Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yaOaBLxvouHuwHqmHSJu5Ld_o68.roa
File: yaOaBLxvouHuwHqmHSJu5Ld_o68.roa (raw, json)
Hash identifier: aTGkDL/FdXriSmbVozztBcbWCdxoTYSahv6X8QCUloo=
Subject key identifier: C9:A3:9A:04:BC:6F:A2:E1:EE:C0:7A:A6:1D:22:6E:E4:B7:7F:A3:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AFD4E9370B93CC3D9F6D0F17F19FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yaOaBLxvouHuwHqmHSJu5Ld_o68.roa
Signing time: Tue 24 Jan 2023 16:09:52 +0000
ROA not before: Tue 24 Jan 2023 16:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212120
IP address blocks: 2a0e:b107:eb0::/48 maxlen: 48
2a0e:b107:ebf::/48 maxlen: 48
2a0e:b107:eb1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:fd:4e:93:70:b9:3c:c3:d9:f6:d0:f1:7f:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9a39a04bc6fa2e1eec07aa61d226ee4b77fa3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:2f:f0:1d:df:43:31:b2:55:e5:e7:f6:5c:
9a:b0:71:08:74:9a:08:ea:e9:8b:cb:da:2c:65:d6:
08:d4:e0:ae:61:02:7f:a2:7b:aa:0b:4c:6f:ee:91:
2b:70:eb:cf:94:ef:fc:3c:a1:dc:23:e5:15:84:98:
09:3d:4a:35:6b:27:08:bd:63:62:07:bb:76:51:7a:
dd:37:df:b2:21:45:f5:6a:b7:d2:2d:83:e5:1d:6f:
3f:81:90:94:d7:94:fa:34:0b:c8:7d:24:69:73:fd:
d6:66:b2:05:67:20:15:d8:e3:f2:07:02:41:65:39:
3b:71:aa:a9:fa:7a:f3:6c:f8:dd:c9:f8:df:a7:de:
db:cd:2b:a1:a8:46:3f:98:15:02:2f:88:5d:70:c9:
bc:ba:6a:c2:3b:45:87:a8:18:bd:ac:f9:1d:f2:70:
35:b6:ee:7d:d4:6c:d3:65:17:af:55:86:ab:27:c0:
05:2a:5e:64:ef:e2:0c:2d:e7:3f:d7:21:44:a8:6d:
85:f8:66:a9:16:2d:4b:ee:ae:e3:de:d6:42:b3:8d:
88:f4:e8:38:3f:3d:b6:cf:fd:e7:02:06:39:36:0c:
7d:c4:15:33:6e:e7:f9:db:8d:e3:f0:09:b3:a9:d5:
b1:46:29:d2:01:02:59:63:ae:63:81:b6:11:d1:20:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A3:9A:04:BC:6F:A2:E1:EE:C0:7A:A6:1D:22:6E:E4:B7:7F:A3:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yaOaBLxvouHuwHqmHSJu5Ld_o68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:eb0::/47
2a0e:b107:ebf::/48
Signature Algorithm: sha256WithRSAEncryption
48:d4:dc:c1:73:75:6c:79:53:7e:0f:40:9c:c3:43:84:ad:0a:
29:e3:c8:76:9e:78:0b:4c:72:b5:08:23:28:0f:94:ab:fe:90:
32:90:83:18:44:fb:14:15:b7:b2:80:39:f8:27:71:03:8d:dd:
07:62:35:0d:f3:74:94:e8:80:8c:3d:cf:12:62:f7:ed:15:73:
1f:c6:ce:2b:e2:d5:50:d6:fa:7f:5a:e1:c0:ea:55:73:e2:0c:
d0:c7:35:f5:73:d0:c7:16:37:f2:16:5a:e1:52:b1:b6:b4:21:
23:2a:ce:05:b9:da:62:78:11:f1:b9:2a:30:9a:07:da:61:09:
08:c3:eb:df:83:61:71:b1:9f:a7:a5:db:fb:3c:0c:91:aa:99:
91:65:96:da:8a:b1:2a:e9:19:08:75:86:c3:9e:eb:2e:6a:5f:
69:26:95:f7:4b:f6:61:58:3e:0d:cc:53:db:c5:07:fd:eb:eb:
9c:71:22:d4:d7:d7:be:04:c3:f5:32:0c:fb:3c:87:e1:26:d8:
61:23:0a:45:39:69:61:6c:90:48:06:71:9c:ee:87:83:49:c1:
bd:2d:b1:17:5b:2b:9c:59:4f:e1:31:a6:9d:4c:ae:74:e4:93:
a9:60:ce:bd:94:14:ba:d7:ac:81:23:1e:31:6d:a9:dd:37:21:
45:05:3c:b5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYXkiv1Ok3C5PMPZ9tDxfxn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTI0MTYwOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWEzOWEwNGJjNmZhMmUxZWVjMDdhYTYxZDIyNmVlNGI3N2ZhM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIwv8B3fQzGyVeXn9lyasHEIdJoI
6umLy9osZdYI1OCuYQJ/onuqC0xv7pErcOvPlO/8PKHcI+UVhJgJPUo1aycIvWNi
B7t2UXrdN9+yIUX1arfSLYPlHW8/gZCU15T6NAvIfSRpc/3WZrIFZyAV2OPyBwJB
ZTk7caqp+nrzbPjdyfjfp97bzSuhqEY/mBUCL4hdcMm8umrCO0WHqBi9rPkd8nA1
tu591GzTZRevVYarJ8AFKl5k7+IMLec/1yFEqG2F+GapFi1L7q7j3tZCs42I9Og4
Pz22z/3nAgY5Ngx9xBUzbuf5243j8AmzqdWxRinSAQJZY65jgbYR0SCvMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMmjmgS8b6Lh7sB6ph0ibuS3f6OvMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveWFPYUJMeHZvdUh1d0hxbUhTSnU1TGRfbzY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKg6xBw6w
AwcAKg6xBw6/MA0GCSqGSIb3DQEBCwUAA4IBAQBI1NzBc3VseVN+D0Ccw0OErQop
48h2nngLTHK1CCMoD5Sr/pAykIMYRPsUFbeygDn4J3EDjd0HYjUN83SU6ICMPc8S
YvftFXMfxs4r4tVQ1vp/WuHA6lVz4gzQxzX1c9DHFjfyFlrhUrG2tCEjKs4Fudpi
eBHxuSowmgfaYQkIw+vfg2FxsZ+npdv7PAyRqpmRZZbairEq6RkIdYbDnusual9p
JpX3S/ZhWD4NzFPbxQf96+uccSLU19e+BMP1Mgz7PIfhJthhIwpFOWlhbJBIBnGc
7oeDScG9LbEXWyucWU/hMaadTK505JOpYM69lBS616yBIx4xbandNyFFBTy1
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:34 2024 by rpki-client on console-fra.rpki-client.org