Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nwWbw61ofPHDpJRefhhPSV61ERw.roa
File: nwWbw61ofPHDpJRefhhPSV61ERw.roa (raw, json)
Hash identifier: YJ98erRLMwn+6eqJeTTO46Kq/th24iDcTZ51shOi990=
Subject key identifier: 9F:05:9B:C3:AD:68:7C:F1:C3:A4:94:5E:7E:18:4F:49:5E:B5:11:1C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D983729155301370145B40B8AF7AD5
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nwWbw61ofPHDpJRefhhPSV61ERw.roa
Signing time: Thu 02 Jan 2025 11:49:36 +0000
ROA not before: Thu 02 Jan 2025 11:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197795
IP address blocks: 2a03:5840:fa::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Jan 2025 16:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:83:72:91:55:30:13:70:14:5b:40:b8:af:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f059bc3ad687cf1c3a4945e7e184f495eb5111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:70:ca:05:56:2d:17:bc:23:57:08:fc:4a:
b6:fa:b0:9b:d0:df:46:e8:e5:13:dc:ad:59:39:6a:
98:52:8e:11:48:38:70:52:4c:71:aa:ea:80:e1:72:
4d:4e:05:45:d7:eb:d3:89:f3:f0:cd:ad:55:36:ff:
99:d4:e7:ee:c2:62:d5:a3:7d:c8:60:4e:3c:dc:30:
36:06:ad:2c:66:cf:f2:00:fa:ea:78:55:5e:fd:88:
28:a0:e5:c2:dd:6e:50:42:20:18:08:d3:55:88:5e:
70:03:51:96:62:95:86:97:ef:1d:fe:a4:53:e5:55:
04:d5:3d:f3:3b:dc:6b:67:77:d7:66:b3:8f:42:b8:
e6:31:1d:39:43:f6:51:d3:5d:24:01:87:55:43:54:
68:88:e0:85:b8:db:a6:c8:b1:98:2a:d8:1a:ab:91:
db:85:e5:a1:e2:39:44:d5:6e:b9:df:4f:f9:30:31:
7f:c1:8c:df:77:b4:50:be:bc:3a:85:6e:dc:60:30:
e4:5d:4d:6f:72:09:a4:7d:5c:a6:9e:29:9c:4d:fa:
18:a3:80:f5:26:a0:e9:7a:3a:96:9e:fe:8b:03:d6:
1f:bd:08:f2:bf:6f:2b:7a:3c:e7:77:e6:56:0c:61:
74:13:cb:d5:b0:d2:a6:a5:aa:c3:c6:65:f5:8a:9e:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:9B:C3:AD:68:7C:F1:C3:A4:94:5E:7E:18:4F:49:5E:B5:11:1C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/nwWbw61ofPHDpJRefhhPSV61ERw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:fa::/48
Signature Algorithm: sha256WithRSAEncryption
17:ea:91:8f:6a:9f:59:21:7d:06:1b:35:75:49:5c:8c:a3:ca:
8b:11:41:70:29:dd:19:33:57:5e:2c:0f:ad:01:44:52:e1:5d:
00:94:f4:2a:55:0e:a1:30:0d:a8:5a:17:d8:c8:40:c4:da:56:
25:23:16:99:7d:d7:cd:9a:84:5a:bf:e2:7d:85:88:d4:9b:8c:
57:8e:ee:09:81:1c:74:9b:5d:a2:d4:d3:9f:31:31:94:8d:70:
72:0a:7d:39:19:e0:c8:50:ff:e8:8a:b7:45:fe:ae:fb:c8:a8:
af:d7:05:c2:4c:ea:38:70:13:05:fe:b5:95:cb:3b:41:99:ca:
85:22:c6:6f:8c:29:f4:13:eb:56:8d:02:5e:11:70:c3:35:0a:
02:0e:27:ce:5a:51:84:d7:56:56:02:02:fd:a9:43:19:d3:be:
7d:26:95:98:88:96:6b:28:ca:66:7a:e6:a4:e4:f6:4b:ab:e1:
f2:af:b2:d4:29:95:e4:48:07:81:67:99:d0:26:53:fc:fd:6b:
94:44:9d:9f:e2:05:57:5f:13:a5:d1:4d:57:98:4d:24:f3:89:
46:54:a9:75:57:64:09:34:b8:df:31:80:f0:6d:33:4a:6c:2e:
49:bf:56:4c:27:6d:76:05:1c:bf:8d:78:5e:17:b7:c3:b5:57:
03:66:da:be
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2YNykVUwE3AUW0C4r3rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjUwMTAyMTE0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjA1OWJjM2FkNjg3Y2YxYzNhNDk0NWU3ZTE4NGY0OTVlYjUxMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4JwygVWLRe8I1cI/Eq2+rCb0N9G
6OUT3K1ZOWqYUo4RSDhwUkxxquqA4XJNTgVF1+vTifPwza1VNv+Z1OfuwmLVo33I
YE483DA2Bq0sZs/yAPrqeFVe/YgooOXC3W5QQiAYCNNViF5wA1GWYpWGl+8d/qRT
5VUE1T3zO9xrZ3fXZrOPQrjmMR05Q/ZR010kAYdVQ1RoiOCFuNumyLGYKtgaq5Hb
heWh4jlE1W6530/5MDF/wYzfd7RQvrw6hW7cYDDkXU1vcgmkfVymnimcTfoYo4D1
JqDpejqWnv6LA9YfvQjyv28rejznd+ZWDGF0E8vVsNKmparDxmX1ip6otQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ8Fm8OtaHzxw6SUXn4YT0letREcMB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvbndXYnc2MW9mUEhEcEpSZWZoaFBTVjYxRVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAD6
MA0GCSqGSIb3DQEBCwUAA4IBAQAX6pGPap9ZIX0GGzV1SVyMo8qLEUFwKd0ZM1de
LA+tAURS4V0AlPQqVQ6hMA2oWhfYyEDE2lYlIxaZfdfNmoRav+J9hYjUm4xXju4J
gRx0m12i1NOfMTGUjXByCn05GeDIUP/oirdF/q77yKiv1wXCTOo4cBMF/rWVyztB
mcqFIsZvjCn0E+tWjQJeEXDDNQoCDifOWlGE11ZWAgL9qUMZ0759JpWYiJZrKMpm
euak5PZLq+Hyr7LUKZXkSAeBZ5nQJlP8/WuURJ2f4gVXXxOl0U1XmE0k84lGVKl1
V2QJNLjfMYDwbTNKbC5Jv1ZMJ212BRy/jXheF7fDtVcDZtq+
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:09:40 2025 by rpki-client