Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/zXu99trbCfZyBKE5d-VRFDSY6wE.roa
File: zXu99trbCfZyBKE5d-VRFDSY6wE.roa (raw, json)
Hash identifier: 5U68KLvWvnPKVw0MSNU+vqvPBhlYttzAmSWVcbbUC94=
Subject key identifier: CD:7B:BD:F6:DA:DB:09:F6:72:04:A1:39:77:E5:51:14:34:98:EB:01
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018CC86F9765D1D1E8220CE870642D9FF93D
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/zXu99trbCfZyBKE5d-VRFDSY6wE.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211338
IP address blocks: 2a0d:2406:3000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:97:65:d1:d1:e8:22:0c:e8:70:64:2d:9f:f9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd7bbdf6dadb09f67204a13977e551143498eb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:d2:63:92:cd:96:19:29:5e:08:8d:54:70:
df:71:c8:83:ba:0a:23:3b:ea:ed:88:e2:ad:5e:ed:
a6:a3:39:cf:07:ab:b1:e3:80:e2:56:88:18:69:47:
94:b4:a1:5e:61:99:8c:61:92:66:46:bb:6f:12:2b:
13:2d:58:92:de:9a:d8:13:46:b5:fb:2c:84:2e:3e:
ab:da:79:0f:99:78:bc:7c:5e:f8:6d:ac:de:e3:c6:
98:c9:2b:9b:da:09:57:3c:0a:3c:35:dc:21:3d:a8:
da:81:80:8e:26:f5:44:9d:46:98:f2:60:fd:c0:0e:
17:1c:c7:41:aa:c4:45:04:ca:fa:ce:90:90:2d:9f:
1a:fb:7a:41:99:70:f1:e0:80:35:65:c8:d0:49:68:
a3:71:48:19:13:90:27:00:e9:4b:f0:d0:08:76:76:
2f:ea:91:08:91:c1:af:9c:c3:15:cc:81:6b:30:80:
4d:3f:d3:4a:f8:6d:48:24:6e:13:1c:ea:4b:83:68:
d9:e7:69:30:82:e1:10:50:75:c9:a0:fc:8b:0c:90:
64:6c:38:6a:8b:20:d3:a2:8c:32:3d:01:2e:6d:be:
4c:7d:79:00:e4:5e:21:ae:ec:44:44:13:dd:d5:e4:
2f:80:ed:9e:6c:66:c7:84:9d:49:1f:24:c7:56:bf:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:BD:F6:DA:DB:09:F6:72:04:A1:39:77:E5:51:14:34:98:EB:01
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/zXu99trbCfZyBKE5d-VRFDSY6wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:3000::/48
Signature Algorithm: sha256WithRSAEncryption
2e:21:82:68:44:a2:3c:99:d0:e2:00:dd:5d:14:82:cf:85:c2:
0d:33:36:61:60:c8:7f:a9:90:c7:05:3d:f4:7f:ae:f0:5c:e8:
e6:74:6f:97:20:ce:2a:cb:44:18:93:2b:35:fb:04:5e:2a:eb:
87:77:96:8f:bd:ba:43:e6:2f:a5:5c:6a:a9:83:7f:6b:af:20:
2a:7f:31:f2:4c:3b:61:cd:ca:0f:04:5e:72:67:4c:d4:2b:d4:
aa:a2:5d:6f:d7:23:4c:84:bc:90:f3:4d:91:57:98:00:f2:21:
92:15:af:ec:e7:4a:3a:68:d6:ba:4a:9d:fd:2c:a3:f6:a9:61:
a7:95:df:35:b1:9c:ec:eb:00:15:da:b7:ff:f3:8a:f5:65:da:
44:62:0e:88:9c:50:a6:26:1d:d7:a4:40:e7:90:78:7e:a5:c1:
b5:98:6d:5a:69:13:95:30:41:36:93:2f:c4:2b:38:72:ce:c1:
29:57:0a:f2:3b:47:27:26:2d:98:66:40:3b:1a:70:f2:01:6e:
21:ee:29:94:68:90:9f:c3:95:a7:55:92:ef:ff:77:50:d4:90:
e0:bc:02:eb:ad:02:f5:2f:eb:45:f8:76:a5:bb:ba:16:cb:be:
aa:b6:f0:59:69:45:50:a4:75:dd:0b:d6:da:44:fa:32:d3:e7:
cc:2b:67:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIb5dl0dHoIgzocGQtn/k9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjQwMTAyMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDdiYmRmNmRhZGIwOWY2NzIwNGExMzk3N2U1NTExNDM0OThlYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJDSY5LNlhkpXgiNVHDfcciDugoj
O+rtiOKtXu2moznPB6ux44DiVogYaUeUtKFeYZmMYZJmRrtvEisTLViS3prYE0a1
+yyELj6r2nkPmXi8fF74baze48aYySub2glXPAo8NdwhPajagYCOJvVEnUaY8mD9
wA4XHMdBqsRFBMr6zpCQLZ8a+3pBmXDx4IA1ZcjQSWijcUgZE5AnAOlL8NAIdnYv
6pEIkcGvnMMVzIFrMIBNP9NK+G1IJG4THOpLg2jZ52kwguEQUHXJoPyLDJBkbDhq
iyDToowyPQEubb5MfXkA5F4hruxERBPd1eQvgO2ebGbHhJ1JHyTHVr9xSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM17vfba2wn2cgShOXflURQ0mOsBMB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvelh1OTl0cmJDZlp5QktFNWQtVlJGRFNZNndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0kBjAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAuIYJoRKI8mdDiAN1dFILPhcINMzZhYMh/qZDH
BT30f67wXOjmdG+XIM4qy0QYkys1+wReKuuHd5aPvbpD5i+lXGqpg39rryAqfzHy
TDthzcoPBF5yZ0zUK9Sqol1v1yNMhLyQ802RV5gA8iGSFa/s50o6aNa6Sp39LKP2
qWGnld81sZzs6wAV2rf/84r1ZdpEYg6InFCmJh3XpEDnkHh+pcG1mG1aaROVMEE2
ky/EKzhyzsEpVwryO0cnJi2YZkA7GnDyAW4h7imUaJCfw5WnVZLv/3dQ1JDgvALr
rQL1L+tF+Halu7oWy76qtvBZaUVQpHXdC9baRPoy0+fMK2fB
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:37 2025 by rpki-client