Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/FFMWi0C6A8axYm3EVWXAmFEgd6k.roa
File: FFMWi0C6A8axYm3EVWXAmFEgd6k.roa (raw, json)
Hash identifier: JH4ZB2jLixlhRHdAmyurkTnak4O+2oJgJ6n2MW2jnts=
Subject key identifier: 14:53:16:8B:40:BA:03:C6:B1:62:6D:C4:55:65:C0:98:51:20:77:A9
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E2E9FBB881BD975A0A70461A11B4
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/FFMWi0C6A8axYm3EVWXAmFEgd6k.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203333
IP address blocks: 2a0a:280:1b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e2:e9:fb:b8:81:bd:97:5a:0a:70:46:1a:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1453168b40ba03c6b1626dc45565c098512077a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:27:74:5f:7c:bc:df:6f:f6:a2:06:fe:dd:
69:d0:cc:14:64:54:0b:4e:66:9c:f6:cb:1e:61:2a:
75:7a:3a:21:d2:e4:7f:e7:20:d3:60:95:9a:ec:35:
f5:5a:ab:b9:7b:d5:de:bc:7d:5b:7a:61:bb:09:73:
80:2e:ef:20:73:80:04:89:96:93:0c:61:b2:69:db:
01:5b:35:1f:e6:1e:8a:01:ca:72:a7:df:a4:5d:2f:
01:c4:a0:f3:a7:ae:7d:c6:d6:ed:8a:87:a4:fc:f1:
c7:66:3d:6b:38:86:2c:2d:f2:a0:bd:72:94:23:47:
e7:95:a3:ff:87:0e:cc:a2:e9:b8:88:e5:e7:f8:d8:
e1:1f:28:b5:71:35:2d:fd:0e:60:c5:5b:0b:67:a1:
8c:73:e5:8f:52:60:f2:74:19:62:39:62:1b:a8:b0:
a1:98:93:5b:23:d2:5f:a2:9f:59:79:ab:9b:fd:2e:
64:59:7a:0f:8c:d6:a4:82:40:62:e1:cc:3e:d9:05:
01:29:03:45:98:e6:27:4e:0b:34:d4:7d:66:bc:15:
6b:28:4e:36:77:6d:09:33:26:da:48:1d:c6:df:89:
80:a3:c1:73:cc:b9:bb:f9:90:34:ad:e8:61:45:3b:
7b:f6:44:71:6c:9b:b8:0d:94:30:3f:a2:d5:e7:ec:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:16:8B:40:BA:03:C6:B1:62:6D:C4:55:65:C0:98:51:20:77:A9
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/FFMWi0C6A8axYm3EVWXAmFEgd6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1b00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:38:2d:14:8b:dc:6b:36:94:12:d1:4f:b2:f8:20:be:f6:27:
66:4d:db:2d:fa:33:0a:57:c5:93:23:7e:9a:08:d1:a4:83:c9:
1d:36:7b:00:74:63:0d:f8:57:ab:69:91:5a:ec:11:16:14:0a:
b8:81:15:7a:eb:87:ee:cb:34:c7:36:a0:74:66:5b:99:8e:82:
f9:59:02:73:a2:e6:5f:12:b5:94:a9:b4:42:b6:3a:28:85:25:
9f:06:85:90:4c:6d:b5:fe:48:b6:b8:ef:91:71:7c:05:da:39:
47:1b:d8:52:7f:e8:cf:bd:d7:61:10:44:cf:c1:17:aa:5a:e4:
a4:64:56:36:f2:14:df:58:88:3d:9b:fb:b6:61:c0:15:51:5f:
84:33:38:56:77:d6:ce:35:80:ef:11:ed:03:83:6b:43:f8:0c:
1d:79:a7:ab:7f:f1:7a:ba:df:f7:a9:b1:b3:da:75:d9:4c:5b:
3f:7f:c4:4f:e4:d6:8c:51:51:4c:77:45:01:c7:c0:ff:76:ce:
2e:67:49:50:0e:00:4c:37:4e:7b:7f:b2:84:88:d2:cd:92:1a:
fd:3b:36:8a:b8:a5:07:4e:9c:e0:24:b8:de:cd:4b:36:f7:db:
52:df:48:2c:e9:78:35:5a:e4:c7:7a:7b:f3:eb:56:97:85:98:
18:2f:ff:46
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlIeLp+7iBvZdaCnBGGhG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjUwMTAyMDM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDUzMTY4YjQwYmEwM2M2YjE2MjZkYzQ1NTY1YzA5ODUxMjA3N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRkndF98vN9v9qIG/t1p0MwUZFQL
Tmac9sseYSp1ejoh0uR/5yDTYJWa7DX1Wqu5e9XevH1bemG7CXOALu8gc4AEiZaT
DGGyadsBWzUf5h6KAcpyp9+kXS8BxKDzp659xtbtioek/PHHZj1rOIYsLfKgvXKU
I0fnlaP/hw7Moum4iOXn+NjhHyi1cTUt/Q5gxVsLZ6GMc+WPUmDydBliOWIbqLCh
mJNbI9Jfop9Zeaub/S5kWXoPjNakgkBi4cw+2QUBKQNFmOYnTgs01H1mvBVrKE42
d20JMybaSB3G34mAo8FzzLm7+ZA0rehhRTt79kRxbJu4DZQwP6LV5+yzvwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBRTFotAugPGsWJtxFVlwJhRIHepMB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvRkZNV2kwQzZBOGF4WW0zRVZXWEFtRkVnZDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgBsw
DQYJKoZIhvcNAQELBQADggEBAD84LRSL3Gs2lBLRT7L4IL72J2ZN2y36MwpXxZMj
fpoI0aSDyR02ewB0Yw34V6tpkVrsERYUCriBFXrrh+7LNMc2oHRmW5mOgvlZAnOi
5l8StZSptEK2OiiFJZ8GhZBMbbX+SLa475FxfAXaOUcb2FJ/6M+912EQRM/BF6pa
5KRkVjbyFN9YiD2b+7ZhwBVRX4QzOFZ31s41gO8R7QODa0P4DB15p6t/8Xq63/ep
sbPaddlMWz9/xE/k1oxRUUx3RQHHwP92zi5nSVAOAEw3Tnt/soSI0s2SGv07Noq4
pQdOnOAkuN7NSzb321LfSCzpeDVa5Md6e/PrVpeFmBgv/0Y=
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:23 2025 by rpki-client