Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/9yqh0z8nNxiViPWtsj5SvdJrPQ0.roa
File: 9yqh0z8nNxiViPWtsj5SvdJrPQ0.roa (raw, json)
Hash identifier: Rlb2gUMO2yyn3X7A6yQF4iksbULObDO7BawnMWCAPoo=
Subject key identifier: F7:2A:A1:D3:3F:27:37:18:95:88:F5:AD:B2:3E:52:BD:D2:6B:3D:0D
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019425220658413AFB849E8E9E268FDB7104
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/9yqh0z8nNxiViPWtsj5SvdJrPQ0.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200291
IP address blocks: 2a00:fe00:6000::/36 maxlen: 36
2a00:fe00:6000::/38 maxlen: 38
2a00:fe00:6800::/38 maxlen: 38
Validation: Failed, certificate revoked on Wed 29 Jan 2025 13:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:06:58:41:3a:fb:84:9e:8e:9e:26:8f:db:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f72aa1d33f2737189588f5adb23e52bdd26b3d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:2b:92:41:65:c2:e6:d3:06:d3:22:69:3b:
45:b5:4a:f0:af:46:4c:6b:d5:96:b6:db:f8:d9:52:
2e:32:29:e0:37:e0:20:58:c3:53:b8:08:f2:b4:79:
49:5c:99:39:d3:a8:6a:cb:8d:78:53:22:02:0a:86:
87:44:30:2e:2d:32:3e:ff:23:80:51:03:55:d4:9e:
9a:3d:9c:cb:f2:97:01:b7:ab:3d:3e:64:5b:13:4f:
b8:80:55:90:f1:2d:66:2a:5d:10:99:6e:55:29:12:
6c:47:b8:4e:ef:ad:9a:08:72:2e:1d:87:de:92:02:
78:25:e9:28:23:44:0f:54:0f:8f:6a:21:ac:01:8b:
7d:bd:30:f1:49:83:83:84:7c:5d:dc:d1:82:7c:57:
c5:8c:80:2d:7b:c9:92:69:2c:90:8b:3f:ea:0d:2c:
ee:be:98:3d:08:8a:dc:8b:a0:71:b6:3b:6e:dc:32:
35:20:aa:a8:c6:e6:9e:43:59:55:ce:14:5a:cf:59:
38:f4:57:57:1b:74:3a:3d:e7:77:29:fd:8f:fb:53:
f8:ea:3e:a8:71:3f:31:14:bc:5b:b6:8a:b2:ea:40:
2e:e7:f2:d2:a5:e1:d0:01:e7:e8:55:a5:e5:48:d6:
69:bd:11:4c:b8:4a:15:8f:d6:55:c9:f2:0a:48:6a:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:A1:D3:3F:27:37:18:95:88:F5:AD:B2:3E:52:BD:D2:6B:3D:0D
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/9yqh0z8nNxiViPWtsj5SvdJrPQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fe00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:9b:4b:24:e2:0d:08:ce:b0:3b:38:c5:de:c6:15:fa:59:69:
bd:7d:83:92:1c:78:d2:cc:63:b6:18:e6:68:00:fe:9c:18:bf:
a0:9e:33:35:62:77:ea:11:bb:fe:ad:c9:c8:1e:9b:bf:79:e0:
65:01:24:f4:4b:a3:0c:ce:0d:1b:3c:fa:04:b0:7e:87:d7:63:
1f:de:4d:4c:bc:db:57:c3:c6:88:e2:76:a0:3b:c7:f9:21:bd:
01:1f:dc:a6:6f:72:b7:71:e1:f8:54:a6:89:f8:ef:5c:f9:13:
8c:02:53:54:6d:d6:45:7c:9e:16:ad:b9:50:62:56:75:95:53:
53:56:f5:a2:52:f1:ac:f2:71:35:95:42:0a:85:61:d2:2b:d9:
61:88:4c:fe:39:ef:d6:76:3d:ad:bf:fd:8a:86:ed:52:15:23:
50:46:12:0a:3f:d4:2b:16:6d:b0:e5:94:df:cc:5e:66:24:f8:
6b:19:d2:b9:98:31:28:8e:3e:f3:dc:02:45:52:fe:21:b8:9a:
7e:2b:ea:b9:0f:9c:9b:8b:39:37:5c:98:46:52:6c:ee:3c:05:
5e:cc:7e:f7:a4:a1:af:83:58:18:7d:15:ee:e6:41:29:17:d6:
b7:01:ff:ee:fd:d0:82:85:fa:0e:aa:41:a0:13:3c:4e:c1:98:
f7:06:f5:e4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlIgZYQTr7hJ6OniaP23EEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjUwMTAyMDM0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzJhYTFkMzNmMjczNzE4OTU4OGY1YWRiMjNlNTJiZGQyNmIzZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t4rkkFlwubTBtMiaTtFtUrwr0ZM
a9WWttv42VIuMingN+AgWMNTuAjytHlJXJk506hqy414UyICCoaHRDAuLTI+/yOA
UQNV1J6aPZzL8pcBt6s9PmRbE0+4gFWQ8S1mKl0QmW5VKRJsR7hO762aCHIuHYfe
kgJ4JekoI0QPVA+PaiGsAYt9vTDxSYODhHxd3NGCfFfFjIAte8mSaSyQiz/qDSzu
vpg9CIrci6Bxtjtu3DI1IKqoxuaeQ1lVzhRaz1k49FdXG3Q6Ped3Kf2P+1P46j6o
cT8xFLxbtoqy6kAu5/LSpeHQAefoVaXlSNZpvRFMuEoVj9ZVyfIKSGrSdQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPcqodM/JzcYlYj1rbI+Ur3Saz0NMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvOXlxaDB6OG5OeGlWaVBXdHNqNVN2ZEpyUFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgD+AGAw
DQYJKoZIhvcNAQELBQADggEBAJqbSyTiDQjOsDs4xd7GFfpZab19g5IceNLMY7YY
5mgA/pwYv6CeMzVid+oRu/6tycgem7954GUBJPRLowzODRs8+gSwfofXYx/eTUy8
21fDxojidqA7x/khvQEf3KZvcrdx4fhUpon471z5E4wCU1Rt1kV8nhatuVBiVnWV
U1NW9aJS8azycTWVQgqFYdIr2WGITP4579Z2Pa2//YqG7VIVI1BGEgo/1CsWbbDl
lN/MXmYk+GsZ0rmYMSiOPvPcAkVS/iG4mn4r6rkPnJuLOTdcmEZSbO48BV7Mfvek
oa+DWBh9Fe7mQSkX1rcB/+790IKF+g6qQaATPE7BmPcG9eQ=
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:35:42 2025 by rpki-client