Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8RsEYKUVaTyq0l8y9AsOWHeph6M.roa
File: 8RsEYKUVaTyq0l8y9AsOWHeph6M.roa (raw, json)
Hash identifier: TRFx1a8hdFoGLy3NdVUozET3pp2zqZ7ko5f/mV9I6rs=
Subject key identifier: F1:1B:04:60:A5:15:69:3C:AA:D2:5F:32:F4:0B:0E:58:77:A9:87:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C48EFBF9C2938C3F29156DCB1B629394F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8RsEYKUVaTyq0l8y9AsOWHeph6M.roa
Signing time: Fri 08 Dec 2023 10:18:40 +0000
ROA not before: Fri 08 Dec 2023 10:18:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a0e:b107:27d0::/45 maxlen: 48
2a0e:b107:2800::/45 maxlen: 48
2a0e:b107:2810::/45 maxlen: 48
2a0e:b107:27f8::/45 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:ef:bf:9c:29:38:c3:f2:91:56:dc:b1:b6:29:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 8 10:18:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f11b0460a515693caad25f32f40b0e5877a987a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:7f:ad:34:49:86:50:57:33:a4:53:d2:68:
ed:7f:b6:0d:3f:1c:9a:7b:c8:37:84:73:75:96:f1:
cf:36:3e:ff:a2:09:94:d4:83:95:b9:51:c9:72:10:
1f:6c:f4:ca:0f:8f:39:a1:46:51:81:3d:18:5c:db:
44:18:53:43:e1:14:81:b8:6a:0c:b1:40:ce:ea:6e:
6b:5b:da:2d:8e:50:8a:3a:56:c9:1a:59:42:66:b4:
49:d7:96:90:ad:fc:b5:a4:87:68:a7:a3:e9:3d:f7:
a4:36:0c:ca:07:2d:cd:9a:51:3b:f4:f9:a0:20:aa:
4d:95:14:f2:df:48:61:21:25:df:a2:6a:f5:ed:b3:
61:e3:a8:b8:62:d1:67:c7:d6:0d:ec:73:77:a8:29:
64:59:74:52:2c:7e:9e:00:e8:95:79:35:af:db:4f:
e3:da:71:94:78:86:2a:e7:19:06:67:37:57:6b:c5:
33:bb:05:1b:1a:89:a4:e9:5e:09:06:eb:25:de:27:
c5:5d:3c:dc:79:2e:ae:42:17:e2:4b:11:0e:44:fa:
57:f7:a9:03:f1:a2:22:ea:2d:14:52:60:c1:b6:ff:
bc:01:7c:eb:02:98:10:a6:14:62:eb:c8:61:28:7a:
13:12:2f:6f:5a:5b:d6:fa:9b:1a:80:fa:48:fc:e4:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:04:60:A5:15:69:3C:AA:D2:5F:32:F4:0B:0E:58:77:A9:87:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8RsEYKUVaTyq0l8y9AsOWHeph6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f8::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2810::/45
Signature Algorithm: sha256WithRSAEncryption
38:d3:03:ba:3c:14:2d:99:34:18:aa:6b:7e:ab:11:18:c4:2a:
4c:b9:c2:dd:88:6c:56:62:1c:cf:27:92:97:73:c0:40:eb:5c:
fb:f2:3b:2b:d0:52:93:fb:ac:e1:df:b9:b1:05:34:55:3d:be:
94:50:01:64:60:c5:b6:6a:a7:e8:b7:1a:88:d9:ca:9c:09:ef:
79:2d:ec:9a:64:8f:02:51:3c:76:19:28:f0:d7:f5:24:9f:fc:
4e:e5:2e:55:d1:88:d0:db:c7:e1:44:54:7f:e1:5d:ad:41:8f:
d0:ce:b3:29:b5:f3:4a:ad:03:02:cb:f3:25:bc:e8:34:94:66:
25:fe:e5:5d:d5:15:f0:ef:1b:42:d0:13:14:8f:db:d6:0b:19:
c3:56:98:54:39:6b:36:3b:af:cd:01:49:9a:0f:78:0d:43:af:
73:69:27:bd:af:e8:a5:1d:3c:9a:01:12:bb:d5:b2:4e:ed:79:
ec:3c:04:70:ac:5a:c1:eb:26:1d:35:2d:82:4c:eb:03:42:85:
ad:7c:aa:ed:47:f7:5c:4d:cf:ab:76:9c:ef:2b:5b:39:ba:d1:
bd:83:e8:6c:f4:d9:e0:d3:1e:72:c4:92:3a:c8:b8:2b:11:1a:
bc:70:bd:5f:c9:1a:ac:26:e8:f7:57:be:70:50:e5:bc:bb:3c:
7b:64:a4:b6
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYxI77+cKTjD8pFW3LG2KTlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMjA4MTAxODQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTFiMDQ2MGE1MTU2OTNjYWFkMjVmMzJmNDBiMGU1ODc3YTk4N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlt/rTRJhlBXM6RT0mjtf7YNPxya
e8g3hHN1lvHPNj7/ogmU1IOVuVHJchAfbPTKD485oUZRgT0YXNtEGFND4RSBuGoM
sUDO6m5rW9otjlCKOlbJGllCZrRJ15aQrfy1pIdop6PpPfekNgzKBy3NmlE79Pmg
IKpNlRTy30hhISXfomr17bNh46i4YtFnx9YN7HN3qClkWXRSLH6eAOiVeTWv20/j
2nGUeIYq5xkGZzdXa8UzuwUbGomk6V4JBusl3ifFXTzceS6uQhfiSxEORPpX96kD
8aIi6i0UUmDBtv+8AXzrApgQphRi68hhKHoTEi9vWlvW+psagPpI/OQwJwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPEbBGClFWk8qtJfMvQLDlh3qYejMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOFJzRVlLVVZhVHlxMGw4eTlBc09XSGVwaDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcDKg6xByfQ
MBIDBwMqDrEHJ/gDBwMqDrEHKAADBwMqDrEHKBAwDQYJKoZIhvcNAQELBQADggEB
ADjTA7o8FC2ZNBiqa36rERjEKky5wt2IbFZiHM8nkpdzwEDrXPvyOyvQUpP7rOHf
ubEFNFU9vpRQAWRgxbZqp+i3GojZypwJ73kt7JpkjwJRPHYZKPDX9SSf/E7lLlXR
iNDbx+FEVH/hXa1Bj9DOsym180qtAwLL8yW86DSUZiX+5V3VFfDvG0LQExSP29YL
GcNWmFQ5azY7r80BSZoPeA1Dr3NpJ72v6KUdPJoBErvVsk7teew8BHCsWsHrJh01
LYJM6wNCha18qu1H91xNz6t2nO8rWzm60b2D6Gz02eDTHnLEkjrIuCsRGrxwvV/J
Gqwm6PdXvnBQ5by7PHtkpLY=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:13 2023 by rpki-client on console.sobornost.net