Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ASd7Lam09_s1vuW-EAMmhJdRrR0.roa
File: ASd7Lam09_s1vuW-EAMmhJdRrR0.roa (raw, json)
Hash identifier: dH6qKptkXYbMDQvD67qCq/0h/wbQ+ieKWbKy85gBjHo=
Subject key identifier: 01:27:7B:2D:A9:B4:F7:FB:35:BE:E5:BE:10:03:26:84:97:51:AD:1D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019201FC0F11079B293B2ED94B9F45122CE8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ASd7Lam09_s1vuW-EAMmhJdRrR0.roa
Signing time: Tue 17 Sep 2024 21:55:49 +0000
ROA not before: Tue 17 Sep 2024 21:55:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 2a0c:b641:ba0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 15:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:01:fc:0f:11:07:9b:29:3b:2e:d9:4b:9f:45:12:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Sep 17 21:55:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01277b2da9b4f7fb35bee5be100326849751ad1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:6c:5e:de:99:44:07:c3:7b:8a:1c:56:aa:
37:4d:82:b8:43:74:7a:e9:90:71:15:89:66:a4:f6:
fd:d1:89:b5:99:67:68:46:66:70:8c:8c:b1:c0:88:
e4:a9:58:be:bb:0e:55:44:09:bd:bc:6a:0c:44:31:
38:4e:a9:3f:cd:e3:9e:38:ce:76:98:cf:06:5a:51:
37:13:f3:6d:39:48:86:61:13:78:3c:c0:17:6d:01:
4c:c3:e3:e7:f8:d6:ff:8b:7e:5b:74:5d:c2:fb:24:
51:a7:db:f0:ba:8a:ab:6b:32:c5:f1:c5:c3:77:2e:
7b:0f:52:3d:28:d8:58:7b:00:fe:62:89:18:49:0d:
03:0e:4c:40:22:18:9b:b3:0e:c3:48:79:c7:8f:e2:
5c:ca:86:f3:5a:81:91:25:e0:f0:46:36:8c:8d:70:
94:3e:4e:da:3b:0d:3a:90:00:a6:33:f7:f0:1e:51:
01:f6:cd:f7:db:65:90:fc:c9:5d:af:ac:88:63:d6:
1a:1c:6b:81:fa:f6:00:b2:13:6f:ff:fa:ae:44:0c:
6c:71:a1:d4:c4:c8:38:f7:40:f8:3b:d2:45:f1:9c:
38:c7:55:54:8b:60:4d:76:89:14:72:01:d9:67:1f:
3c:84:d5:8c:36:f2:63:38:42:a6:99:4b:d3:d9:8e:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:7B:2D:A9:B4:F7:FB:35:BE:E5:BE:10:03:26:84:97:51:AD:1D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ASd7Lam09_s1vuW-EAMmhJdRrR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ba0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:2a:f6:b1:dd:dd:f9:fd:c4:d4:f7:47:08:e5:4c:7f:41:f0:
06:73:8d:d0:89:51:02:59:7e:62:b8:ca:ce:9d:24:4a:cf:d9:
7f:b6:48:ab:cd:80:dc:06:52:67:dc:a9:90:85:8b:19:fc:d3:
bd:94:d3:e6:28:6c:a8:ac:8c:39:64:0b:81:bf:b5:fb:64:34:
b8:b4:25:7a:10:6c:16:98:84:78:c6:eb:89:9f:b7:e0:8e:be:
e9:ed:f8:a3:5d:ce:b0:4b:49:64:7e:99:41:a6:ab:09:83:0e:
47:ae:5a:ca:c0:1a:09:d9:ec:10:bb:14:b8:2b:d4:3d:f4:45:
66:a1:06:82:02:f6:4d:d6:01:d5:99:2a:8a:02:1c:ea:3a:80:
f4:ca:a9:f6:c3:de:2b:be:aa:03:35:a6:ce:8f:37:ea:d3:ec:
66:29:05:ed:44:fd:44:bb:66:57:04:9a:e0:6a:04:c6:3a:e5:
f3:5a:f3:d0:d8:26:95:18:5e:34:5c:f9:f0:bd:af:9e:e8:05:
dc:79:7a:ce:ee:26:fe:fb:4d:ee:6a:14:6d:5d:a6:5e:d2:57:
16:eb:6a:0d:37:5d:c3:cf:75:0a:f0:7e:c7:c5:ab:61:88:29:
b2:69:0b:05:8e:8a:ce:da:95:ef:9e:84:dd:fe:a2:16:86:f2:
f3:92:d7:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZIB/A8RB5spOy7ZS59FEizoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwOTE3MjE1NTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI3N2IyZGE5YjRmN2ZiMzViZWU1YmUxMDAzMjY4NDk3NTFhZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts5sXt6ZRAfDe4ocVqo3TYK4Q3R6
6ZBxFYlmpPb90Ym1mWdoRmZwjIyxwIjkqVi+uw5VRAm9vGoMRDE4Tqk/zeOeOM52
mM8GWlE3E/NtOUiGYRN4PMAXbQFMw+Pn+Nb/i35bdF3C+yRRp9vwuoqrazLF8cXD
dy57D1I9KNhYewD+YokYSQ0DDkxAIhibsw7DSHnHj+JcyobzWoGRJeDwRjaMjXCU
Pk7aOw06kACmM/fwHlEB9s3322WQ/Mldr6yIY9YaHGuB+vYAshNv//quRAxscaHU
xMg490D4O9JF8Zw4x1VUi2BNdokUcgHZZx88hNWMNvJjOEKmmUvT2Y7OiQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAEney2ptPf7Nb7lvhADJoSXUa0dMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvQVNkN0xhbTA5X3MxdnVXLUVBTW1oSmRSclIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQug
MA0GCSqGSIb3DQEBCwUAA4IBAQBLKvax3d35/cTU90cI5Ux/QfAGc43QiVECWX5i
uMrOnSRKz9l/tkirzYDcBlJn3KmQhYsZ/NO9lNPmKGyorIw5ZAuBv7X7ZDS4tCV6
EGwWmIR4xuuJn7fgjr7p7fijXc6wS0lkfplBpqsJgw5HrlrKwBoJ2ewQuxS4K9Q9
9EVmoQaCAvZN1gHVmSqKAhzqOoD0yqn2w94rvqoDNabOjzfq0+xmKQXtRP1Eu2ZX
BJrgagTGOuXzWvPQ2CaVGF40XPnwva+e6AXceXrO7ib++03uahRtXaZe0lcW62oN
N13Dz3UK8H7HxathiCmyaQsFjorO2pXvnoTd/qIWhvLzktd1
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:44 2025 by rpki-client