Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/r6TFyvxSd_povxXdh8cGbFuQyhE.roa
File: r6TFyvxSd_povxXdh8cGbFuQyhE.roa (raw, json)
Hash identifier: 1b4TQYbWYz5wdImkeayYoAg0nMsVJrNsc5fY/DPyi4s=
Subject key identifier: AF:A4:C5:CA:FC:52:77:FA:68:BF:15:DD:87:C7:06:6C:5B:90:CA:11
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 0192FC7C5C08B333E3553A2919E0A4BEAB51
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/r6TFyvxSd_povxXdh8cGbFuQyhE.roa
Signing time: Tue 05 Nov 2024 13:21:01 +0000
ROA not before: Tue 05 Nov 2024 13:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47942
IP address blocks: 2a0a:c4c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Nov 2024 22:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:7c:5c:08:b3:33:e3:55:3a:29:19:e0:a4:be:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Nov 5 13:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa4c5cafc5277fa68bf15dd87c7066c5b90ca11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:39:7d:e5:0e:66:87:16:80:d3:05:50:27:
fb:c4:a8:50:2f:89:fd:86:1c:25:29:cf:cb:71:16:
26:a6:85:af:5d:e2:94:b1:5a:38:32:c8:f1:51:cb:
cb:dd:75:5c:dd:5f:a0:11:ea:82:82:8e:f1:43:dc:
b5:1f:51:af:28:76:a3:98:a0:25:a6:a2:db:d9:e3:
49:52:c0:24:2b:b8:3f:f3:fc:7b:e6:45:3a:55:af:
1e:a1:f4:83:5c:2c:87:cc:d0:4d:27:5f:91:67:a1:
07:25:28:b0:13:f7:5c:77:74:8b:22:de:34:b9:d8:
46:25:84:8e:50:5e:9c:cc:8c:bd:88:44:36:c5:e7:
93:07:32:2a:4d:be:fc:36:9a:91:12:b6:c3:91:c5:
0a:c5:70:70:7e:c3:de:1c:09:73:56:0e:25:ce:63:
05:2d:b3:3f:34:a5:80:9a:45:9e:bb:ee:f0:4d:68:
4a:21:76:69:de:5b:68:dd:b3:b1:92:de:9d:b0:ee:
67:56:2f:ba:83:e5:e8:73:2f:6f:63:c1:0a:43:40:
87:cf:5e:53:91:69:25:44:39:7e:82:ca:62:70:75:
f6:32:56:43:49:8d:cd:ca:63:c2:24:8f:23:cb:5d:
b8:a4:ea:8f:6b:c8:39:7d:bc:b0:87:27:9a:87:5c:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:C5:CA:FC:52:77:FA:68:BF:15:DD:87:C7:06:6C:5B:90:CA:11
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/r6TFyvxSd_povxXdh8cGbFuQyhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c4c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
74:0d:27:4c:cd:f2:33:bb:71:6d:55:87:7f:14:c3:59:56:56:
79:e2:62:61:4b:1e:74:4b:c7:02:24:38:9d:39:75:56:d2:01:
0d:7b:c8:39:56:2e:0a:b7:34:ff:a6:9d:fd:8a:d1:84:db:f4:
c3:71:6f:d1:93:d2:02:af:e7:88:b6:51:01:87:cf:85:bf:48:
64:02:39:50:1d:db:7b:6b:8f:d8:e4:13:f8:8d:0d:89:8d:d8:
1d:27:42:10:01:44:14:88:db:a6:09:ac:3e:56:60:64:9d:3f:
e9:d9:e9:57:23:cc:26:72:ab:1e:44:21:b0:64:c3:46:4b:5e:
f7:9a:d3:c4:97:1a:0a:60:4d:27:a9:80:de:c9:c4:a7:48:67:
1b:33:05:c6:3f:dc:94:34:96:7b:4b:fc:86:df:f8:5e:7c:ba:
42:af:37:e6:26:88:58:c6:0c:d2:bf:43:8e:6c:ec:0c:35:07:
61:c2:4d:7b:09:26:1e:dd:10:6b:50:53:3a:a7:f8:7d:a5:d7:
ec:fd:01:ee:95:55:ed:50:66:40:f7:11:1f:fb:76:66:ce:5c:
27:bd:76:08:3f:30:d3:ae:aa:e7:4e:06:6a:28:46:1e:f5:1d:
ac:f9:31:47:db:6a:5f:cc:e2:8c:ef:41:80:66:b9:53:9b:f2:
ae:c0:79:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZL8fFwIszPjVTopGeCkvqtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjQxMTA1MTMyMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmE0YzVjYWZjNTI3N2ZhNjhiZjE1ZGQ4N2M3MDY2YzViOTBjYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoE5feUOZocWgNMFUCf7xKhQL4n9
hhwlKc/LcRYmpoWvXeKUsVo4MsjxUcvL3XVc3V+gEeqCgo7xQ9y1H1GvKHajmKAl
pqLb2eNJUsAkK7g/8/x75kU6Va8eofSDXCyHzNBNJ1+RZ6EHJSiwE/dcd3SLIt40
udhGJYSOUF6czIy9iEQ2xeeTBzIqTb78NpqRErbDkcUKxXBwfsPeHAlzVg4lzmMF
LbM/NKWAmkWeu+7wTWhKIXZp3lto3bOxkt6dsO5nVi+6g+Xocy9vY8EKQ0CHz15T
kWklRDl+gspicHX2MlZDSY3NymPCJI8jy124pOqPa8g5fbywhyeah1zqmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK+kxcr8Unf6aL8V3YfHBmxbkMoRMB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvcjZURnl2eFNkX3BvdnhYZGg4Y0diRnVReWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrEwAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB0DSdMzfIzu3FtVYd/FMNZVlZ54mJhSx50S8cC
JDidOXVW0gENe8g5Vi4KtzT/pp39itGE2/TDcW/Rk9ICr+eItlEBh8+Fv0hkAjlQ
Hdt7a4/Y5BP4jQ2JjdgdJ0IQAUQUiNumCaw+VmBknT/p2elXI8wmcqseRCGwZMNG
S173mtPElxoKYE0nqYDeycSnSGcbMwXGP9yUNJZ7S/yG3/hefLpCrzfmJohYxgzS
v0OObOwMNQdhwk17CSYe3RBrUFM6p/h9pdfs/QHulVXtUGZA9xEf+3ZmzlwnvXYI
PzDTrqrnTgZqKEYe9R2s+TFH22pfzOKM70GAZrlTm/KuwHnh
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:53:11 2025 by rpki-client