Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/HzMVMe8-6OD6M76i1OXmBY8RUlY.roa
File: HzMVMe8-6OD6M76i1OXmBY8RUlY.roa (raw, json)
Hash identifier: lNHLJ9BktemMIBCwkJU9nuT+dVkdSxKxen4TFD+vaGw=
Subject key identifier: 1F:33:15:31:EF:3E:E8:E0:FA:33:BE:A2:D4:E5:E6:05:8F:11:52:56
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0193708ED88CBA197A66EECE4EE2FA73B04C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/HzMVMe8-6OD6M76i1OXmBY8RUlY.roa
Signing time: Thu 28 Nov 2024 02:17:09 +0000
ROA not before: Thu 28 Nov 2024 02:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214880
IP address blocks: 2a14:67c1:30::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:70:8e:d8:8c:ba:19:7a:66:ee:ce:4e:e2:fa:73:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 28 02:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f331531ef3ee8e0fa33bea2d4e5e6058f115256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:b7:c7:bc:0d:35:10:60:e1:8f:95:64:8c:
ca:6a:d8:0a:5a:82:cf:66:3a:17:aa:80:db:f5:73:
5a:24:10:7b:8e:97:5b:a1:32:29:4a:03:2b:23:14:
49:46:55:1f:96:40:63:82:6b:3d:cb:db:28:81:41:
20:73:6e:f5:c4:77:70:11:56:4a:4a:77:50:bc:96:
c1:05:9f:f5:14:87:f5:ff:a9:64:6c:b5:bf:e6:bd:
5f:bd:03:98:ce:04:62:22:6d:b9:38:e2:dc:c9:dd:
e5:94:e5:cf:11:7e:e7:dd:38:50:a1:19:45:2d:6f:
5a:0e:ef:d7:d7:1a:3f:39:54:00:b0:f2:b0:5f:b1:
91:82:ac:18:4c:91:a5:e0:45:c3:d2:0f:37:49:a0:
44:d2:14:a4:71:7c:17:2a:c6:a6:2b:62:de:f4:22:
ae:f4:c0:92:b3:35:8a:44:40:c5:19:26:39:64:ce:
39:84:b7:cd:2f:61:00:a1:74:ac:07:f6:19:ce:df:
a2:1c:b4:1f:8b:3d:83:71:f6:52:50:73:6c:dd:68:
ab:8b:2f:89:c1:c9:d7:2d:f2:9c:d8:3f:7e:52:e7:
d4:4f:dc:25:1d:92:f0:b7:9e:1a:8d:2b:3d:07:df:
b2:b2:7e:4c:d0:e2:47:43:ae:b8:c0:f6:42:1f:7a:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:33:15:31:EF:3E:E8:E0:FA:33:BE:A2:D4:E5:E6:05:8F:11:52:56
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/HzMVMe8-6OD6M76i1OXmBY8RUlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:30::/44
Signature Algorithm: sha256WithRSAEncryption
c9:11:1c:7c:91:6d:ca:2a:52:99:e7:b9:db:69:aa:64:7e:23:
19:0e:9b:55:d6:73:f7:5f:2b:b8:a0:51:49:c6:9b:26:7f:71:
19:ab:c8:c5:fa:40:95:1d:41:8f:25:04:0d:a2:16:c0:5b:54:
1c:56:0d:7e:08:3d:0e:a6:9d:89:33:0f:3d:19:9f:38:bb:77:
a5:de:44:ab:48:71:14:5f:2a:58:0b:d5:af:3f:ef:6d:b6:42:
0c:4b:ed:c8:b6:db:7a:d6:1a:71:d6:88:13:e4:da:13:7d:49:
f0:5f:ab:d6:b5:00:1a:90:2b:ac:11:46:25:63:34:2b:83:96:
1c:1a:90:57:14:74:7a:fa:28:29:1d:c7:28:8a:35:90:00:04:
f9:f0:2d:89:dc:ac:22:6d:5e:fb:a9:8d:f8:45:88:7d:15:d9:
8f:c7:f5:8e:41:46:f9:27:95:99:78:db:02:4f:93:0e:fd:5f:
86:fe:ec:19:3d:5b:74:4b:80:98:3a:e8:33:d8:8b:e1:30:32:
a1:a1:cc:5a:27:0a:a2:42:3c:df:3d:30:4b:e7:4a:01:b6:85:
11:f4:65:2e:eb:5a:45:b2:b7:99:fb:21:fe:22:a8:32:31:d1:
71:ec:d0:60:d9:70:92:4b:a3:f3:90:bf:65:6a:d8:61:89:0b:
d2:53:69:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZNwjtiMuhl6Zu7OTuL6c7BMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjQxMTI4MDIxNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjMzMTUzMWVmM2VlOGUwZmEzM2JlYTJkNGU1ZTYwNThmMTE1MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD63x7wNNRBg4Y+VZIzKatgKWoLP
ZjoXqoDb9XNaJBB7jpdboTIpSgMrIxRJRlUflkBjgms9y9sogUEgc271xHdwEVZK
SndQvJbBBZ/1FIf1/6lkbLW/5r1fvQOYzgRiIm25OOLcyd3llOXPEX7n3ThQoRlF
LW9aDu/X1xo/OVQAsPKwX7GRgqwYTJGl4EXD0g83SaBE0hSkcXwXKsamK2Le9CKu
9MCSszWKREDFGSY5ZM45hLfNL2EAoXSsB/YZzt+iHLQfiz2DcfZSUHNs3Wiriy+J
wcnXLfKc2D9+UufUT9wlHZLwt54ajSs9B9+ysn5M0OJHQ664wPZCH3qs9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB8zFTHvPujg+jO+otTl5gWPEVJWMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvSHpNVk1lOC02T0Q2TTc2aTFPWG1CWThSVWxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwQAw
MA0GCSqGSIb3DQEBCwUAA4IBAQDJERx8kW3KKlKZ57nbaapkfiMZDptV1nP3Xyu4
oFFJxpsmf3EZq8jF+kCVHUGPJQQNohbAW1QcVg1+CD0Opp2JMw89GZ84u3el3kSr
SHEUXypYC9WvP+9ttkIMS+3Ittt61hpx1ogT5NoTfUnwX6vWtQAakCusEUYlYzQr
g5YcGpBXFHR6+igpHccoijWQAAT58C2J3KwibV77qY34RYh9FdmPx/WOQUb5J5WZ
eNsCT5MO/V+G/uwZPVt0S4CYOugz2IvhMDKhocxaJwqiQjzfPTBL50oBtoUR9GUu
61pFsreZ+yH+IqgyMdFx7NBg2XCSS6PzkL9lathhiQvSU2md
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:47:02 2025 by rpki-client