Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iKus7huuJu4kjCXgHzbZlvcrNLs.roa
File: iKus7huuJu4kjCXgHzbZlvcrNLs.roa (raw, json)
Hash identifier: gRDL6Q7De3ZtF0kr2dccuMkbAL1ZbRcvlYRZUR9M8hU=
Subject key identifier: 88:AB:AC:EE:1B:AE:26:EE:24:8C:25:E0:1F:36:D9:96:F7:2B:34:BB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0193D036CBA688A42221CFB159FDDF1C0FE2
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iKus7huuJu4kjCXgHzbZlvcrNLs.roa
Signing time: Mon 16 Dec 2024 16:04:32 +0000
ROA not before: Mon 16 Dec 2024 16:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207108
IP address blocks: 2a13:e040::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 29 Dec 2024 08:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:36:cb:a6:88:a4:22:21:cf:b1:59:fd:df:1c:0f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Dec 16 16:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88abacee1bae26ee248c25e01f36d996f72b34bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:7d:a8:b6:9f:a3:d7:3d:10:02:bf:3e:32:
ad:a6:c6:3a:25:11:1a:d2:d7:29:86:9e:f7:ae:7c:
42:dd:91:fa:3a:d8:82:9f:1d:69:99:7f:d5:b2:3a:
25:17:24:31:ba:49:bc:15:cd:6e:0e:f6:29:e2:85:
ab:fd:5b:e8:bc:a0:54:47:24:a4:95:27:f9:eb:32:
25:70:7a:72:23:0a:00:5e:c1:99:be:e0:ec:7f:86:
b7:78:9f:e0:d4:ea:62:76:56:66:93:70:cf:8d:57:
5c:17:32:de:54:45:ce:9a:7d:cd:ed:31:d0:3a:b1:
c4:5a:5d:db:4d:5d:57:73:91:ee:8d:d0:61:a6:e1:
7d:4c:2b:9e:1a:da:50:12:cd:7d:5f:8b:3a:f0:81:
96:9c:b4:a2:ab:0b:05:89:79:8d:0b:09:40:8e:89:
cc:b7:b3:62:61:1e:71:fd:56:7d:98:3c:fd:f5:cf:
4a:c5:d8:0d:06:cf:2d:ba:66:a0:13:b4:ab:23:98:
c6:6c:aa:b2:85:d3:93:5a:ec:33:59:c8:0b:e0:d1:
cf:65:a2:67:dc:13:1a:d1:26:c7:ea:19:58:03:c7:
37:e7:8a:db:db:07:b9:e5:5d:9f:15:b6:8c:69:12:
31:aa:2a:71:80:47:b2:15:f4:5c:4c:57:af:fe:9c:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:AC:EE:1B:AE:26:EE:24:8C:25:E0:1F:36:D9:96:F7:2B:34:BB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iKus7huuJu4kjCXgHzbZlvcrNLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e040::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:0d:e8:11:5a:dd:ff:7d:8f:4a:52:1c:b4:7d:9d:aa:f9:91:
a6:cf:b5:23:77:2d:b8:0a:36:fd:c4:bb:ab:e3:c1:fe:24:00:
86:dd:da:89:1d:68:68:29:d8:8e:d9:81:66:ce:c6:bf:5c:b2:
02:81:2e:80:93:42:81:43:76:19:d7:0f:3b:c0:f4:ee:8b:7d:
ab:a8:a4:f6:ec:67:0b:18:eb:83:b9:6d:e7:75:30:9b:05:aa:
e9:18:58:28:a2:f8:33:ad:eb:94:ce:5d:66:0b:b5:06:98:70:
ba:2e:83:50:2f:97:2f:be:1a:e4:40:1d:50:91:55:fb:17:ea:
35:27:47:bf:fe:bf:42:61:dc:77:cb:21:ea:82:83:8f:2e:f6:
75:39:72:0e:db:97:43:eb:a0:ff:a5:01:3b:07:1f:42:e1:34:
9b:a8:0f:74:1b:0d:f3:c8:de:8d:62:dd:1c:71:f7:db:00:75:
e8:96:35:dd:5c:3c:5e:46:61:14:47:26:7f:c8:fe:8d:6b:17:
e8:ac:0f:07:46:2a:79:63:5d:a3:5c:17:59:47:e3:58:cf:ad:
d9:34:9b:ce:61:6d:68:25:92:d9:7c:4d:0a:a2:69:cc:df:4a:
9e:30:cf:9b:85:43:f4:4a:10:71:91:06:b1:9a:21:09:44:f5:
0c:48:54:27
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZPQNsumiKQiIc+xWf3fHA/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQxMjE2MTYwNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGFiYWNlZTFiYWUyNmVlMjQ4YzI1ZTAxZjM2ZDk5NmY3MmIzNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3h9qLafo9c9EAK/PjKtpsY6JREa
0tcphp73rnxC3ZH6OtiCnx1pmX/VsjolFyQxukm8Fc1uDvYp4oWr/VvovKBURySk
lSf56zIlcHpyIwoAXsGZvuDsf4a3eJ/g1OpidlZmk3DPjVdcFzLeVEXOmn3N7THQ
OrHEWl3bTV1Xc5HujdBhpuF9TCueGtpQEs19X4s68IGWnLSiqwsFiXmNCwlAjonM
t7NiYR5x/VZ9mDz99c9KxdgNBs8tumagE7SrI5jGbKqyhdOTWuwzWcgL4NHPZaJn
3BMa0SbH6hlYA8c354rb2we55V2fFbaMaRIxqipxgEeyFfRcTFev/pxuowIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIirrO4bribuJIwl4B822Zb3KzS7MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvaUt1czdodXVKdTRrakNYZ0h6YlpsdmNyTkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhPgQAMF
AyoUakAwDQYJKoZIhvcNAQELBQADggEBAHsN6BFa3f99j0pSHLR9nar5kabPtSN3
LbgKNv3Eu6vjwf4kAIbd2okdaGgp2I7ZgWbOxr9csgKBLoCTQoFDdhnXDzvA9O6L
fauopPbsZwsY64O5bed1MJsFqukYWCii+DOt65TOXWYLtQaYcLoug1Avly++GuRA
HVCRVfsX6jUnR7/+v0Jh3HfLIeqCg48u9nU5cg7bl0ProP+lATsHH0LhNJuoD3Qb
DfPI3o1i3Rxx99sAdeiWNd1cPF5GYRRHJn/I/o1rF+isDwdGKnljXaNcF1lH41jP
rdk0m85hbWglktl8TQqiaczfSp4wz5uFQ/RKEHGRBrGaIQlE9QxIVCc=
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:26 2025 by rpki-client