Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/l4H5ePxc8rLv-no6p5JncXQDDYs.roa
File: l4H5ePxc8rLv-no6p5JncXQDDYs.roa (raw, json)
Hash identifier: 22QQkKsus0GpKi8cONWHIXJr5+qVEfY18YkJ2bnz0B8=
Subject key identifier: 97:81:F9:78:FC:5C:F2:B2:EF:FA:7A:3A:A7:92:67:71:74:03:0D:8B
Certificate issuer: /CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Certificate serial: 019302AB7D4780614F87F123338444770450
Authority key identifier: 73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/l4H5ePxc8rLv-no6p5JncXQDDYs.roa
Signing time: Wed 06 Nov 2024 18:10:13 +0000
ROA not before: Wed 06 Nov 2024 18:10:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2001:3300::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 21:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:ab:7d:47:80:61:4f:87:f1:23:33:84:44:77:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7365ec12014f911f7205eecbc2fc818b9b35723c
Validity
Not Before: Nov 6 18:10:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9781f978fc5cf2b2effa7a3aa792677174030d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:1f:6f:2b:f2:64:5a:c0:83:6d:40:ba:91:
f7:79:b6:68:80:96:74:61:01:cd:29:43:f2:c6:56:
d2:97:6a:b9:a0:35:7a:79:cd:4f:38:1c:e9:87:80:
a6:35:3e:ae:40:eb:68:47:5f:d2:fb:88:56:c7:d3:
2f:b2:06:65:64:f9:89:16:49:26:6e:75:9a:65:56:
a1:6e:ca:25:43:e9:9b:24:48:10:a3:5b:53:75:ef:
b5:7f:07:12:8a:cc:0b:8a:ec:74:ba:59:59:4d:32:
c6:75:a1:ac:a9:76:d4:ff:a8:f8:13:41:23:ee:a6:
bb:c3:a9:2e:cb:7f:9f:65:44:86:e9:66:f3:99:26:
b7:d1:26:15:de:c2:05:92:81:a7:8f:83:fa:37:01:
5f:61:b9:8d:44:cc:20:2e:e1:d3:5e:80:96:3d:93:
2e:f7:2b:59:56:ef:ff:2b:bb:24:05:c4:6d:44:6d:
2a:21:7e:6a:6d:10:94:94:d8:e2:3f:50:6c:10:b3:
bc:91:1a:04:d7:28:25:6f:f1:3a:06:2d:d9:c7:0c:
38:b2:25:72:04:d6:38:e2:50:72:ae:e3:60:73:2d:
ae:80:97:ba:3d:6c:46:49:24:a7:7b:68:96:6a:bb:
9c:e7:c0:7a:22:c2:0a:c4:d4:70:e4:6f:f0:13:01:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:F9:78:FC:5C:F2:B2:EF:FA:7A:3A:A7:92:67:71:74:03:0D:8B
X509v3 Authority Key Identifier:
keyid:73:65:EC:12:01:4F:91:1F:72:05:EE:CB:C2:FC:81:8B:9B:35:72:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2XsEgFPkR9yBe7LwvyBi5s1cjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/l4H5ePxc8rLv-no6p5JncXQDDYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f63ac-b1e4-4dbd-9996-5a19afdb06a7/1/c2XsEgFPkR9yBe7LwvyBi5s1cjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3300::/32
