Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/0Y0YGp65kUvA741KG9sbFFe5Q5M.roa
File: 0Y0YGp65kUvA741KG9sbFFe5Q5M.roa (raw, json)
Hash identifier: khwgHsEQYQOONH3CHjaNJLxrANL00M53gCHR4cPtw/Q=
Subject key identifier: D1:8D:18:1A:9E:B9:91:4B:C0:EF:8D:4A:1B:DB:1B:14:57:B9:43:93
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E46E98598361EF92204A0CB77702
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/0Y0YGp65kUvA741KG9sbFFe5Q5M.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204693
IP address blocks: 2a0a:280:2500::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:6e:98:59:83:61:ef:92:20:4a:0c:b7:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d18d181a9eb9914bc0ef8d4a1bdb1b1457b94393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:d8:d2:3a:a5:4d:e5:1c:6d:cb:46:2a:5e:
e8:29:40:5a:f5:76:6e:ec:ee:9c:58:e8:70:e8:33:
35:84:cd:15:45:de:47:ff:e0:88:70:f1:22:db:bb:
0c:9a:14:42:17:89:83:e4:e2:a5:ee:26:96:1e:8c:
d2:9a:89:c2:9a:d2:a9:b4:70:d3:ca:d7:fa:f6:2a:
a4:33:23:2a:1c:68:cb:dd:3f:51:f9:40:85:04:90:
0e:cb:00:3c:71:4c:96:ed:63:2d:72:be:01:8d:81:
d8:e8:d2:d4:f8:21:05:34:f8:4f:e5:41:40:73:92:
d6:f8:87:2a:cd:c8:b7:ab:e4:ed:03:12:61:bd:46:
79:7d:4a:dc:5d:ab:bd:2c:9a:1b:b8:45:94:ac:29:
00:63:a5:a8:4e:f0:97:86:64:93:ae:05:31:81:00:
74:05:51:2c:54:dd:93:f7:fe:c5:f3:c0:a4:b3:c1:
01:4b:bb:f0:21:75:61:df:5e:d8:18:1b:ca:30:34:
a0:6a:1d:42:ee:10:39:d0:b9:ab:57:b2:15:2a:c0:
aa:99:a3:69:e4:0c:0c:56:96:69:e5:ab:67:70:3c:
50:75:ed:5e:63:d3:f7:e2:13:46:48:23:99:f8:dd:
a1:8e:6a:15:33:de:8c:1f:52:9e:87:48:fe:db:7d:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:18:1A:9E:B9:91:4B:C0:EF:8D:4A:1B:DB:1B:14:57:B9:43:93
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/0Y0YGp65kUvA741KG9sbFFe5Q5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2500::/40
Signature Algorithm: sha256WithRSAEncryption
39:b4:f5:50:fc:a5:28:82:60:04:80:a7:fc:c3:54:9f:d3:5e:
43:6d:ff:1a:62:29:82:ce:49:41:1c:bb:c4:49:3b:a0:af:01:
ff:1b:32:f7:52:ae:68:96:59:b8:f3:07:a6:a7:0b:c5:f2:c4:
f8:dd:86:2e:42:f7:06:2e:5b:8a:11:11:c5:fe:08:b4:1f:ad:
29:92:5f:0a:cb:6d:9c:46:fd:54:9d:91:db:21:d4:03:d2:6b:
93:f8:ff:08:c8:8d:98:06:4a:c2:ec:86:67:18:3b:4b:c4:93:
28:81:4e:11:00:28:56:40:81:b1:7b:58:d2:8a:d7:2c:3c:49:
5c:76:37:22:92:fe:ad:16:14:00:dc:b0:b2:5a:a9:55:98:bf:
28:64:5f:47:a8:4b:3e:d9:62:77:dc:f1:65:6b:cf:0f:57:35:
f7:2b:e6:44:4b:f5:28:d8:1a:4d:61:1e:f1:8e:ec:bd:9c:14:
8f:6b:95:af:31:a9:19:a3:b9:09:bc:04:7d:6f:65:54:13:f9:
54:9b:c8:d9:f6:2d:9e:af:c4:b8:b9:f8:31:13:d0:22:cb:ed:
41:3f:52:65:ea:8a:25:d6:8a:54:be:60:d8:15:f6:04:59:b7:
f7:15:6e:ed:3f:b5:43:58:aa:41:bd:93:78:e8:44:e9:e1:21:
60:b8:85:c5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlIeRumFmDYe+SIEoMt3cCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjUwMTAyMDM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMThkMTgxYTllYjk5MTRiYzBlZjhkNGExYmRiMWIxNDU3Yjk0MzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxzY0jqlTeUcbctGKl7oKUBa9XZu
7O6cWOhw6DM1hM0VRd5H/+CIcPEi27sMmhRCF4mD5OKl7iaWHozSmonCmtKptHDT
ytf69iqkMyMqHGjL3T9R+UCFBJAOywA8cUyW7WMtcr4BjYHY6NLU+CEFNPhP5UFA
c5LW+Icqzci3q+TtAxJhvUZ5fUrcXau9LJobuEWUrCkAY6WoTvCXhmSTrgUxgQB0
BVEsVN2T9/7F88Cks8EBS7vwIXVh317YGBvKMDSgah1C7hA50LmrV7IVKsCqmaNp
5AwMVpZp5atncDxQde1eY9P34hNGSCOZ+N2hjmoVM96MH1Keh0j+233wYQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNGNGBqeuZFLwO+NShvbGxRXuUOTMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvMFkwWUdwNjVrVXZBNzQxS0c5c2JGRmU1UTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgCUw
DQYJKoZIhvcNAQELBQADggEBADm09VD8pSiCYASAp/zDVJ/TXkNt/xpiKYLOSUEc
u8RJO6CvAf8bMvdSrmiWWbjzB6anC8XyxPjdhi5C9wYuW4oREcX+CLQfrSmSXwrL
bZxG/VSdkdsh1APSa5P4/wjIjZgGSsLshmcYO0vEkyiBThEAKFZAgbF7WNKK1yw8
SVx2NyKS/q0WFADcsLJaqVWYvyhkX0eoSz7ZYnfc8WVrzw9XNfcr5kRL9SjYGk1h
HvGO7L2cFI9rla8xqRmjuQm8BH1vZVQT+VSbyNn2LZ6vxLi5+DET0CLL7UE/UmXq
iiXWilS+YNgV9gRZt/cVbu0/tUNYqkG9k3joROnhIWC4hcU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:37 2025 by rpki-client