Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/1GtkLMnTfbRcdd0qTe3zatyUcsE.roa
File: 1GtkLMnTfbRcdd0qTe3zatyUcsE.roa (raw, json)
Hash identifier: szFEJobN69w8vpl4UxKmC7haNqOCbgdQDEW5ZUwONnk=
Subject key identifier: D4:6B:64:2C:C9:D3:7D:B4:5C:75:DD:2A:4D:ED:F3:6A:DC:94:72:C1
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018CC424840F9E3EB1B9C91404C882041FFB
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/1GtkLMnTfbRcdd0qTe3zatyUcsE.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28952
IP address blocks: 2a03:6947:1800::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:84:0f:9e:3e:b1:b9:c9:14:04:c8:82:04:1f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d46b642cc9d37db45c75dd2a4dedf36adc9472c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:7f:61:57:7a:b4:6d:cc:35:d3:c4:25:4a:
42:85:46:1d:50:71:f1:49:44:17:f4:97:cd:bd:f9:
8d:72:ad:09:1e:64:37:6e:d4:7b:b0:94:3d:ec:0b:
bd:af:f2:c4:20:b0:32:c2:30:45:36:5a:2e:f7:e3:
5f:b3:2e:7a:0c:13:58:a2:2a:f1:b0:05:ca:38:34:
b0:c4:32:ac:64:89:7c:da:3d:14:5e:30:f4:17:f8:
4b:21:e4:e9:68:59:c8:17:d9:f4:f0:93:4e:61:0e:
d3:62:fa:1b:ed:06:f7:6e:de:11:6f:99:4a:82:4a:
38:76:11:cf:8b:86:cf:79:99:b3:45:32:ca:8f:7a:
0b:62:e8:97:27:28:c7:95:4c:bb:05:68:4f:35:16:
43:e5:55:60:e3:8c:27:31:4c:e3:a1:14:01:ac:86:
e0:8b:3f:0e:ae:4c:c1:5f:a9:e4:a7:f7:e5:14:a5:
6d:d5:88:bd:ca:f8:b5:0d:16:5c:11:d2:da:3d:89:
d5:50:d4:89:65:74:e8:d7:b9:87:93:15:18:77:70:
8f:1e:d7:8c:88:25:74:87:46:14:7b:2c:f8:05:9d:
42:1e:70:3d:2f:11:23:73:f9:11:57:3a:e4:c1:37:
e6:07:3f:a2:d3:f1:7f:84:46:e8:f3:24:d2:d3:29:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:64:2C:C9:D3:7D:B4:5C:75:DD:2A:4D:ED:F3:6A:DC:94:72:C1
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/1GtkLMnTfbRcdd0qTe3zatyUcsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:1800::/40
Signature Algorithm: sha256WithRSAEncryption
5c:3e:cd:1c:df:98:2b:ae:9a:b7:5b:b5:a5:ec:25:5d:7b:6b:
ba:84:88:9f:29:63:8b:b0:85:35:80:a0:c9:25:14:1b:e8:a6:
48:c2:59:3b:99:6e:4a:5e:1a:51:93:b7:7f:ac:5b:3a:9f:53:
13:56:ff:6b:b9:49:33:00:f6:02:13:b8:ae:32:7b:fd:8f:cf:
be:c4:de:f5:73:38:c6:a3:a8:eb:1e:0d:65:2e:a8:df:07:a4:
a5:64:54:b4:15:2c:77:52:c0:58:28:bd:fa:30:8c:31:9c:ed:
17:79:b5:9c:84:94:2d:9c:67:c7:cf:38:88:6c:41:b7:86:fb:
89:b6:8e:33:22:a9:0f:d4:f3:70:f7:34:1d:03:4f:52:cf:ae:
93:4b:31:b4:f9:ff:9e:73:c5:7b:58:12:02:3c:ee:9d:42:5e:
2a:4e:57:88:d5:8f:b9:4d:df:96:0a:81:23:43:dc:74:69:2b:
e1:c3:14:3c:0a:20:db:8c:20:49:1d:3a:f6:f9:6b:8a:91:ce:
b7:44:26:2f:06:e1:c7:79:0c:f4:61:a6:43:8c:04:a2:de:f7:
7e:59:cd:a5:9e:82:8b:78:e2:fa:25:58:0d:94:57:86:8c:4b:
c6:d7:b5:43:0c:5d:72:84:9c:07:dc:d6:a0:ca:d4:6a:52:5c:
de:7a:e4:af
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzEJIQPnj6xuckUBMiCBB/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4
NjZhYWMwHhcNMjQwMTAxMDgyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDZiNjQyY2M5ZDM3ZGI0NWM3NWRkMmE0ZGVkZjM2YWRjOTQ3MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3p/YVd6tG3MNdPEJUpChUYdUHHx
SUQX9JfNvfmNcq0JHmQ3btR7sJQ97Au9r/LEILAywjBFNlou9+Nfsy56DBNYoirx
sAXKODSwxDKsZIl82j0UXjD0F/hLIeTpaFnIF9n08JNOYQ7TYvob7Qb3bt4Rb5lK
gko4dhHPi4bPeZmzRTLKj3oLYuiXJyjHlUy7BWhPNRZD5VVg44wnMUzjoRQBrIbg
iz8OrkzBX6nkp/flFKVt1Yi9yvi1DRZcEdLaPYnVUNSJZXTo17mHkxUYd3CPHteM
iCV0h0YUeyz4BZ1CHnA9LxEjc/kRVzrkwTfmBz+i0/F/hEbo8yTS0ymGNQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNRrZCzJ0320XHXdKk3t82rclHLBMB8GA1UdIwQY
MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt
M2VmNWViN2M4NTk4LzEvMUd0a0xNblRmYlJjZGQwcVRlM3phdHlVY3NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4
LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgNpRxgw
DQYJKoZIhvcNAQELBQADggEBAFw+zRzfmCuumrdbtaXsJV17a7qEiJ8pY4uwhTWA
oMklFBvopkjCWTuZbkpeGlGTt3+sWzqfUxNW/2u5STMA9gITuK4ye/2Pz77E3vVz
OMajqOseDWUuqN8HpKVkVLQVLHdSwFgovfowjDGc7Rd5tZyElC2cZ8fPOIhsQbeG
+4m2jjMiqQ/U83D3NB0DT1LPrpNLMbT5/55zxXtYEgI87p1CXipOV4jVj7lN35YK
gSND3HRpK+HDFDwKINuMIEkdOvb5a4qRzrdEJi8G4cd5DPRhpkOMBKLe935ZzaWe
got44volWA2UV4aMS8bXtUMMXXKEnAfc1qDK1GpSXN565K8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:54 2025 by rpki-client