:47:b2:40:ab:41:32:72:4c:d1:d0:2d:53:16:
41:ad:ae:22:d3:e3:6c:ae:c8:82:13:5d:08:15:75:
d1:47:d2:f7:32:2f:be:1a:26:b7:22:b4:db:57:de:
05:d3:2c:3c:15:0e:d4:62:81:46:79:66:94:6e:57:
c0:74:fc:dd:03:e1:cd:a6:03:ea:36:b7:26:3a:5f:
d9:70:b6:bf:9d:a7:4f:a1:a7:15:78:be:3c:38:5a:
fc:8a:ef:a3:09:d5:f9:be:13:88:43:93:29:bf:27:
7c:99:6e:23:83:b3:cd:52:61:af:dd:35:aa:0e:d5:
0e:61:4f:96:b1:a9:c6:b3:2c:50:88:ba:fc:d2:fe:
d9:b2:37:94:26:cf:c7:96:e4:69:c3:9d:15:eb:f1:
ed:81:f1:2c:ae:e2:bf:73:84:4d:9b:56:2b:15:38:
8d:1b:f8:b2:18:41:85:3a:23:75:b8:d8:36:a2:d5:
3a:13:a3:25:62:82:00:02:ae:de:2e:c3:c3:1d:e9:
8c:38:79:c6:bf:6c:c1:49:b2:25:e9:c9:82:35:53:
80:f8:90:1b:fc:55:a4:45:e6:32:89:a4:60:51:4b:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:AC:87:0F:D8:CE:78:20:44:04:5B:A7:08:97:D7:1B:CD:19:08
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvCshw_YznggRARbpwiX1xvNGQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:560::/44
2a0e:b107:ce0::/43
2a0e:b107:1050::-2a0e:b107:106f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:9f:c4:45:c9:d6:9b:dc:d0:f2:31:97:a6:2b:f9:bc:a4:d2:
bc:87:06:7e:53:0f:8d:a2:00:a7:32:cd:e6:29:5b:df:9e:d1:
4a:58:38:aa:2a:d0:69:98:b9:90:5b:b3:8c:16:94:35:ef:a0:
40:e7:eb:b1:30:2a:03:f2:e3:7d:ca:66:cd:39:de:66:ea:d1:
cc:c2:d0:21:d1:32:21:81:44:a0:9d:71:7e:a7:6c:56:cc:97:
ef:1d:e4:37:3e:9f:6a:86:4f:44:16:1e:b7:40:4e:41:76:d0:
fe:6d:51:a0:67:5c:73:49:cb:f6:e4:1d:75:2c:3e:6a:4a:68:
d2:19:11:56:91:b6:15:4f:a5:0e:83:f4:f2:e3:17:de:51:a8:
b7:98:e4:dd:40:94:ea:62:67:7d:ce:aa:88:5c:14:4c:9e:94:
c5:be:f1:67:94:12:20:5f:7a:45:a8:60:d0:4c:66:ca:22:e1:
c2:80:e9:b6:ec:32:5e:44:12:1c:65:fc:81:1e:1e:68:09:e0:
84:57:5c:15:c0:11:5f:2e:83:85:5f:5e:39:19:93:8b:dd:6f:
80:aa:85:45:f9:6b:f5:35:32:f0:00:9d:0d:dd:06:a4:5c:3a:
76:20:ef:25:a2:7f:03:f9:51:fb:b9:a6:da:4b:12:9d:32:c7:
6f:91:1d:4a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYXkit3CF14p2033joGr5hg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWYwYWM4NzBmZDhjZTc4MjA0NDA0NWJhNzA4OTdkNzFiY2QxOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltaKioHRKMm79ooswsn1EWBzD9pe
1/1BnEtOmpV1pkeyQKtBMnJM0dAtUxZBra4i0+NsrsiCE10IFXXRR9L3Mi++Gia3
IrTbV94F0yw8FQ7UYoFGeWaUblfAdPzdA+HNpgPqNrcmOl/ZcLa/nadPoacVeL48
OFr8iu+jCdX5vhOIQ5Mpvyd8mW4jg7PNUmGv3TWqDtUOYU+WsanGsyxQiLr80v7Z
sjeUJs/HluRpw50V6/HtgfEsruK/c4RNm1YrFTiNG/iyGEGFOiN1uNg2otU6E6Ml
YoIAAq7eLsPDHemMOHnGv2zBSbIl6cmCNVOA+JAb/FWkReYyiaRgUUtkdQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFL7wrIcP2M54IEQEW6cIl9cbzRkIMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdnZDc2h3X1l6bmdnUkFSYnB3aVgxeHZOR1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcEKg6xBwVg
AwcFKg6xBwzgMBIDBwQqDrEHEFADBwQqDrEHEGAwDQYJKoZIhvcNAQELBQADggEB
ACKfxEXJ1pvc0PIxl6Yr+byk0ryHBn5TD42iAKcyzeYpW9+e0UpYOKoq0GmYuZBb
s4wWlDXvoEDn67EwKgPy433KZs053mbq0czC0CHRMiGBRKCdcX6nbFbMl+8d5Dc+
n2qGT0QWHrdATkF20P5tUaBnXHNJy/bkHXUsPmpKaNIZEVaRthVPpQ6D9PLjF95R
qLeY5N1AlOpiZ33OqohcFEyelMW+8WeUEiBfekWoYNBMZsoi4cKA6bbsMl5EEhxl
/IEeHmgJ4IRXXBXAEV8ug4VfXjkZk4vdb4CqhUX5a/U1MvAAnQ3dBqRcOnYg7yWi
fwP5Ufu5ptpLEp0yx2+RHUo=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:33 2024 by rpki-client on console-fra.rpki-client.org