Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/bVVRjp_e_3C8zfrNURmN7BjgbdM.roa
File: bVVRjp_e_3C8zfrNURmN7BjgbdM.roa (raw, json)
Hash identifier: ZTll1BQtYDW4qhmcHHW+uoqyHIQS+qI81izzZ7hreGw=
Subject key identifier: 6D:55:51:8E:9F:DE:FF:70:BC:CD:FA:CD:51:19:8D:EC:18:E0:6D:D3
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018CC86F95441224D0CE7729471D9792A770
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/bVVRjp_e_3C8zfrNURmN7BjgbdM.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49133
IP address blocks: 2a0d:2406:babe::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:95:44:12:24:d0:ce:77:29:47:1d:97:92:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d55518e9fdeff70bccdfacd51198dec18e06dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:12:fb:b9:8c:52:82:41:48:0e:6e:b9:20:
0a:05:b5:49:17:87:40:78:22:2b:f7:3d:36:c8:dd:
91:0e:c1:16:ff:cc:0c:6c:f4:a1:19:f2:f9:81:21:
b3:1d:a4:7f:00:2a:e0:ea:ec:76:7d:ee:5f:dc:56:
14:3e:c6:f4:05:14:4a:0c:7b:b5:56:03:43:5e:7c:
d3:fd:b7:b2:6a:65:f6:f4:66:da:e8:b7:d4:7e:6f:
b0:27:f6:5b:65:11:92:71:85:7c:60:c8:ea:7a:d2:
58:13:26:a7:3e:74:92:a8:be:43:7e:5f:91:bb:7b:
73:ee:ee:cd:e1:63:3d:13:3c:c7:24:e9:5f:65:57:
0e:1b:ee:13:81:71:cf:0e:bf:3a:63:89:48:64:20:
82:3b:d1:52:99:58:33:4f:d9:29:e7:8e:94:c0:4b:
04:62:19:3e:18:61:64:3d:69:a6:be:db:32:7c:02:
52:82:85:d0:a2:af:ac:94:ca:bd:82:ae:f4:d0:f1:
e6:c8:00:d6:1a:da:52:ca:4d:16:50:5e:f4:e9:c9:
81:47:fe:2c:27:79:3c:c6:ac:f7:0f:17:c9:87:19:
4c:6a:ed:cc:53:1f:97:f6:d1:3a:e0:02:f2:6b:6e:
91:b8:ae:5f:6f:5a:a4:6c:32:72:c7:fa:a4:eb:30:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:51:8E:9F:DE:FF:70:BC:CD:FA:CD:51:19:8D:EC:18:E0:6D:D3
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/bVVRjp_e_3C8zfrNURmN7BjgbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:babe::/48
Signature Algorithm: sha256WithRSAEncryption
57:3d:86:8b:a8:ec:47:2b:94:4b:ba:86:33:50:d3:a6:af:ff:
f7:d1:33:13:81:31:87:41:c6:01:d4:b0:c8:62:c0:0b:ab:0c:
47:29:87:f9:e2:32:c2:9d:84:4b:79:5d:56:49:36:e5:e4:36:
79:3a:51:2a:13:22:4c:45:ed:95:37:27:c6:7b:f1:1e:3e:dd:
5b:7f:21:3b:83:bd:11:bc:81:8f:57:b5:b3:ed:e8:34:da:c5:
1b:19:10:a3:73:a1:c0:a8:5a:3d:27:43:86:ed:c0:87:06:c7:
c9:b5:a7:be:fa:ce:84:ba:be:a3:df:a7:e5:cf:9f:ce:38:cd:
85:b4:16:42:9a:86:d0:7f:a7:a1:ef:85:bb:e6:28:c5:d3:5d:
30:fb:d8:be:42:ea:d8:61:74:01:73:a1:1a:dd:25:9d:af:6a:
1c:da:5e:c2:85:73:d4:05:0e:b9:63:e4:e8:71:84:45:ed:f3:
b4:0c:b4:97:92:78:38:67:4f:91:f0:84:34:9b:04:73:58:a2:
7a:d1:56:28:32:7e:65:5d:87:9b:0b:65:b2:46:db:44:61:4d:
ff:94:28:4f:7c:55:58:ba:18:6b:4d:9f:6a:a6:be:fb:77:65:
e8:cd:fa:4d:94:2e:2e:1d:ea:7a:06:6e:8e:1b:ea:42:47:58:
88:ee:10:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIb5VEEiTQzncpRx2XkqdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjQwMTAyMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU1NTE4ZTlmZGVmZjcwYmNjZGZhY2Q1MTE5OGRlYzE4ZTA2ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkcS+7mMUoJBSA5uuSAKBbVJF4dA
eCIr9z02yN2RDsEW/8wMbPShGfL5gSGzHaR/ACrg6ux2fe5f3FYUPsb0BRRKDHu1
VgNDXnzT/beyamX29Gba6LfUfm+wJ/ZbZRGScYV8YMjqetJYEyanPnSSqL5Dfl+R
u3tz7u7N4WM9EzzHJOlfZVcOG+4TgXHPDr86Y4lIZCCCO9FSmVgzT9kp546UwEsE
Yhk+GGFkPWmmvtsyfAJSgoXQoq+slMq9gq700PHmyADWGtpSyk0WUF706cmBR/4s
J3k8xqz3DxfJhxlMau3MUx+X9tE64ALya26RuK5fb1qkbDJyx/qk6zDcjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG1VUY6f3v9wvM36zVEZjewY4G3TMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvYlZWUmpwX2VfM0M4emZyTlVSbU43QmpnYmRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0kBrq+
MA0GCSqGSIb3DQEBCwUAA4IBAQBXPYaLqOxHK5RLuoYzUNOmr//30TMTgTGHQcYB
1LDIYsALqwxHKYf54jLCnYRLeV1WSTbl5DZ5OlEqEyJMRe2VNyfGe/EePt1bfyE7
g70RvIGPV7Wz7eg02sUbGRCjc6HAqFo9J0OG7cCHBsfJtae++s6Eur6j36flz5/O
OM2FtBZCmobQf6eh74W75ijF010w+9i+QurYYXQBc6Ea3SWdr2oc2l7ChXPUBQ65
Y+TocYRF7fO0DLSXkng4Z0+R8IQ0mwRzWKJ60VYoMn5lXYebC2WyRttEYU3/lChP
fFVYuhhrTZ9qpr77d2XozfpNlC4uHep6Bm6OG+pCR1iI7hBP
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:53:33 2025 by rpki-client