Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uJfZeIlpw8tS6YlRglFa7aabbmU.roa
File: uJfZeIlpw8tS6YlRglFa7aabbmU.roa (raw, json)
Hash identifier: cA+n/Xgjot2cZBnMmE+v+aCV1I6vSzFmWxnxJpwgswA=
Subject key identifier: B8:97:D9:78:89:69:C3:CB:52:E9:89:51:82:51:5A:ED:A6:9B:6E:65
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0193B66AF4EAF4C28B76C0305E7F3D389504
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uJfZeIlpw8tS6YlRglFa7aabbmU.roa
Signing time: Wed 11 Dec 2024 15:51:22 +0000
ROA not before: Wed 11 Dec 2024 15:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215599
IP address blocks: 2a0c:b641:b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:6a:f4:ea:f4:c2:8b:76:c0:30:5e:7f:3d:38:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 11 15:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b897d9788969c3cb52e9895182515aeda69b6e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:19:5c:ef:d8:3b:50:01:8b:a6:c4:fc:42:19:
99:1c:4f:9c:c2:f2:b4:28:6f:c8:1f:a9:ad:54:be:
b7:35:43:df:ca:78:68:17:f1:61:b4:4f:91:39:e3:
d5:8c:e4:52:a5:d2:4b:ae:c9:2b:df:d0:c2:23:3f:
1b:46:f2:ac:a3:8b:4b:3a:1e:87:ab:53:81:5e:18:
93:be:0f:07:27:ee:07:42:40:08:62:f9:a2:5d:bc:
01:d4:a0:79:57:21:f2:c8:47:fb:8e:66:d5:3f:1b:
74:54:c0:b1:74:8f:60:e6:b7:61:a7:a1:de:08:08:
7b:42:e2:e8:e7:9c:1d:a9:09:a3:83:bc:99:c0:c7:
32:01:7b:54:15:fc:45:cb:5d:8a:5e:13:5a:c2:81:
75:74:e5:c9:51:8a:63:c1:7d:e4:eb:08:c3:eb:c8:
64:c5:94:b9:5f:2e:2e:39:cf:1a:c2:ed:22:fd:80:
e7:23:09:f8:84:2b:d2:1f:57:c7:2f:b7:88:25:e7:
1e:73:5f:24:8a:37:b8:33:56:38:10:7d:92:f7:44:
04:ff:6e:fb:7c:cf:00:83:dc:48:d0:54:44:22:ec:
a9:1a:75:94:1b:5f:08:4d:73:69:9e:1a:28:1f:34:
b0:93:d4:c5:a5:67:84:74:2b:26:ae:20:a3:f3:64:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:D9:78:89:69:C3:CB:52:E9:89:51:82:51:5A:ED:A6:9B:6E:65
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/uJfZeIlpw8tS6YlRglFa7aabbmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b0::/44
Signature Algorithm: sha256WithRSAEncryption
2f:2b:0a:0a:47:66:dd:01:ad:c9:7f:fa:e7:97:cb:72:62:46:
35:5a:c2:14:d1:a8:80:3e:b6:bb:0d:21:13:c7:d6:b6:45:50:
70:72:ca:da:1a:56:1e:73:c2:47:06:03:94:c2:b7:2d:19:15:
be:e4:bd:9f:9d:33:1f:53:35:62:a0:3b:57:da:13:ca:d3:30:
cb:38:69:bb:90:56:b2:70:ae:94:ee:70:bf:94:1e:c0:0b:86:
95:99:09:b2:f4:34:5e:7f:52:85:ef:52:65:1e:9c:df:b4:9b:
45:e6:4d:b7:c1:83:ed:a9:98:05:a8:b4:fb:7f:0b:13:40:56:
d1:67:bf:f4:0e:fa:63:af:b4:b4:ca:8a:74:22:e0:2e:a9:09:
2a:ea:aa:f1:cc:e3:77:69:7e:b5:55:c4:56:7a:c7:03:6c:4a:
94:7f:3e:9a:a7:e6:d8:17:e8:9d:3e:4f:d4:33:70:11:f6:53:
57:1c:41:e1:3f:20:0d:ec:13:f8:3d:78:b1:d5:a4:9a:11:87:
c4:e6:2a:7c:98:e8:18:2a:68:50:88:85:b3:51:20:9a:0d:f8:
4a:d1:da:00:2d:2c:78:7b:4f:0b:68:a4:ed:40:d5:ef:9e:82:
37:ff:85:f3:e2:7d:55:5e:6f:80:ea:9c:83:1c:71:d9:12:d7:
90:79:43:b2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZO2avTq9MKLdsAwXn89OJUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQxMjExMTU1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODk3ZDk3ODg5NjljM2NiNTJlOTg5NTE4MjUxNWFlZGE2OWI2ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Blc79g7UAGLpsT8QhmZHE+cwvK0
KG/IH6mtVL63NUPfynhoF/FhtE+ROePVjORSpdJLrskr39DCIz8bRvKso4tLOh6H
q1OBXhiTvg8HJ+4HQkAIYvmiXbwB1KB5VyHyyEf7jmbVPxt0VMCxdI9g5rdhp6He
CAh7QuLo55wdqQmjg7yZwMcyAXtUFfxFy12KXhNawoF1dOXJUYpjwX3k6wjD68hk
xZS5Xy4uOc8awu0i/YDnIwn4hCvSH1fHL7eIJecec18kije4M1Y4EH2S90QE/277
fM8Ag9xI0FREIuypGnWUG18ITXNpnhooHzSwk9TFpWeEdCsmriCj82T/8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLiX2XiJacPLUumJUYJRWu2mm25lMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdUpmWmVJbHB3OHRTNllsUmdsRmE3YWFiYm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQCw
MA0GCSqGSIb3DQEBCwUAA4IBAQAvKwoKR2bdAa3Jf/rnl8tyYkY1WsIU0aiAPra7
DSETx9a2RVBwcsraGlYec8JHBgOUwrctGRW+5L2fnTMfUzVioDtX2hPK0zDLOGm7
kFaycK6U7nC/lB7AC4aVmQmy9DRef1KF71JlHpzftJtF5k23wYPtqZgFqLT7fwsT
QFbRZ7/0Dvpjr7S0yop0IuAuqQkq6qrxzON3aX61VcRWescDbEqUfz6ap+bYF+id
Pk/UM3AR9lNXHEHhPyAN7BP4PXix1aSaEYfE5ip8mOgYKmhQiIWzUSCaDfhK0doA
LSx4e08LaKTtQNXvnoI3/4Xz4n1VXm+A6pyDHHHZEteQeUOy
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:59 2025 by rpki-client