Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/Y7AzBYOb1JgAi_Bvylb9ORiJM9M.roa
File: Y7AzBYOb1JgAi_Bvylb9ORiJM9M.roa (raw, json)
Hash identifier: Z1PdeQuoBdAXWo/NNKrg8VuLhIBMfaYUpuk/qQ5DyRE=
Subject key identifier: 63:B0:33:05:83:9B:D4:98:00:8B:F0:6F:CA:56:FD:39:18:89:33:D3
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 01859B1406C9405CF8E4D6372718A709AEA8
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/Y7AzBYOb1JgAi_Bvylb9ORiJM9M.roa
Signing time: Tue 10 Jan 2023 09:47:39 +0000
ROA not before: Tue 10 Jan 2023 09:47:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206423
IP address blocks: 2a13:6dc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Apr 2023 12:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:14:06:c9:40:5c:f8:e4:d6:37:27:18:a7:09:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Jan 10 09:47:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63b03305839bd498008bf06fca56fd39188933d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:17:78:54:e0:b4:1a:19:1b:5d:5f:fa:fd:ca:
1c:3d:8c:e7:b8:ab:ff:71:98:3b:a7:24:64:f6:f4:
c2:6d:17:54:22:fd:36:2b:54:68:b3:5d:16:c7:66:
6a:fd:72:b5:32:1c:a3:d7:3e:a2:14:df:b2:ac:c4:
d6:2a:23:e2:16:45:7f:91:c4:81:01:b6:d9:55:a6:
62:96:4a:56:42:1e:ac:10:62:19:52:d2:43:b8:74:
ae:45:f8:68:e7:5c:80:4b:78:88:16:97:69:95:e5:
3f:c6:df:9b:03:16:30:23:d3:96:a4:5d:99:41:5c:
ad:37:e2:9f:cb:f6:66:20:54:33:3c:1e:62:9e:e7:
5c:76:0b:61:f0:ed:82:77:a5:06:b4:a4:a7:39:30:
12:a3:22:0c:05:39:0e:23:34:49:0a:33:38:ef:8c:
ed:9e:cd:46:ee:d8:b4:7c:88:d1:99:37:a5:55:4e:
1c:67:e7:1b:54:e1:98:4a:d2:13:ed:36:29:f0:3b:
74:9c:cf:a7:91:b7:e7:fc:66:86:3d:1a:1d:06:6c:
a5:19:fe:25:29:a2:5a:1b:1c:1e:87:5d:a4:a2:23:
29:cd:ca:11:ae:11:54:ed:57:1d:10:32:3c:aa:2f:
02:43:2f:40:c8:24:ab:4a:1c:b1:7a:cc:87:ec:e2:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:33:05:83:9B:D4:98:00:8B:F0:6F:CA:56:FD:39:18:89:33:D3
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/Y7AzBYOb1JgAi_Bvylb9ORiJM9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:ad:51:b3:94:07:63:db:8a:fe:28:5c:9d:92:72:2e:18:91:
7d:2e:31:00:cd:89:e1:80:99:d4:05:6a:a3:68:41:92:ed:56:
d8:12:af:5e:53:69:8f:d9:75:03:68:29:94:bf:b9:f5:85:41:
f2:2a:2c:20:5b:7b:0f:b5:46:6c:6a:36:e9:bb:e4:91:e5:01:
38:5f:f7:ed:e6:d3:33:65:24:7a:ac:cd:e5:59:bc:a0:3a:3f:
71:d6:c0:99:f7:8e:69:93:e9:f9:14:06:60:c0:3c:fc:5e:8f:
d7:2a:0b:be:dd:f5:d0:a1:b0:f9:45:c7:95:f8:14:9d:25:c7:
ea:40:2a:af:59:a0:ad:08:ca:1f:b4:4d:02:f8:cc:d6:fd:04:
69:e2:b6:39:73:7d:f8:8a:62:bf:55:3e:fa:78:4a:64:00:39:
57:e0:33:7e:eb:29:c6:97:46:34:9c:92:fa:ec:c6:1e:cb:2c:
e3:89:c5:11:f4:91:97:74:2f:48:4b:cf:8c:b5:47:cd:5d:0f:
c8:55:f9:a3:7b:49:f6:3f:5b:c4:70:e1:10:88:84:65:50:81:
c3:17:ec:3b:ac:cb:8b:8c:8e:f1:fa:da:29:33:0e:bb:17:67:
4e:d0:12:9e:b4:d0:18:e7:23:63:10:91:63:c8:ae:90:05:2c:
ec:58:b3:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYWbFAbJQFz45NY3JxinCa6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMDdmNjlkNjAyYjdlYmI3ZjYzMzBkNzE1YzllYzNlNWFi
YTMwZmEwHhcNMjMwMTEwMDk0NzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2IwMzMwNTgzOWJkNDk4MDA4YmYwNmZjYTU2ZmQzOTE4ODkzM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xd4VOC0GhkbXV/6/cocPYznuKv/
cZg7pyRk9vTCbRdUIv02K1Ros10Wx2Zq/XK1Mhyj1z6iFN+yrMTWKiPiFkV/kcSB
AbbZVaZilkpWQh6sEGIZUtJDuHSuRfho51yAS3iIFpdpleU/xt+bAxYwI9OWpF2Z
QVytN+Kfy/ZmIFQzPB5inudcdgth8O2Cd6UGtKSnOTASoyIMBTkOIzRJCjM474zt
ns1G7ti0fIjRmTelVU4cZ+cbVOGYStIT7TYp8Dt0nM+nkbfn/GaGPRodBmylGf4l
KaJaGxweh12koiMpzcoRrhFU7VcdEDI8qi8CQy9AyCSrShyxesyH7OLpKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGOwMwWDm9SYAIvwb8pW/TkYiTPTMB8GA1UdIwQY
MBaAFEwH9p1gK367f2Mw1xXJ7D5aujD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2Et
YmMyODlkYzE3ZDIwLzEvWTdBekJZT2IxSmdBaV9CdnlsYjlPUmlKTTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZTcxYzYtMWJhZS00ODU4LWFmM2EtYmMyODlkYzE3ZDIw
LzEvVEFmMm5XQXJmcnRfWXpEWEZjbnNQbHE2TVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNtwDAN
BgkqhkiG9w0BAQsFAAOCAQEAPa1Rs5QHY9uK/ihcnZJyLhiRfS4xAM2J4YCZ1AVq
o2hBku1W2BKvXlNpj9l1A2gplL+59YVB8iosIFt7D7VGbGo26bvkkeUBOF/37ebT
M2UkeqzN5Vm8oDo/cdbAmfeOaZPp+RQGYMA8/F6P1yoLvt310KGw+UXHlfgUnSXH
6kAqr1mgrQjKH7RNAvjM1v0EaeK2OXN9+Ipiv1U++nhKZAA5V+AzfuspxpdGNJyS
+uzGHsss44nFEfSRl3QvSEvPjLVHzV0PyFX5o3tJ9j9bxHDhEIiEZVCBwxfsO6zL
i4yO8fraKTMOuxdnTtASnrTQGOcjYxCRY8iukAUs7FizpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org