Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5N_OVr6TJalD2gnZPt1zP3VpYc4.roa
File: 5N_OVr6TJalD2gnZPt1zP3VpYc4.roa (raw, json)
Hash identifier: QQvR7LjTfDOEP5Ah2jQJDy+NTnPixQDcdHKRLErwwHM=
Subject key identifier: E4:DF:CE:56:BE:93:25:A9:43:DA:09:D9:3E:DD:73:3F:75:69:61:CE
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B3C7E37E050FE8DD4B8216266D17F
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5N_OVr6TJalD2gnZPt1zP3VpYc4.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203472
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3c:7e:37:e0:50:fe:8d:d4:b8:21:62:66:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4dfce56be9325a943da09d93edd733f756961ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:16:ae:7f:29:19:39:e4:c7:35:f6:ea:6e:
f3:ce:cb:c6:1d:d8:e9:0f:5d:2f:e4:48:c9:cf:c4:
4e:84:5f:b2:e6:5f:cb:34:6c:71:f5:07:be:30:7c:
c4:fa:d1:7a:fd:5f:cc:05:af:1d:d9:2e:fa:c7:33:
21:d0:4f:20:e7:43:98:16:35:6e:85:bb:fd:d5:85:
8c:5f:6d:5b:82:f4:2f:a7:56:9e:5d:c1:30:34:2c:
e4:11:0b:74:37:31:4e:48:0a:2d:57:0a:e1:46:60:
ae:c6:ea:a4:c0:0f:69:90:71:71:7a:1b:67:a7:a1:
54:f4:ad:2b:69:fd:38:c6:bf:70:7a:e9:d8:95:70:
81:1c:79:df:6e:d3:77:69:6b:e4:3a:cc:40:31:dd:
0c:49:d5:e0:98:50:9b:db:25:db:42:a5:81:95:44:
b5:f8:3a:a0:13:5f:2b:83:eb:01:64:de:a3:d7:d0:
3e:c9:8e:95:a5:f6:1f:57:9e:13:14:29:a2:da:d6:
62:26:a2:62:2e:57:2e:63:e6:c2:ae:e5:ca:68:9c:
ef:c2:b2:99:57:68:8e:8b:3e:ec:63:ae:6d:bd:78:
4a:11:34:1b:8c:50:ab:67:95:5a:e1:5d:58:1d:6d:
04:57:2a:d1:5c:7b:2d:40:24:87:51:03:f2:ae:2e:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:CE:56:BE:93:25:A9:43:DA:09:D9:3E:DD:73:3F:75:69:61:CE
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/5N_OVr6TJalD2gnZPt1zP3VpYc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
62:ee:91:88:68:0e:b7:77:2e:66:45:3f:d3:0d:49:7c:99:6c:
2f:fb:0b:de:89:16:0d:10:a8:9e:4b:31:e0:ff:76:a9:b1:a9:
20:cc:d1:b3:04:61:c8:1d:2d:8e:9a:f2:0f:a5:5b:d5:e4:2c:
37:bd:07:5f:1b:47:c4:71:7b:36:23:d9:b2:a3:7e:dc:65:e7:
93:f4:28:02:bf:ca:fc:9d:c9:bb:4f:fa:56:6c:f4:c9:bc:64:
ee:d0:e1:ea:68:6d:5f:38:13:95:1e:9a:c5:6d:92:ee:48:19:
11:89:1f:cb:81:f6:31:74:e2:26:01:22:bf:ab:44:76:66:d5:
a1:fb:a6:f2:cb:ed:45:5c:79:fb:9c:07:7a:02:7e:ee:54:d4:
91:3d:25:c1:73:23:73:1f:22:ef:59:bb:1f:77:a9:ed:bb:d7:
98:5c:7a:e0:09:ca:20:51:8d:cc:f7:08:68:c5:4c:27:54:b7:
c8:0a:a4:f3:58:d2:1a:fc:41:c5:7a:f2:56:78:a0:74:1d:af:
8f:58:b0:ec:81:f2:b8:4f:06:a1:d5:e8:6e:f4:0c:ec:dd:18:
46:24:54:6f:cf:e5:c8:5d:11:78:3b:61:86:09:d2:e6:17:1e:
a4:72:13:46:1a:2a:a9:d0:21:ca:a9:36:b4:43:e7:c3:6d:09:
a8:63:b9:f8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzGSzx+N+BQ/o3UuCFiZtF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGRmY2U1NmJlOTMyNWE5NDNkYTA5ZDkzZWRkNzMzZjc1Njk2MWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwoWrn8pGTnkxzX26m7zzsvGHdjp
D10v5EjJz8ROhF+y5l/LNGxx9Qe+MHzE+tF6/V/MBa8d2S76xzMh0E8g50OYFjVu
hbv91YWMX21bgvQvp1aeXcEwNCzkEQt0NzFOSAotVwrhRmCuxuqkwA9pkHFxehtn
p6FU9K0raf04xr9weunYlXCBHHnfbtN3aWvkOsxAMd0MSdXgmFCb2yXbQqWBlUS1
+DqgE18rg+sBZN6j19A+yY6VpfYfV54TFCmi2tZiJqJiLlcuY+bCruXKaJzvwrKZ
V2iOiz7sY65tvXhKETQbjFCrZ5Va4V1YHW0EVyrRXHstQCSHUQPyri427QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOTfzla+kyWpQ9oJ2T7dcz91aWHOMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvNU5fT1ZyNlRKYWxEMmduWlB0MXpQM1ZwWWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wt0w
DQYJKoZIhvcNAQELBQADggEBAGLukYhoDrd3LmZFP9MNSXyZbC/7C96JFg0QqJ5L
MeD/dqmxqSDM0bMEYcgdLY6a8g+lW9XkLDe9B18bR8RxezYj2bKjftxl55P0KAK/
yvydybtP+lZs9Mm8ZO7Q4epobV84E5UemsVtku5IGRGJH8uB9jF04iYBIr+rRHZm
1aH7pvLL7UVcefucB3oCfu5U1JE9JcFzI3MfIu9Zux93qe2715hceuAJyiBRjcz3
CGjFTCdUt8gKpPNY0hr8QcV68lZ4oHQdr49YsOyB8rhPBqHV6G70DOzdGEYkVG/P
5chdEXg7YYYJ0uYXHqRyE0YaKqnQIcqpNrRD58NtCahjufg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:25 2025 by rpki-client