Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/1EZTDZxBxIcvJOKJ9tpBv11Tx78.roa
File: 1EZTDZxBxIcvJOKJ9tpBv11Tx78.roa (raw, json)
Hash identifier: 5TBbcC33Z2Ibn6267nmsmyARuUJ1qG3rRgE38MfCjWI=
Subject key identifier: D4:46:53:0D:9C:41:C4:87:2F:24:E2:89:F6:DA:41:BF:5D:53:C7:BF
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B243BC97905AED5C995D7544D60221
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/1EZTDZxBxIcvJOKJ9tpBv11Tx78.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48752
IP address blocks: 2a07:2486:e00::/44 maxlen: 44
2a07:2486:e20::/44 maxlen: 44
2a07:2486:e30::/44 maxlen: 44
2a07:2486:e40::/44 maxlen: 44
2a07:2486:ec0::/44 maxlen: 44
2a07:2486:ee0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:bc:97:90:5a:ed:5c:99:5d:75:44:d6:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d446530d9c41c4872f24e289f6da41bf5d53c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:67:02:40:8e:55:4b:53:13:2a:02:5a:33:
45:3d:cf:99:b9:d7:b0:43:56:63:89:91:ff:ca:b4:
f7:17:d6:72:81:4a:32:3a:5d:ef:bd:63:7b:6b:17:
6f:db:d0:e1:b3:30:b4:75:b2:32:b3:77:96:63:e4:
7a:7a:81:22:8c:70:c0:7f:24:f7:eb:13:f0:11:e0:
27:d4:2b:ea:0b:22:88:42:e8:96:df:f8:c7:a0:9c:
9a:ea:3e:23:61:fe:3f:eb:25:28:76:2d:ce:ca:91:
e4:c0:a1:97:41:4b:4f:ca:05:87:af:cb:3f:f8:90:
1b:f8:f6:4a:81:c8:87:dd:63:5a:dc:26:14:4b:ab:
63:ff:54:d7:80:07:3d:ea:db:54:08:79:a6:99:f7:
2a:fd:57:f0:1d:77:3d:93:4e:23:6a:99:83:47:9f:
1d:97:3a:1e:ff:be:76:38:df:bf:4f:e9:45:9b:fe:
77:8e:ef:94:36:9f:cf:b4:76:43:bb:b8:b0:5e:e8:
1c:eb:ee:90:51:20:b9:7b:b1:0b:7b:33:73:f5:89:
b1:79:59:2c:58:65:08:60:20:0d:32:26:a5:dd:51:
be:24:6c:d5:39:57:b5:d8:3b:17:18:7a:a0:e5:22:
44:b9:a3:d2:47:48:39:5b:55:73:8a:d2:63:e8:bf:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:53:0D:9C:41:C4:87:2F:24:E2:89:F6:DA:41:BF:5D:53:C7:BF
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/1EZTDZxBxIcvJOKJ9tpBv11Tx78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:e00::/44
2a07:2486:e20::-2a07:2486:e4f:ffff:ffff:ffff:ffff:ffff
2a07:2486:ec0::/44
2a07:2486:ee0::/44
Signature Algorithm: sha256WithRSAEncryption
80:b4:06:c5:42:1f:5b:f9:a9:0d:15:f7:8a:97:90:62:6e:fc:
96:eb:b3:d3:e3:50:d6:e6:61:05:18:03:fb:fe:66:76:cd:8e:
a8:06:60:1e:c4:84:3c:4f:20:4e:05:a9:ad:e0:f6:b7:1b:78:
35:2c:c7:36:d6:4a:59:51:8e:da:ee:03:53:ee:41:f6:90:71:
15:71:e0:74:2b:33:2c:a1:97:e3:60:90:e3:01:17:78:ff:46:
31:23:30:e6:b5:85:fa:b2:ea:82:96:73:c1:5d:a8:7c:1a:64:
d2:0e:35:43:0e:9e:61:e6:b4:f8:18:0d:26:ef:75:5f:7d:b5:
e4:b5:c5:e9:f2:6d:08:2d:b6:c7:17:51:46:4e:5f:52:0d:5f:
a1:44:58:72:16:a2:79:36:e9:09:b2:e6:fd:a8:88:88:13:22:
fa:91:3a:c4:44:f8:3d:81:dd:e8:de:25:02:fa:05:75:4b:92:
21:6b:a8:67:6c:a2:94:bb:8a:fd:f3:e6:cf:b1:ed:41:12:21:
ba:89:8f:84:32:e1:10:25:57:23:31:05:84:bc:b7:8a:4a:51:
3d:e5:91:99:f7:99:ae:ab:1e:6e:17:0f:7e:ce:70:9d:ef:df:
df:f7:53:64:9d:42:84:a8:67:71:b1:50:7d:b0:9e:41:6e:8e:
f1:6a:b9:fd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQhskO8l5Ba7VyZXXVE1gIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzZlOGMyMTZmMDVhOWQ5ZTAzMjdmMTIyMmJmMTIxOThh
YmE1ZGEwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDQ2NTMwZDljNDFjNDg3MmYyNGUyODlmNmRhNDFiZjVkNTNjN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNnAkCOVUtTEyoCWjNFPc+Zudew
Q1ZjiZH/yrT3F9ZygUoyOl3vvWN7axdv29DhszC0dbIys3eWY+R6eoEijHDAfyT3
6xPwEeAn1CvqCyKIQuiW3/jHoJya6j4jYf4/6yUodi3OypHkwKGXQUtPygWHr8s/
+JAb+PZKgciH3WNa3CYUS6tj/1TXgAc96ttUCHmmmfcq/VfwHXc9k04japmDR58d
lzoe/752ON+/T+lFm/53ju+UNp/PtHZDu7iwXugc6+6QUSC5e7ELezNz9YmxeVks
WGUIYCANMial3VG+JGzVOVe12DsXGHqg5SJEuaPSR0g5W1VzitJj6L/t4QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFNRGUw2cQcSHLyTiifbaQb9dU8e/MB8GA1UdIwQY
MBaAFMI26MIW8FqdngMn8SIr8SGYq6XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgt
Mzg0ZmZjZTc3ZjUyLzEvMUVaVERaeEJ4SWN2Sk9LSjl0cEJ2MTFUeDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yYTQxM2UtODk3NC00ZGM3LTljZTgtMzg0ZmZjZTc3ZjUy
LzEvd2pib3doYndXcDJlQXlmeElpdnhJWmlycGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcEKgckhg4A
MBIDBwUqBySGDiADBwQqBySGDkADBwQqBySGDsADBwQqBySGDuAwDQYJKoZIhvcN
AQELBQADggEBAIC0BsVCH1v5qQ0V94qXkGJu/Jbrs9PjUNbmYQUYA/v+ZnbNjqgG
YB7EhDxPIE4Fqa3g9rcbeDUsxzbWSllRjtruA1PuQfaQcRVx4HQrMyyhl+NgkOMB
F3j/RjEjMOa1hfqy6oKWc8FdqHwaZNIONUMOnmHmtPgYDSbvdV99teS1xenybQgt
tscXUUZOX1INX6FEWHIWonk26Qmy5v2oiIgTIvqROsRE+D2B3ejeJQL6BXVLkiFr
qGdsopS7iv3z5s+x7UESIbqJj4Qy4RAlVyMxBYS8t4pKUT3lkZn3ma6rHm4XD37O
cJ3v39/3U2SdQoSoZ3GxUH2wnkFujvFquf0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:19 2025 by rpki-client