Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/WoKGmIeDxzhYDZ5BOLFNE0_2PtQ.roa
File: WoKGmIeDxzhYDZ5BOLFNE0_2PtQ.roa (raw, json)
Hash identifier: UXuSlzGj/7pkPmVhVkWL0mLzhYQoKcYfhNoqGb7rucE=
Subject key identifier: 5A:82:86:98:87:83:C7:38:58:0D:9E:41:38:B1:4D:13:4F:F6:3E:D4
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 019231A808215F476EDFFB2FC3872EC9030A
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/WoKGmIeDxzhYDZ5BOLFNE0_2PtQ.roa
Signing time: Fri 27 Sep 2024 04:05:48 +0000
ROA not before: Fri 27 Sep 2024 04:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214134
IP address blocks: 2a13:ce40::/48 maxlen: 48
2a13:ce40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Oct 2024 17:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:31:a8:08:21:5f:47:6e:df:fb:2f:c3:87:2e:c9:03:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Sep 27 04:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a8286988783c738580d9e4138b14d134ff63ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:40:a7:3c:0e:75:dd:63:3b:1f:a0:90:30:
72:16:0f:c1:d1:d9:6e:50:c2:ae:66:4f:dd:27:a5:
f9:d8:e8:b8:9b:d6:6e:34:2f:a9:0a:e3:82:69:06:
9b:cd:c9:f2:db:b5:fc:10:d6:61:5d:3b:d5:9b:9f:
ce:54:52:e1:95:d1:35:30:6c:2a:ec:6b:13:c8:13:
34:44:9f:7b:11:84:fe:d5:00:00:96:b0:8c:4c:4a:
a7:45:81:f3:cd:a5:10:b5:ec:49:81:ef:4c:3b:50:
6d:9d:74:00:5a:97:56:7c:4b:bd:7b:de:6b:fc:62:
53:65:c9:a1:20:d8:4e:24:7f:d6:e7:86:9e:05:69:
9e:fa:58:e5:a5:44:ea:59:7a:1c:33:f7:9a:5f:8b:
31:4d:ef:fb:de:12:d4:c5:bb:43:42:b0:ea:d8:09:
33:8b:77:5e:3d:48:59:8d:e8:86:7b:8a:04:d9:7e:
48:ad:9d:9a:09:74:3f:c7:1e:2e:12:d3:86:51:c4:
90:50:98:bc:48:ea:da:35:e4:68:df:ae:fe:02:61:
4e:03:68:b6:7d:70:e7:3d:be:a1:7d:28:24:88:71:
7c:fe:b6:81:7e:bd:fc:43:0f:ba:54:3b:ba:28:76:
e8:23:f1:6a:a5:a3:5f:3a:b3:07:a7:e9:bb:c7:d5:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:82:86:98:87:83:C7:38:58:0D:9E:41:38:B1:4D:13:4F:F6:3E:D4
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/WoKGmIeDxzhYDZ5BOLFNE0_2PtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ce40::/47
Signature Algorithm: sha256WithRSAEncryption
3b:19:ae:10:6e:81:81:07:3b:3d:9d:d0:73:bc:47:2f:87:23:
df:bb:73:b4:a3:9b:46:b1:46:06:7f:cd:c7:cc:9b:ec:5d:40:
db:53:e8:e8:7b:b7:d4:41:2d:78:3c:cf:e1:fc:83:43:08:aa:
bd:93:da:4a:cf:75:34:9d:47:fb:fb:92:bd:aa:2d:2f:76:80:
f1:d2:68:bd:6e:a6:07:ff:49:f0:19:72:40:f9:c1:1b:44:ed:
4b:98:c3:76:09:d3:f9:e9:60:75:82:d3:ff:24:21:d3:f3:b6:
43:39:77:93:cd:e4:65:10:c0:e5:01:a5:4d:ef:2b:98:0f:04:
f4:9f:e1:2b:2d:68:dd:37:34:95:bc:c4:a5:6d:58:04:fe:06:
df:ca:b0:5c:fe:9b:47:a6:e3:96:46:21:0c:98:cb:45:f8:e5:
2a:57:e1:ad:d5:fe:75:51:e5:da:78:58:41:39:6a:ed:45:1a:
cd:a4:88:b2:98:6f:f8:ca:b0:88:38:a9:ad:77:4f:57:bf:4a:
75:a4:96:fa:63:8b:90:90:48:10:46:fa:a9:87:9e:43:8f:7f:
61:ab:4a:c8:52:71:01:9b:96:d1:92:55:75:55:e3:47:ec:ee:
1f:17:c3:47:81:a0:7f:9a:b7:49:c4:87:97:ba:a9:f1:73:77:
8a:7e:9d:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZIxqAghX0du3/svw4cuyQMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjQwOTI3MDQwNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTgyODY5ODg3ODNjNzM4NTgwZDllNDEzOGIxNGQxMzRmZjYzZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXdApzwOdd1jOx+gkDByFg/B0dlu
UMKuZk/dJ6X52Oi4m9ZuNC+pCuOCaQabzcny27X8ENZhXTvVm5/OVFLhldE1MGwq
7GsTyBM0RJ97EYT+1QAAlrCMTEqnRYHzzaUQtexJge9MO1BtnXQAWpdWfEu9e95r
/GJTZcmhINhOJH/W54aeBWme+ljlpUTqWXocM/eaX4sxTe/73hLUxbtDQrDq2Akz
i3dePUhZjeiGe4oE2X5IrZ2aCXQ/xx4uEtOGUcSQUJi8SOraNeRo367+AmFOA2i2
fXDnPb6hfSgkiHF8/raBfr38Qw+6VDu6KHboI/FqpaNfOrMHp+m7x9UeywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFqChpiHg8c4WA2eQTixTRNP9j7UMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvV29LR21JZUR4emhZRFo1Qk9MRk5FMF8yUHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhPOQAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA7Ga4QboGBBzs9ndBzvEcvhyPfu3O0o5tGsUYG
f83HzJvsXUDbU+joe7fUQS14PM/h/INDCKq9k9pKz3U0nUf7+5K9qi0vdoDx0mi9
bqYH/0nwGXJA+cEbRO1LmMN2CdP56WB1gtP/JCHT87ZDOXeTzeRlEMDlAaVN7yuY
DwT0n+ErLWjdNzSVvMSlbVgE/gbfyrBc/ptHpuOWRiEMmMtF+OUqV+Gt1f51UeXa
eFhBOWrtRRrNpIiymG/4yrCIOKmtd09Xv0p1pJb6Y4uQkEgQRvqph55Dj39hq0rI
UnEBm5bRklV1VeNH7O4fF8NHgaB/mrdJxIeXuqnxc3eKfp2a
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:52:09 2025 by rpki-client