Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9wIefKjUBHa5F8Nik5rwa1XZALg.roa
File: 9wIefKjUBHa5F8Nik5rwa1XZALg.roa (raw, json)
Hash identifier: 3RckdfekQo0iBYOaNIb3N4H/kwftq2kHvfpCZH6CyZQ=
Subject key identifier: F7:02:1E:7C:A8:D4:04:76:B9:17:C3:62:93:9A:F0:6B:55:D9:00:B8
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0192709C6ABE271449C9C854CB02E008BA9E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9wIefKjUBHa5F8Nik5rwa1XZALg.roa
Signing time: Wed 09 Oct 2024 09:29:12 +0000
ROA not before: Wed 09 Oct 2024 09:29:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a09:ef01::/32 maxlen: 32
2a0d:afc2::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Oct 2024 20:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:9c:6a:be:27:14:49:c9:c8:54:cb:02:e0:08:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Oct 9 09:29:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7021e7ca8d40476b917c362939af06b55d900b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:a4:42:ef:6e:0c:e5:f5:27:67:4b:69:2e:
d0:83:db:43:82:46:13:ea:34:a1:8d:df:e1:62:33:
c3:e0:ee:0f:ee:ce:7b:f1:94:c3:ba:ba:99:f3:d3:
e8:90:39:81:aa:8c:07:59:c2:e9:06:b2:ce:2f:8c:
ed:a4:6e:c1:d1:9d:81:2f:2d:72:9b:4a:41:95:30:
19:91:8c:e4:b0:38:ee:df:d8:97:e7:2b:8e:e1:36:
41:e6:5a:4b:96:de:06:0c:35:6c:25:cd:1a:61:2d:
56:4f:93:cc:66:a0:92:bc:06:11:6c:07:dd:62:50:
4a:4a:8e:d1:69:13:ba:8b:34:e3:31:d8:dd:49:92:
61:d2:e5:5b:95:88:38:35:d3:77:6b:97:a8:2b:d0:
dd:cf:20:08:c3:4d:fd:cc:21:b1:a5:ed:56:ed:0b:
32:ba:ed:34:a2:a9:e8:c6:5a:d8:e4:d3:2a:5e:9c:
9f:34:b1:d7:09:1e:a2:9b:ad:22:c3:f1:8e:d3:ac:
e1:bb:00:0f:b2:3a:29:2d:91:ba:6e:47:d9:f1:c7:
98:4b:df:2e:3d:68:f5:ce:01:97:23:70:5a:8b:0f:
e8:e8:56:de:90:58:dd:95:ca:05:67:c1:89:4b:08:
77:ec:13:22:72:d4:83:de:87:13:06:e9:a1:67:c3:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:1E:7C:A8:D4:04:76:B9:17:C3:62:93:9A:F0:6B:55:D9:00:B8
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/9wIefKjUBHa5F8Nik5rwa1XZALg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ef01::/32
2a0d:afc2::/32
Signature Algorithm: sha256WithRSAEncryption
98:d2:c7:7c:66:ab:d1:d9:e3:b7:c5:e0:e3:3b:f4:8d:e2:62:
c0:2e:1d:b4:5d:ae:c5:b3:1a:e2:aa:74:6e:13:45:d4:56:13:
ad:06:61:dc:64:24:40:14:4a:24:8c:ef:bb:ce:f5:57:de:4c:
f9:39:4b:43:7c:b8:13:6d:b9:85:a8:72:a7:c3:8c:4d:b5:bb:
f8:13:fe:40:b6:23:45:8e:55:1d:74:54:ac:eb:05:ef:fb:e1:
c8:42:17:c8:b2:21:ba:91:b8:8c:3d:1e:d7:ea:e9:99:d2:1a:
22:ec:a4:ca:63:2b:c0:98:31:b6:a3:46:02:2d:f8:77:96:28:
3a:66:98:64:f3:a2:ef:49:ac:b1:47:8c:fe:0d:b4:6e:e6:1c:
f9:92:61:d2:f4:98:ae:f3:34:22:e1:90:48:89:b0:1d:d9:31:
0e:e1:0c:01:1d:83:d6:8f:1b:ce:b4:8d:5a:2a:72:e4:a4:6e:
bd:c8:2b:8f:89:44:62:09:19:88:d2:2b:11:39:73:76:77:b9:
14:93:31:d6:f4:fb:59:7d:b1:db:99:ec:c9:f0:02:93:6b:a8:
46:a0:24:b8:44:af:8f:5f:b3:f1:4c:cd:6f:87:75:2b:6f:22:
12:6e:46:81:3a:6b:eb:51:62:a4:be:ef:e5:03:54:ab:02:62:
4e:52:c3:da
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZJwnGq+JxRJychUywLgCLqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjQxMDA5MDkyOTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzAyMWU3Y2E4ZDQwNDc2YjkxN2MzNjI5MzlhZjA2YjU1ZDkwMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6kQu9uDOX1J2dLaS7Qg9tDgkYT
6jShjd/hYjPD4O4P7s578ZTDurqZ89PokDmBqowHWcLpBrLOL4ztpG7B0Z2BLy1y
m0pBlTAZkYzksDju39iX5yuO4TZB5lpLlt4GDDVsJc0aYS1WT5PMZqCSvAYRbAfd
YlBKSo7RaRO6izTjMdjdSZJh0uVblYg4NdN3a5eoK9DdzyAIw039zCGxpe1W7Qsy
uu00oqnoxlrY5NMqXpyfNLHXCR6im60iw/GO06zhuwAPsjopLZG6bkfZ8ceYS98u
PWj1zgGXI3Baiw/o6FbekFjdlcoFZ8GJSwh37BMictSD3ocTBumhZ8PMqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPcCHnyo1AR2uRfDYpOa8GtV2QC4MB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvOXdJZWZLalVCSGE1RjhOaWs1cndhMVhaQUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgnvAQMF
ACoNr8IwDQYJKoZIhvcNAQELBQADggEBAJjSx3xmq9HZ47fF4OM79I3iYsAuHbRd
rsWzGuKqdG4TRdRWE60GYdxkJEAUSiSM77vO9VfeTPk5S0N8uBNtuYWocqfDjE21
u/gT/kC2I0WOVR10VKzrBe/74chCF8iyIbqRuIw9Htfq6ZnSGiLspMpjK8CYMbaj
RgIt+HeWKDpmmGTzou9JrLFHjP4NtG7mHPmSYdL0mK7zNCLhkEiJsB3ZMQ7hDAEd
g9aPG860jVoqcuSkbr3IK4+JRGIJGYjSKxE5c3Z3uRSTMdb0+1l9sduZ7MnwApNr
qEagJLhEr49fs/FMzW+HdStvIhJuRoE6a+tRYqS+7+UDVKsCYk5Sw9o=
-----END CERTIFICATE-----
Generated at Fri Oct 11 21:51:49 2024 by rpki-client on console-ams.rpki-client.org