Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EXFBP5IWdwvW2q8kZ_776jD8cSM.roa
File: EXFBP5IWdwvW2q8kZ_776jD8cSM.roa (raw, json)
Hash identifier: V/dwv8ShYd/utrQQew5scCJxjum0qmH1IGX9V7Vka28=
Subject key identifier: 11:71:41:3F:92:16:77:0B:D6:DA:AF:24:67:FE:FB:EA:30:FC:71:23
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDAB94C86D4450C0AB3CAAF622947
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EXFBP5IWdwvW2q8kZ_776jD8cSM.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50498
IP address blocks: 2a02:2698:3c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:da:b9:4c:86:d4:45:0c:0a:b3:ca:af:62:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1171413f9216770bd6daaf2467fefbea30fc7123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:03:71:fc:b5:96:3b:24:b9:67:68:1c:44:
27:3e:83:e4:44:7b:9c:db:1e:e8:a7:2c:f2:8b:f8:
0d:73:5e:58:c2:6e:fc:c5:4e:2a:81:22:6a:87:50:
1d:be:b5:b9:d2:44:98:e6:3f:59:30:98:5e:89:48:
d4:54:52:ab:20:17:62:a9:45:be:b6:cf:2f:41:c6:
34:0d:2a:b4:70:c3:3a:36:35:78:f4:83:72:33:db:
6d:59:ea:db:da:fd:45:ba:49:07:7d:15:89:ce:20:
c8:15:08:21:30:83:2f:85:f3:5b:f4:36:1c:1a:6b:
33:36:0b:f6:b8:8b:fd:f1:8e:42:e9:8b:e8:0f:fb:
cd:c2:e6:c4:08:96:90:58:83:12:17:28:fd:40:ed:
93:e2:24:40:c2:50:dd:76:35:4d:ef:a0:8a:65:81:
31:d6:9f:b0:02:3d:68:59:94:16:ed:bc:e4:bd:30:
03:ab:dd:71:fc:e3:d3:0f:04:b0:e7:9d:54:16:23:
47:67:b6:d0:98:58:83:20:39:93:55:74:d4:1d:ec:
ba:7f:98:04:d9:7a:7d:4a:b9:c7:61:40:c4:85:47:
74:5a:1f:95:da:5f:04:1f:6e:8e:7a:78:74:17:76:
62:64:b6:55:1c:92:07:76:4a:f6:ad:83:20:ba:9c:
c2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:41:3F:92:16:77:0B:D6:DA:AF:24:67:FE:FB:EA:30:FC:71:23
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EXFBP5IWdwvW2q8kZ_776jD8cSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3c00::/38
Signature Algorithm: sha256WithRSAEncryption
7b:86:66:1c:61:f8:6b:a7:28:65:ee:71:b8:93:f7:66:3f:e4:
90:a6:0d:34:b7:b4:83:5a:58:a4:08:57:b6:43:b1:c0:a4:82:
af:28:27:3d:18:ae:bf:3c:ca:29:61:be:d8:ce:54:fa:9a:06:
4f:c1:bb:df:a9:50:34:ca:46:57:54:ec:62:02:64:d6:05:e0:
fb:b5:5f:83:cf:10:c6:7c:61:73:a8:ca:42:f1:47:2e:c1:ed:
d8:94:8b:fc:3b:ed:ca:a0:91:f6:ef:b0:0d:ce:6a:b1:89:a0:
d9:05:94:d3:30:9f:ad:13:ea:54:b5:5f:13:76:ba:ec:1e:8d:
b8:68:bb:ad:13:43:f6:2f:5f:81:88:22:4b:54:f5:f7:27:c4:
3f:ec:58:d5:c0:30:8d:89:cd:a5:42:cb:4d:16:e7:41:1a:57:
6d:60:67:ba:95:15:bf:da:2c:1f:c4:3c:fa:50:88:39:7e:2a:
2f:6f:63:80:b2:38:04:1b:22:bb:f9:1e:33:d6:4d:0d:06:96:
9b:c4:86:94:4f:15:83:6a:9c:e6:d5:bd:41:c6:8d:d4:c5:0a:
e9:30:b9:6a:05:4c:83:e4:42:d9:8a:fb:4d:a0:ff:e6:7a:68:
6f:2f:75:16:d2:db:9f:00:06:3a:71:b9:7c:51:3c:c3:e9:85:
bb:1e:69:e7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJvNq5TIbURQwKs8qvYilHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTcxNDEzZjkyMTY3NzBiZDZkYWFmMjQ2N2ZlZmJlYTMwZmM3MTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgDcfy1ljskuWdoHEQnPoPkRHuc
2x7opyzyi/gNc15Ywm78xU4qgSJqh1AdvrW50kSY5j9ZMJheiUjUVFKrIBdiqUW+
ts8vQcY0DSq0cMM6NjV49INyM9ttWerb2v1FukkHfRWJziDIFQghMIMvhfNb9DYc
GmszNgv2uIv98Y5C6YvoD/vNwubECJaQWIMSFyj9QO2T4iRAwlDddjVN76CKZYEx
1p+wAj1oWZQW7bzkvTADq91x/OPTDwSw551UFiNHZ7bQmFiDIDmTVXTUHey6f5gE
2Xp9SrnHYUDEhUd0Wh+V2l8EH26Oenh0F3ZiZLZVHJIHdkr2rYMgupzCIQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBFxQT+SFncL1tqvJGf+++ow/HEjMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvRVhGQlA1SVdkd3ZXMnE4a1pfNzc2akQ4Y1NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmDww
DQYJKoZIhvcNAQELBQADggEBAHuGZhxh+GunKGXucbiT92Y/5JCmDTS3tINaWKQI
V7ZDscCkgq8oJz0Yrr88yilhvtjOVPqaBk/Bu9+pUDTKRldU7GICZNYF4Pu1X4PP
EMZ8YXOoykLxRy7B7diUi/w77cqgkfbvsA3OarGJoNkFlNMwn60T6lS1XxN2uuwe
jbhou60TQ/YvX4GIIktU9fcnxD/sWNXAMI2JzaVCy00W50EaV21gZ7qVFb/aLB/E
PPpQiDl+Ki9vY4CyOAQbIrv5HjPWTQ0GlpvEhpRPFYNqnObVvUHGjdTFCukwuWoF
TIPkQtmK+02g/+Z6aG8vdRbS258ABjpxuXxRPMPphbseaec=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:38 2025 by rpki-client