Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/CNcuGhutcn5fzGAHzSlqX9CanAY.roa
File: CNcuGhutcn5fzGAHzSlqX9CanAY.roa (raw, json)
Hash identifier: li7Yf+tvHdyIe+7Hj4gbsImZv1zJyWtCuH6OjA+7YG0=
Subject key identifier: 08:D7:2E:1A:1B:AD:72:7E:5F:CC:60:07:CD:29:6A:5F:D0:9A:9C:06
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0193E96DFD851E5DBC7961B967659387A76C
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/CNcuGhutcn5fzGAHzSlqX9CanAY.roa
Signing time: Sat 21 Dec 2024 13:35:19 +0000
ROA not before: Sat 21 Dec 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0:30c0::/48 maxlen: 48
2001:30c1:30c1::/48 maxlen: 48
2001:30c2:30c2::/48 maxlen: 48
2001:30c3:30c3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:6d:fd:85:1e:5d:bc:79:61:b9:67:65:93:87:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Dec 21 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08d72e1a1bad727e5fcc6007cd296a5fd09a9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:4e:9b:6b:25:65:3c:60:97:c0:6d:e0:bb:
d2:57:1a:0d:d6:9e:ae:de:2d:2a:72:6d:63:1e:61:
d1:93:fb:96:67:6e:48:86:dd:a3:b6:41:65:eb:ec:
ae:0f:44:1d:c1:d5:83:e6:7e:ae:09:a2:d3:d8:da:
cd:4f:d9:38:20:eb:65:26:d4:2d:8e:31:8e:80:29:
bc:28:24:24:b8:7a:24:8f:bf:85:c4:06:e9:01:59:
c9:d6:c4:b7:0e:8a:ee:62:03:2b:af:99:8c:05:c7:
68:1e:61:5d:ff:d0:1b:e6:3e:41:6a:e8:b6:b8:d9:
6c:f0:af:f6:51:ab:7e:dc:00:a9:34:0d:26:33:70:
92:09:70:fb:53:16:9e:b3:50:ca:43:03:33:ac:c3:
1e:7e:a3:49:36:1d:b5:da:f4:bf:a8:c4:d4:bb:57:
59:4a:1a:f3:19:6c:d7:b6:77:81:9d:4a:37:21:7a:
d4:54:22:89:75:bf:1c:b6:25:18:44:47:e5:12:29:
8a:52:d7:05:e6:60:57:ec:c2:a7:f4:ff:73:cc:fc:
20:13:bf:09:78:78:ad:d8:d1:7e:9b:ab:3a:55:e3:
1c:d3:7b:87:a8:3a:42:1c:a6:da:55:a6:87:ca:5e:
9f:9b:f4:4f:af:02:99:f4:e6:0d:ab:ad:48:97:50:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:2E:1A:1B:AD:72:7E:5F:CC:60:07:CD:29:6A:5F:D0:9A:9C:06
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/CNcuGhutcn5fzGAHzSlqX9CanAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:30c0::/48
2001:30c1:30c1::/48
2001:30c2:30c2::/48
2001:30c3:30c3::/48
Signature Algorithm: sha256WithRSAEncryption
5a:c4:fb:e0:8e:3e:6a:4e:0c:73:f3:59:79:c1:a2:aa:76:d0:
ee:aa:16:59:ab:69:5c:eb:71:ac:b4:d4:e5:84:5e:71:d2:7c:
07:a2:bc:82:09:de:24:5f:1a:78:0d:60:0e:c5:31:a8:f8:2e:
9a:ee:b8:02:eb:bf:1f:d2:3d:88:c7:14:f5:28:3e:cc:16:96:
ad:6c:12:7d:c6:b7:dd:21:50:83:ce:2b:1e:3f:db:55:89:ca:
5d:15:8d:16:64:53:74:67:ae:6d:3a:92:06:6c:17:a7:3a:be:
68:29:bb:57:ed:f2:59:60:83:69:00:99:92:74:35:53:2c:6c:
f4:e1:19:0e:03:e8:94:7f:0e:88:48:b1:f1:68:88:1f:df:42:
fa:0e:99:45:7f:15:4b:1c:86:0a:ac:f1:fa:f2:7c:61:84:8a:
27:79:e5:fc:a0:cb:cf:ed:db:55:f8:17:f2:19:af:5e:46:ff:
38:34:0d:38:66:98:85:f5:88:99:b4:7e:b5:ae:8a:48:f0:6f:
a1:8a:31:da:78:bd:39:fb:37:3c:4f:ae:97:6f:70:89:25:82:
c5:ab:0c:d2:ce:92:07:be:4f:33:ac:c7:b3:f6:f8:e0:b2:97:
cc:56:77:0a:6f:41:78:86:60:f6:c5:96:4e:41:20:bf:88:e7:
ad:f4:2d:39
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZPpbf2FHl28eWG5Z2WTh6dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi
YjllODEwHhcNMjQxMjIxMTMzNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQ3MmUxYTFiYWQ3MjdlNWZjYzYwMDdjZDI5NmE1ZmQwOWE5YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB9Om2slZTxgl8Bt4LvSVxoN1p6u
3i0qcm1jHmHRk/uWZ25Iht2jtkFl6+yuD0QdwdWD5n6uCaLT2NrNT9k4IOtlJtQt
jjGOgCm8KCQkuHokj7+FxAbpAVnJ1sS3DoruYgMrr5mMBcdoHmFd/9Ab5j5Baui2
uNls8K/2Uat+3ACpNA0mM3CSCXD7Uxaes1DKQwMzrMMefqNJNh212vS/qMTUu1dZ
ShrzGWzXtneBnUo3IXrUVCKJdb8ctiUYREflEimKUtcF5mBX7MKn9P9zzPwgE78J
eHit2NF+m6s6VeMc03uHqDpCHKbaVaaHyl6fm/RPrwKZ9OYNq61Il1DjoQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAjXLhobrXJ+X8xgB80pal/QmpwGMB8GA1UdIwQY
MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct
YjM0ZDY0OWNmYjdiLzEvQ05jdUdodXRjbjVmekdBSHpTbHFYOUNhbkFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi
LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEwwDDA
AwcAIAEwwTDBAwcAIAEwwjDCAwcAIAEwwzDDMA0GCSqGSIb3DQEBCwUAA4IBAQBa
xPvgjj5qTgxz81l5waKqdtDuqhZZq2lc63GstNTlhF5x0nwHoryCCd4kXxp4DWAO
xTGo+C6a7rgC678f0j2IxxT1KD7MFpatbBJ9xrfdIVCDziseP9tVicpdFY0WZFN0
Z65tOpIGbBenOr5oKbtX7fJZYINpAJmSdDVTLGz04RkOA+iUfw6ISLHxaIgf30L6
DplFfxVLHIYKrPH68nxhhIoneeX8oMvP7dtV+BfyGa9eRv84NA04ZpiF9YiZtH61
ropI8G+hijHaeL05+zc8T66Xb3CJJYLFqwzSzpIHvk8zrMez9vjgspfMVncKb0F4
hmD2xZZOQSC/iOet9C05
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:03:54 2025 by rpki-client