Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa
File: xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa (raw, json)
Hash identifier: cT3T3V4ju1fy7AW3oQhQNfh1n7ogUe4aNBi5RGvqFrA=
Subject key identifier: C6:47:43:1D:99:45:02:50:C7:5B:42:82:5C:5A:E1:23:C9:EF:90:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5BBA8AD4359E20D7D7EF27AF30F3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa
Signing time: Tue 02 Jan 2024 10:34:39 +0000
ROA not before: Tue 02 Jan 2024 10:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262185
IP address blocks: 2a06:de01:500::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 20 Jan 2024 02:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:5b:ba:8a:d4:35:9e:20:d7:d7:ef:27:af:30:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c647431d99450250c75b42825c5ae123c9ef90f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:80:74:61:0d:2f:4b:7d:43:f8:19:17:59:
f5:62:87:64:84:22:bd:b2:4c:86:24:30:25:90:c1:
d6:f3:c5:da:0a:fa:68:49:18:2d:b3:0d:de:f6:75:
77:30:0b:1e:a3:b5:54:26:e2:49:f4:b7:90:23:a2:
7b:05:30:72:6c:49:d8:c2:3b:8b:12:91:24:8d:4a:
a5:e7:87:bd:d2:10:9a:5e:39:f2:9d:5a:03:88:27:
4a:c9:22:56:36:45:8f:63:24:c8:f2:19:af:18:0e:
0a:f1:9f:fb:ec:e4:2d:12:bc:bd:df:be:b8:11:d1:
44:8c:30:e4:52:9c:09:20:8d:c8:0d:1b:f2:a6:b1:
42:80:ae:a8:79:5a:b2:80:e8:6c:35:61:94:53:d7:
06:9e:80:8c:2e:2d:a0:6f:ba:bb:c2:ae:4d:0a:78:
0f:7f:51:37:d7:27:12:eb:cc:f6:fc:ad:f7:91:12:
e9:b2:a1:e5:90:6c:9c:92:9b:f5:66:8e:6c:34:59:
dd:e2:9b:dd:5e:ec:8e:a7:9e:7c:ee:fb:e2:ae:3d:
24:47:84:3b:29:81:2c:55:e1:86:d4:c2:b7:be:c1:
10:2b:04:01:b8:8d:c8:46:b2:a0:b9:3e:e9:86:26:
e3:0c:a2:26:f5:62:dd:82:61:e1:13:15:09:7e:88:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:43:1D:99:45:02:50:C7:5B:42:82:5C:5A:E1:23:C9:EF:90:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xkdDHZlFAlDHW0KCXFrhI8nvkPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:500::/48
Signature Algorithm: sha256WithRSAEncryption
8d:98:6f:a5:41:25:75:56:31:da:4d:2b:91:fd:f8:29:3a:4f:
3a:62:c7:5d:7f:9c:ee:36:d7:a5:74:a8:85:63:c2:54:f7:77:
9e:70:c8:e3:d7:b0:68:7b:d5:0b:6c:70:14:89:69:cd:93:df:
32:30:3b:e6:2d:82:78:15:78:b6:d3:f7:a2:b5:5d:c8:cb:e3:
e9:4d:fc:d2:e5:4b:1d:c3:ac:79:da:3c:43:87:33:5a:1d:02:
08:55:7d:1c:aa:47:ac:d1:ef:a3:4c:60:18:17:78:db:a1:6a:
51:e7:13:7b:9e:f4:75:04:80:de:02:f5:87:00:be:01:a1:b4:
7d:87:1a:1f:55:3e:63:ee:6b:35:6b:66:0f:d4:fa:49:ab:4a:
0d:37:fd:b7:52:27:2e:d8:ca:6d:a3:e8:b1:b1:cd:9f:b7:51:
f4:98:d9:01:3c:39:ce:da:3c:65:59:ee:18:4f:80:eb:a8:48:
87:f0:35:44:e9:4e:b9:1c:dc:f6:13:ab:bf:62:71:a5:a3:70:
e2:bb:40:fc:a1:3d:c3:bd:68:c3:0d:0f:c9:b8:14:4c:e6:14:
19:79:9d:89:76:c3:85:5e:6c:d7:c4:0d:59:35:c2:e4:f1:94:
35:b7:d9:bb:83:c2:c9:5a:e7:ea:b7:c8:86:60:aa:a5:54:29:
6b:fb:e2:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvVu6itQ1niDX1+8nrzDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTAyMTAzNDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjQ3NDMxZDk5NDUwMjUwYzc1YjQyODI1YzVhZTEyM2M5ZWY5MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNWAdGENL0t9Q/gZF1n1YodkhCK9
skyGJDAlkMHW88XaCvpoSRgtsw3e9nV3MAseo7VUJuJJ9LeQI6J7BTBybEnYwjuL
EpEkjUql54e90hCaXjnynVoDiCdKySJWNkWPYyTI8hmvGA4K8Z/77OQtEry93764
EdFEjDDkUpwJII3IDRvyprFCgK6oeVqygOhsNWGUU9cGnoCMLi2gb7q7wq5NCngP
f1E31ycS68z2/K33kRLpsqHlkGyckpv1Zo5sNFnd4pvdXuyOp5587vvirj0kR4Q7
KYEsVeGG1MK3vsEQKwQBuI3IRrKguT7phibjDKIm9WLdgmHhExUJfojDAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMZHQx2ZRQJQx1tCglxa4SPJ75D0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveGtkREhabEZBbERIVzBLQ1hGcmhJOG52a1BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAQUA
MA0GCSqGSIb3DQEBCwUAA4IBAQCNmG+lQSV1VjHaTSuR/fgpOk86Ysddf5zuNtel
dKiFY8JU93eecMjj17Boe9ULbHAUiWnNk98yMDvmLYJ4FXi20/eitV3Iy+PpTfzS
5Usdw6x52jxDhzNaHQIIVX0cqkes0e+jTGAYF3jboWpR5xN7nvR1BIDeAvWHAL4B
obR9hxofVT5j7ms1a2YP1PpJq0oNN/23Uicu2Mpto+ixsc2ft1H0mNkBPDnO2jxl
We4YT4DrqEiH8DVE6U65HNz2E6u/YnGlo3Diu0D8oT3DvWjDDQ/JuBRM5hQZeZ2J
dsOFXmzXxA1ZNcLk8ZQ1t9m7g8LJWufqt8iGYKqlVClr++Iz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org