Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dG9hWZTb98ibHXYg_IGZxK8YdJM.roa
File: dG9hWZTb98ibHXYg_IGZxK8YdJM.roa (raw, json)
Hash identifier: McOIRF1vMm0i5V0UvCjXjS41sDXqWgjC78U7hkH+QrU=
Subject key identifier: 74:6F:61:59:94:DB:F7:C8:9B:1D:76:20:FC:81:99:C4:AF:18:74:93
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0193068728FE2A519BB30E3CC40622A8A811
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dG9hWZTb98ibHXYg_IGZxK8YdJM.roa
Signing time: Thu 07 Nov 2024 12:09:01 +0000
ROA not before: Thu 07 Nov 2024 12:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a00:fe00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Nov 2024 11:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:87:28:fe:2a:51:9b:b3:0e:3c:c4:06:22:a8:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Nov 7 12:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=746f615994dbf7c89b1d7620fc8199c4af187493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:18:a3:01:7a:68:1f:98:4f:89:14:93:09:
17:48:46:97:fd:2d:d2:4a:f6:5a:4a:d2:6b:3e:56:
aa:8c:42:4a:c1:38:73:1f:af:86:dd:e2:8e:49:f6:
95:a4:63:f3:a4:fa:ca:22:06:a7:06:1d:f4:cc:5e:
2c:f8:78:a5:47:d3:70:c0:15:59:9e:02:3b:57:5d:
14:d1:ba:17:a3:d6:07:0a:26:aa:47:38:26:98:a3:
5e:cd:10:dd:bc:78:40:04:79:3d:b4:3b:3b:a8:0b:
ca:0d:e2:6b:0c:b5:28:b9:18:1c:c2:ce:ac:d3:0f:
44:f5:0a:ba:60:87:ba:e8:c4:bd:0d:af:0f:8a:c8:
b5:f0:bc:03:4d:c2:21:67:5f:47:79:82:d4:85:c6:
78:14:5c:e2:8e:71:7a:b1:f1:98:8f:2a:d4:0d:0c:
82:78:41:d6:4b:ef:74:63:e3:37:f9:7c:5b:19:ae:
ba:07:a4:37:30:98:62:32:f2:40:36:5f:cf:2c:0b:
66:77:4b:ff:b8:70:f8:c0:d3:30:63:1a:cb:63:ba:
ab:95:5f:89:ff:3f:c5:4e:18:19:1e:32:6f:32:6a:
71:0c:7c:b7:0a:42:a1:4a:ca:c6:14:8f:4c:27:7e:
08:33:15:35:80:a3:a8:00:9b:cd:a2:cb:17:f7:82:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:61:59:94:DB:F7:C8:9B:1D:76:20:FC:81:99:C4:AF:18:74:93
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/dG9hWZTb98ibHXYg_IGZxK8YdJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
21:19:36:cc:5d:9c:8e:df:c4:9e:fe:b3:08:ff:c6:66:e1:b0:
43:3f:bc:e5:03:27:6e:e3:0b:30:e9:2d:fc:c7:7f:9f:1c:d8:
13:fb:ce:15:fb:4c:8b:61:59:d6:a9:2c:94:f7:89:77:17:ce:
25:73:32:cf:f0:19:5f:a6:05:66:7d:f1:8a:27:d7:85:9d:c2:
16:f3:3e:e6:01:ba:1c:71:1c:b9:a2:dd:d7:2b:98:f2:4d:61:
c2:4a:ac:14:f7:84:0a:93:e6:8e:f6:ad:b8:e6:38:26:eb:0d:
b7:bf:20:80:22:63:19:20:df:bf:4a:ab:6c:13:8e:12:29:60:
92:7a:93:d1:ea:98:57:df:f7:b1:95:48:56:00:aa:fa:63:34:
fb:d9:44:24:aa:1c:7b:ca:47:0c:fc:0f:ac:56:7b:5e:e4:62:
13:29:1f:1e:05:2d:e8:5c:7a:ae:79:61:59:61:5f:12:f8:1c:
6d:40:34:a3:1a:28:41:9a:39:9b:4e:c5:02:a8:1b:df:a2:d3:
f8:7e:89:1f:86:9f:9e:8f:52:8c:d3:2f:00:c4:df:dc:9c:5f:
d4:6c:34:6f:77:87:20:41:29:7c:98:29:e6:0f:69:d6:2e:5a:
c8:56:02:85:fd:66:0e:f7:6b:4b:fb:93:cb:38:a3:08:a3:d0:
54:a7:5f:61
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZMGhyj+KlGbsw48xAYiqKgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjQxMTA3MTIwOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDZmNjE1OTk0ZGJmN2M4OWIxZDc2MjBmYzgxOTljNGFmMTg3NDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQYowF6aB+YT4kUkwkXSEaX/S3S
SvZaStJrPlaqjEJKwThzH6+G3eKOSfaVpGPzpPrKIganBh30zF4s+HilR9NwwBVZ
ngI7V10U0boXo9YHCiaqRzgmmKNezRDdvHhABHk9tDs7qAvKDeJrDLUouRgcws6s
0w9E9Qq6YIe66MS9Da8Pisi18LwDTcIhZ19HeYLUhcZ4FFzijnF6sfGYjyrUDQyC
eEHWS+90Y+M3+XxbGa66B6Q3MJhiMvJANl/PLAtmd0v/uHD4wNMwYxrLY7qrlV+J
/z/FThgZHjJvMmpxDHy3CkKhSsrGFI9MJ34IMxU1gKOoAJvNossX94ITPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHRvYVmU2/fImx12IPyBmcSvGHSTMB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvZEc5aFdaVGI5OGliSFhZZ19JR1p4SzhZZEpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgD+ADAN
BgkqhkiG9w0BAQsFAAOCAQEAIRk2zF2cjt/Env6zCP/GZuGwQz+85QMnbuMLMOkt
/Md/nxzYE/vOFftMi2FZ1qkslPeJdxfOJXMyz/AZX6YFZn3xiifXhZ3CFvM+5gG6
HHEcuaLd1yuY8k1hwkqsFPeECpPmjvatuOY4JusNt78ggCJjGSDfv0qrbBOOEilg
knqT0eqYV9/3sZVIVgCq+mM0+9lEJKoce8pHDPwPrFZ7XuRiEykfHgUt6Fx6rnlh
WWFfEvgcbUA0oxooQZo5m07FAqgb36LT+H6JH4afno9SjNMvAMTf3Jxf1Gw0b3eH
IEEpfJgp5g9p1i5ayFYChf1mDvdrS/uTyzijCKPQVKdfYQ==
-----END CERTIFICATE-----
Generated at Thu Nov 14 14:16:24 2024 by rpki-client on console-fra.rpki-client.org