Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/947yIxqXJUpydUglAOY3i87ztc4.roa
File: 947yIxqXJUpydUglAOY3i87ztc4.roa (raw, json)
Hash identifier: KCh8IsQ1xCrmzU5PcgtnlF+JLT6d+1Kl/ED4DnmxjN0=
Subject key identifier: F7:8E:F2:23:1A:97:25:4A:72:75:48:25:00:E6:37:8B:CE:F3:B5:CE
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 018CC56E5ECD9DB16AC1D8B5C0DDC063B90F
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/947yIxqXJUpydUglAOY3i87ztc4.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51801
IP address blocks: 2a13:4880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5e:cd:9d:b1:6a:c1:d8:b5:c0:dd:c0:63:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f78ef2231a97254a7275482500e6378bcef3b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:0b:9d:dd:4c:57:fd:b3:ef:2d:96:b0:60:
c7:cc:b4:71:33:d4:1a:f6:e5:b4:b2:7c:76:e8:76:
3f:b0:90:a5:c0:82:33:11:ca:e8:62:45:21:ab:6a:
44:8b:0b:11:f6:e1:71:eb:c0:5e:e9:3c:b8:09:73:
5d:fa:86:58:0e:80:b4:81:9b:25:1c:93:19:bd:2d:
bc:b7:9e:74:ab:dc:27:74:7f:41:81:c5:a6:b4:4a:
66:86:d5:69:37:df:d4:3b:a5:13:21:96:d3:ab:09:
71:35:8e:3d:26:6f:35:a2:e0:92:dd:3a:75:b5:30:
55:c6:8a:3a:63:3d:17:e0:e5:6d:77:54:ca:63:da:
2a:c3:22:ea:78:75:fa:06:cf:7d:8a:93:f4:02:cf:
c0:b7:40:c2:50:46:bd:fc:ea:61:25:77:3d:dc:3c:
d3:37:64:1a:4b:91:a4:3f:db:cd:de:e0:3e:ab:dd:
09:5c:28:d0:ed:ea:22:2f:cd:76:46:97:62:44:15:
7f:8f:4b:e6:67:e0:9c:df:ac:30:9b:e2:21:4c:b3:
81:0f:09:bb:67:18:ad:83:b9:50:bd:05:d1:83:3d:
4d:30:6e:e6:69:db:c2:e2:6b:0a:36:3a:4d:b9:23:
55:67:28:a9:cb:ef:c7:8d:cf:aa:c3:d1:1e:93:c0:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:F2:23:1A:97:25:4A:72:75:48:25:00:E6:37:8B:CE:F3:B5:CE
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/947yIxqXJUpydUglAOY3i87ztc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4880::/29
Signature Algorithm: sha256WithRSAEncryption
44:0e:2b:89:1e:e7:c3:2a:f6:f4:e2:ed:04:64:cc:48:63:74:
7b:2c:3b:b9:33:85:ed:c8:13:75:1a:e4:90:4b:5d:04:19:b6:
08:c5:6a:f2:d5:ad:74:a4:7b:78:5a:e1:70:7f:c4:b0:d1:8a:
23:70:b6:7a:5e:08:86:d4:e1:ff:a5:ca:5c:44:d1:f3:0b:57:
92:c4:a5:58:ec:66:7d:f7:c4:d7:af:4a:78:57:01:ef:54:da:
e0:0e:82:97:e4:69:58:0a:47:b1:e9:41:ae:ea:96:52:81:4d:
81:08:3a:44:84:0a:87:1e:f9:2e:b6:66:bd:ca:bb:fc:e4:f0:
44:98:61:a6:b4:bd:41:16:61:be:40:64:99:01:a2:5d:c4:e2:
98:ce:b7:46:8c:01:08:36:90:7b:a6:34:ed:2e:00:cf:ec:4c:
f1:ce:5c:4a:3f:3c:4c:05:3e:0b:33:d5:b5:3d:7b:bc:c4:d7:
38:7b:c3:40:3e:4d:3b:11:ee:ae:17:35:43:dd:08:1e:f6:c8:
e3:21:af:01:81:5e:8c:4d:6b:d9:11:3b:33:da:f7:c9:96:7e:
bd:f4:c1:d5:c4:8e:d2:b8:56:6c:53:8f:2f:99:d4:e8:16:d5:
1c:aa:c1:c7:07:5f:72:8a:ae:d8:6c:5b:31:a0:62:bb:3d:de:
8f:d9:5a:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFbl7NnbFqwdi1wN3AY7kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk
OGM2ZTMwHhcNMjQwMTAxMTQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhlZjIyMzFhOTcyNTRhNzI3NTQ4MjUwMGU2Mzc4YmNlZjNiNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqsLnd1MV/2z7y2WsGDHzLRxM9Qa
9uW0snx26HY/sJClwIIzEcroYkUhq2pEiwsR9uFx68Be6Ty4CXNd+oZYDoC0gZsl
HJMZvS28t550q9wndH9BgcWmtEpmhtVpN9/UO6UTIZbTqwlxNY49Jm81ouCS3Tp1
tTBVxoo6Yz0X4OVtd1TKY9oqwyLqeHX6Bs99ipP0As/At0DCUEa9/OphJXc93DzT
N2QaS5GkP9vN3uA+q90JXCjQ7eoiL812RpdiRBV/j0vmZ+Cc36wwm+IhTLOBDwm7
Zxitg7lQvQXRgz1NMG7madvC4msKNjpNuSNVZyipy+/Hjc+qw9Eek8DO1QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPeO8iMalyVKcnVIJQDmN4vO87XOMB8GA1UdIwQY
MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct
NmIwZWY5MTA4Njg4LzEvOTQ3eUl4cVhKVXB5ZFVnbEFPWTNpODd6dGM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4
LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNIgDAN
BgkqhkiG9w0BAQsFAAOCAQEARA4riR7nwyr29OLtBGTMSGN0eyw7uTOF7cgTdRrk
kEtdBBm2CMVq8tWtdKR7eFrhcH/EsNGKI3C2el4IhtTh/6XKXETR8wtXksSlWOxm
fffE169KeFcB71Ta4A6Cl+RpWApHselBruqWUoFNgQg6RIQKhx75LrZmvcq7/OTw
RJhhprS9QRZhvkBkmQGiXcTimM63RowBCDaQe6Y07S4Az+xM8c5cSj88TAU+CzPV
tT17vMTXOHvDQD5NOxHurhc1Q90IHvbI4yGvAYFejE1r2RE7M9r3yZZ+vfTB1cSO
0rhWbFOPL5nU6BbVHKrBxwdfcoqu2GxbMaBiuz3ej9laaA==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:54 2025 by rpki-client