Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/VOZUNO2jc9qP3YTBuwqfHZgIrPI.roa
File: VOZUNO2jc9qP3YTBuwqfHZgIrPI.roa (raw, json)
Hash identifier: /fNDx+614jDN1hKihEQvccLplYCDpP2dJbr0hhr9Fks=
Subject key identifier: 54:E6:54:34:ED:A3:73:DA:8F:DD:84:C1:BB:0A:9F:1D:98:08:AC:F2
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0191C1332B8C3FF2FE76E97F8519DD2325C0
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/VOZUNO2jc9qP3YTBuwqfHZgIrPI.roa
Signing time: Thu 05 Sep 2024 08:00:41 +0000
ROA not before: Thu 05 Sep 2024 08:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201119
IP address blocks: 2a0a:5bc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 15 Sep 2024 13:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:33:2b:8c:3f:f2:fe:76:e9:7f:85:19:dd:23:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Sep 5 08:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54e65434eda373da8fdd84c1bb0a9f1d9808acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:a4:af:84:5a:6a:d7:64:b6:08:ec:0b:07:
bb:29:1a:51:67:c1:16:f1:4e:f0:38:5a:b5:3b:47:
34:aa:2c:88:00:b8:b6:0f:aa:35:91:a5:98:f0:0d:
9a:72:8b:74:dc:a3:df:b3:1c:0b:c3:e1:f6:61:2c:
14:f5:7e:cb:5c:89:93:a0:2b:76:2f:07:06:16:a0:
67:d2:16:d0:f1:1c:b4:82:cf:79:a3:21:dc:3b:8b:
f4:32:96:46:08:0f:a0:e0:97:3e:e2:43:5e:c0:54:
79:b5:bd:fc:b4:b0:26:fc:6d:bb:2f:e5:d8:64:93:
4b:df:75:50:63:9d:bc:e7:a8:b5:1f:de:ec:0f:c7:
a5:63:08:73:15:9f:11:00:fa:00:47:03:90:fd:78:
55:bb:cd:65:bc:11:f0:a2:c5:56:2c:a9:69:9e:73:
a1:b6:6d:be:b7:aa:4f:28:5e:fb:5a:7a:b8:8f:f7:
03:28:32:86:9e:19:79:5d:46:37:c0:71:ef:3e:2c:
82:2a:a2:a1:c5:cd:9c:81:b4:e4:74:e3:e5:68:51:
77:f8:2a:a2:ad:19:6c:b1:22:d7:a7:1b:2d:c1:03:
e6:7e:d3:82:14:a8:43:4f:e3:7a:4f:6f:35:70:58:
eb:42:1c:57:bd:7f:d7:0c:f0:96:83:c3:bf:5c:18:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:54:34:ED:A3:73:DA:8F:DD:84:C1:BB:0A:9F:1D:98:08:AC:F2
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/VOZUNO2jc9qP3YTBuwqfHZgIrPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:2a:e1:d9:16:15:39:b4:3a:84:2c:67:63:73:91:55:70:bc:
a8:05:62:92:11:11:af:79:da:a3:e5:48:78:64:3b:14:f3:88:
2a:08:17:e6:91:f9:c3:ed:db:f5:45:46:04:2c:31:2c:08:d8:
bf:d3:bf:10:ae:09:76:b3:84:a9:03:dd:c6:48:46:1b:87:16:
5d:87:89:14:69:b4:d4:1b:63:86:34:7a:87:c4:b2:da:b1:fc:
f4:7f:2a:67:2d:58:94:a5:a9:e5:33:9f:57:84:8c:53:e8:2f:
d4:82:49:59:dd:2a:b7:92:5e:15:57:e4:6e:dd:68:f6:49:c8:
dd:b1:9d:04:67:c5:28:fb:45:73:b3:59:03:6e:a4:33:f3:7a:
9c:be:50:dc:9f:d9:20:de:26:ef:04:2c:6e:2a:fe:76:f0:2f:
50:91:0e:5f:8f:a4:81:7e:34:96:65:ce:0f:44:77:73:af:8c:
e8:f5:70:7d:75:6e:11:62:61:b6:9e:f5:e3:c4:e9:2b:03:3c:
6a:b8:41:c3:8b:69:cf:bc:91:47:5e:05:bd:c1:07:3c:96:d1:
10:ba:f6:c1:1e:1b:c2:6e:1b:50:cd:ae:dc:e4:49:83:24:95:
45:05:fc:c1:54:a0:07:3d:96:e2:37:82:7f:e3:da:be:7b:50:
af:94:f3:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZHBMyuMP/L+dul/hRndIyXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl
ZDRkMTEwHhcNMjQwOTA1MDgwMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGU2NTQzNGVkYTM3M2RhOGZkZDg0YzFiYjBhOWYxZDk4MDhhY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dqkr4RaatdktgjsCwe7KRpRZ8EW
8U7wOFq1O0c0qiyIALi2D6o1kaWY8A2acot03KPfsxwLw+H2YSwU9X7LXImToCt2
LwcGFqBn0hbQ8Ry0gs95oyHcO4v0MpZGCA+g4Jc+4kNewFR5tb38tLAm/G27L+XY
ZJNL33VQY52856i1H97sD8elYwhzFZ8RAPoARwOQ/XhVu81lvBHwosVWLKlpnnOh
tm2+t6pPKF77Wnq4j/cDKDKGnhl5XUY3wHHvPiyCKqKhxc2cgbTkdOPlaFF3+Cqi
rRlssSLXpxstwQPmftOCFKhDT+N6T281cFjrQhxXvX/XDPCWg8O/XBhfEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFTmVDTto3Paj92EwbsKnx2YCKzyMB8GA1UdIwQY
MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt
M2NkNDE3YWVlOWNlLzEvVk9aVU5PMmpjOXFQM1lUQnV3cWZIWmdJclBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl
LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpbwAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA/KuHZFhU5tDqELGdjc5FVcLyoBWKSERGvedqj
5Uh4ZDsU84gqCBfmkfnD7dv1RUYELDEsCNi/078Qrgl2s4SpA93GSEYbhxZdh4kU
abTUG2OGNHqHxLLasfz0fypnLViUpanlM59XhIxT6C/UgklZ3Sq3kl4VV+Ru3Wj2
ScjdsZ0EZ8Uo+0Vzs1kDbqQz83qcvlDcn9kg3ibvBCxuKv528C9QkQ5fj6SBfjSW
Zc4PRHdzr4zo9XB9dW4RYmG2nvXjxOkrAzxquEHDi2nPvJFHXgW9wQc8ltEQuvbB
HhvCbhtQza7c5EmDJJVFBfzBVKAHPZbiN4J/49q+e1CvlPMI
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:00 2025 by rpki-client