Signature Algorithm: sha256WithRSAEncryption
88:ae:b4:37:96:05:c4:2c:8a:54:c6:f4:92:2c:04:db:0c:0d:
69:e8:57:d4:93:c9:ec:01:be:55:b5:21:b2:ec:57:ed:7f:a8:
da:b3:66:6d:74:7d:63:22:f4:47:cb:bc:b6:92:5e:2f:2f:ee:
cb:b5:41:77:e1:20:fd:32:7d:b2:fb:39:7d:4b:78:76:f1:cf:
bf:8b:96:8a:40:9d:bf:34:67:46:8e:4e:0c:8a:07:22:ed:43:
c6:3c:23:37:2a:ce:77:8a:46:09:c4:8b:58:73:af:d9:12:d4:
40:82:bc:84:37:b4:da:99:89:88:cf:b0:82:55:f2:b8:f2:7d:
e4:aa:71:c9:ca:5a:b6:75:f4:4b:27:2d:1e:4f:0f:08:38:b1:
96:de:76:93:36:13:19:6a:a9:47:d9:2f:3a:bf:9c:f4:7f:43:
c4:86:e1:89:ed:be:2c:5b:de:a3:5a:1a:ae:5a:80:20:e4:99:
0f:f5:5e:74:f5:2e:fa:de:1d:7e:15:f4:e4:ec:45:7c:c0:1a:
38:99:d5:eb:bd:6f:68:b7:5c:f0:28:dc:a0:cd:e0:f4:d2:75:
cf:ac:20:80:75:1b:80:f5:35:e9:85:fe:22:aa:75:10:9f:10:
a2:d9:73:12:5c:fe:f6:34:d1:81:45:a7:54:ec:78:70:8f:60:
e8:89:78:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZMCq31HgGFPh/EjM4REdwRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjVlYzEyMDE0ZjkxMWY3MjA1ZWVjYmMyZmM4MThiOWIz
NTcyM2MwHhcNMjQxMTA2MTgxMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzgxZjk3OGZjNWNmMmIyZWZmYTdhM2FhNzkyNjc3MTc0MDMwZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziAfbyvyZFrAg21AupH3ebZogJZ0
YQHNKUPyxlbSl2q5oDV6ec1POBzph4CmNT6uQOtoR1/S+4hWx9MvsgZlZPmJFkkm
bnWaZVahbsolQ+mbJEgQo1tTde+1fwcSiswLiux0ullZTTLGdaGsqXbU/6j4E0Ej
7qa7w6kuy3+fZUSG6WbzmSa30SYV3sIFkoGnj4P6NwFfYbmNRMwgLuHTXoCWPZMu
9ytZVu//K7skBcRtRG0qIX5qbRCUlNjiP1BsELO8kRoE1yglb/E6Bi3Zxww4siVy
BNY44lByruNgcy2ugJe6PWxGSSSne2iWaruc58B6IsIKxNRw5G/wEwHfbwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJeB+Xj8XPKy7/p6OqeSZ3F0Aw2LMB8GA1UdIwQY
MBaAFHNl7BIBT5EfcgXuy8L8gYubNXI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYt
NWExOWFmZGIwNmE3LzEvbDRINWVQeGM4ckx2LW5vNnA1Sm5jWFFERFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjYzYWMtYjFlNC00ZGJkLTk5OTYtNWExOWFmZGIwNmE3
LzEvYzJYc0VnRlBrUjl5QmU3THd2eUJpNXMxY2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEzADAN
BgkqhkiG9w0BAQsFAAOCAQEAiK60N5YFxCyKVMb0kiwE2wwNaehX1JPJ7AG+VbUh
suxX7X+o2rNmbXR9YyL0R8u8tpJeLy/uy7VBd+Eg/TJ9svs5fUt4dvHPv4uWikCd
vzRnRo5ODIoHIu1DxjwjNyrOd4pGCcSLWHOv2RLUQIK8hDe02pmJiM+wglXyuPJ9
5KpxycpatnX0SyctHk8PCDixlt52kzYTGWqpR9kvOr+c9H9DxIbhie2+LFveo1oa
rlqAIOSZD/VedPUu+t4dfhX05OxFfMAaOJnV671vaLdc8CjcoM3g9NJ1z6wggHUb
gPU16YX+Iqp1EJ8QotlzElz+9jTRgUWnVOx4cI9g6Il4cA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 07:26:18 2025 by rpki-client