Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa
File: SleZMk9MFj_LYeTmxlg_R3pj250.roa (raw, json)
Hash identifier: n0VN/3UWcJ6S12P6b/8ayPFsZxKpncJN6YprFclfWpA=
Subject key identifier: 4A:57:99:32:4F:4C:16:3F:CB:61:E4:E6:C6:58:3F:47:7A:63:DB:9D
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 018B25377E52E077CDF05D923BF583753FBD
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa
Signing time: Thu 12 Oct 2023 18:47:55 +0000
ROA not before: Thu 12 Oct 2023 18:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35659
IP address blocks: 2a01:130:42::/48 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:37:7e:52:e0:77:cd:f0:5d:92:3b:f5:83:75:3f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Oct 12 18:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5799324f4c163fcb61e4e6c6583f477a63db9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8e:95:bd:51:44:a0:fe:3b:9e:a5:e2:49:3b:
4c:42:3b:b9:7a:46:6d:58:10:75:09:dc:75:c7:3d:
0a:cc:a8:93:34:cc:77:f4:79:d8:a3:a6:b3:f3:9e:
a9:44:b6:5e:b7:6b:e8:57:04:ca:90:6b:f8:40:2e:
96:dc:84:8c:f9:04:49:0c:c7:7a:d6:80:59:3e:47:
c7:56:8f:45:9f:fc:ef:2b:05:46:d8:97:27:6a:eb:
cd:9a:44:36:74:20:8a:98:81:67:dd:ef:b8:56:b5:
71:cd:b1:37:c5:19:59:c9:6a:e6:52:c0:09:19:8a:
ba:cd:cd:c8:6d:12:79:6e:d0:39:f6:31:5c:b7:c9:
42:db:06:c2:d4:da:39:80:ed:7a:1c:71:87:79:c1:
0f:03:ca:b3:24:6d:76:9c:2f:04:25:ac:51:4c:97:
8d:3a:4e:47:02:ef:4d:a9:39:24:07:fd:b1:24:f2:
d2:08:f6:17:fb:bd:79:20:03:9b:c0:52:49:17:46:
cd:28:51:bf:c0:48:42:17:42:7d:ce:a0:11:1b:8d:
bc:ba:5a:0f:66:3a:64:47:18:34:f8:ee:d4:95:14:
94:58:9d:a9:3e:65:ca:20:55:b0:12:74:a0:a2:2e:
4d:2f:82:74:b3:05:a2:72:2d:4d:98:b1:1f:e3:f1:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:99:32:4F:4C:16:3F:CB:61:E4:E6:C6:58:3F:47:7A:63:DB:9D
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/SleZMk9MFj_LYeTmxlg_R3pj250.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:130:42::/48
Signature Algorithm: sha256WithRSAEncryption
27:e3:92:97:5b:ac:6c:26:94:ea:e1:3b:93:b3:fd:18:5c:79:
bb:18:9f:74:95:de:4d:ee:a3:2c:9d:7a:07:a6:e2:00:a9:e3:
90:7b:51:4f:35:72:8c:78:66:d4:95:0b:46:e3:2c:8b:1f:bb:
f9:c3:9c:8c:81:77:94:1f:d3:d7:9a:e9:8e:0c:51:35:7a:ce:
64:de:74:85:3f:c1:78:4b:53:f4:89:8e:d3:1d:42:09:7a:15:
c4:fb:b5:1e:67:c6:74:35:b0:cd:e7:50:7d:79:b5:80:a8:a3:
00:b1:8d:9d:12:8f:9f:40:bd:21:8a:bd:3d:85:78:c0:36:e2:
f3:e4:de:07:c7:e9:45:a1:9d:e5:98:d1:f4:6f:cf:3a:b3:12:
15:3b:d2:93:d4:b5:3d:42:6f:ba:fc:ef:de:03:4a:30:32:75:
4f:54:b6:a4:ef:27:13:cb:57:db:f8:d8:a4:06:59:fd:f3:1b:
16:9e:c9:40:d5:1d:23:71:ed:7f:ac:eb:9b:03:22:08:a5:4e:
9b:dc:dc:d6:8e:f3:18:b3:1a:10:7c:eb:4b:da:57:23:45:08:
04:8d:a8:4f:54:fb:d5:f2:d1:88:84:0d:3f:64:f1:04:0d:6f:
10:ee:ec:36:9d:80:92:f5:ff:0b:8e:47:d5:45:d6:a8:1a:7e:
a6:6c:20:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYslN35S4HfN8F2SO/WDdT+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjMxMDEyMTg0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTU3OTkzMjRmNGMxNjNmY2I2MWU0ZTZjNjU4M2Y0NzdhNjNkYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj46VvVFEoP47nqXiSTtMQju5ekZt
WBB1Cdx1xz0KzKiTNMx39HnYo6az856pRLZet2voVwTKkGv4QC6W3ISM+QRJDMd6
1oBZPkfHVo9Fn/zvKwVG2JcnauvNmkQ2dCCKmIFn3e+4VrVxzbE3xRlZyWrmUsAJ
GYq6zc3IbRJ5btA59jFct8lC2wbC1No5gO16HHGHecEPA8qzJG12nC8EJaxRTJeN
Ok5HAu9NqTkkB/2xJPLSCPYX+715IAObwFJJF0bNKFG/wEhCF0J9zqARG428uloP
ZjpkRxg0+O7UlRSUWJ2pPmXKIFWwEnSgoi5NL4J0swWici1NmLEf4/HaSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEpXmTJPTBY/y2Hk5sZYP0d6Y9udMB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvU2xlWk1rOU1Gal9MWWVUbXhsZ19SM3BqMjUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBMABC
MA0GCSqGSIb3DQEBCwUAA4IBAQAn45KXW6xsJpTq4TuTs/0YXHm7GJ90ld5N7qMs
nXoHpuIAqeOQe1FPNXKMeGbUlQtG4yyLH7v5w5yMgXeUH9PXmumODFE1es5k3nSF
P8F4S1P0iY7THUIJehXE+7UeZ8Z0NbDN51B9ebWAqKMAsY2dEo+fQL0hir09hXjA
NuLz5N4Hx+lFoZ3lmNH0b886sxIVO9KT1LU9Qm+6/O/eA0owMnVPVLak7ycTy1fb
+NikBln98xsWnslA1R0jce1/rOubAyIIpU6b3NzWjvMYsxoQfOtL2lcjRQgEjahP
VPvV8tGIhA0/ZPEEDW8Q7uw2nYCS9f8LjkfVRdaoGn6mbCBy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:17 2024 by rpki-client on console-ams.rpki-client.org