Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0Mu3kIZbXH4sFm7Y3jHlp-IA0bo.roa
File: 0Mu3kIZbXH4sFm7Y3jHlp-IA0bo.roa (raw, json)
Hash identifier: Z/jI2boqJWlo5pE+osVtjaLUblqWSt1XcSQ5BnHytQo=
Subject key identifier: D0:CB:B7:90:86:5B:5C:7E:2C:16:6E:D8:DE:31:E5:A7:E2:00:D1:BA
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A1B617746EB257B8799E4FFADC2F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0Mu3kIZbXH4sFm7Y3jHlp-IA0bo.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 2001:3280::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 18 Jan 2025 22:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a1:b6:17:74:6e:b2:57:b8:79:9e:4f:fa:dc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0cbb790865b5c7e2c166ed8de31e5a7e200d1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:31:fb:a2:b8:6a:d3:f1:4d:57:36:7d:23:
90:d1:f8:76:00:3c:4c:16:16:e7:9f:e7:ad:d5:ed:
d6:e2:26:88:4a:ab:f7:ff:25:c0:bd:47:fb:64:f7:
0a:7b:60:89:d1:f3:cf:a9:61:13:e5:f1:1b:26:48:
73:c2:31:be:95:b3:eb:3d:ea:9c:93:c4:55:f8:ea:
ab:ee:e0:a4:8d:8e:7d:1a:72:01:e5:43:94:f3:2d:
4f:73:e6:79:78:15:3b:3e:87:3f:70:7d:57:72:cb:
ae:ca:b8:2a:db:77:f0:d6:cf:2d:ac:69:0e:98:a1:
90:0e:62:56:fe:55:40:34:3c:86:2a:d0:28:e7:a9:
a7:b1:d6:a6:90:61:4b:57:ab:34:9c:fd:f2:c3:37:
77:cb:69:25:02:3a:36:22:d0:08:8e:67:48:4c:1b:
7e:f9:4a:8e:e6:36:67:bb:bd:63:27:7e:b0:9e:31:
6b:f8:3c:fe:e6:99:7d:5c:bb:80:39:be:b6:31:19:
b3:26:d8:82:41:bf:9e:d4:86:92:cd:0c:82:f5:73:
6b:0d:2b:32:0a:25:4a:33:06:ae:f2:b3:1f:bf:7e:
56:5a:c6:85:7e:79:3e:d1:ae:95:31:5b:3f:2b:d2:
cb:5f:2c:50:45:1b:4e:41:de:fc:bd:da:10:d1:14:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CB:B7:90:86:5B:5C:7E:2C:16:6E:D8:DE:31:E5:A7:E2:00:D1:BA
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/0Mu3kIZbXH4sFm7Y3jHlp-IA0bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3280::/29
Signature Algorithm: sha256WithRSAEncryption
17:cb:4b:b8:f1:fe:fd:59:43:e1:6e:00:19:a0:4a:c7:a7:fc:
f5:a7:7e:1f:b3:ea:c3:46:42:a2:e1:1b:70:59:04:f9:71:e8:
45:37:e8:fc:79:be:5c:8d:05:c9:11:9e:47:5e:2c:34:e2:12:
44:2b:86:30:54:52:17:30:b8:eb:c8:4f:b8:b1:fd:6c:c3:81:
cb:ea:82:8c:a9:5f:9a:fe:ee:10:d7:ce:89:8c:95:79:c1:6e:
0a:01:d3:bb:d6:08:b6:ff:04:e0:6d:c3:ee:d1:ef:06:b5:3c:
f6:6c:6e:b1:6e:8e:94:94:9e:0e:f2:af:5b:a7:fa:df:07:cd:
e5:af:41:8a:0a:8d:65:4d:53:29:df:80:1d:c0:47:ef:84:e9:
e9:e9:89:d3:d9:ba:82:64:a2:03:d7:ee:fb:a2:c8:d1:e4:14:
8a:f2:ef:73:a8:fc:db:31:41:20:9f:10:6d:58:71:8b:c5:c4:
e4:7a:05:c5:1c:b9:5c:74:da:f6:93:41:37:cd:63:8f:9c:bc:
3d:d0:83:84:60:17:eb:40:d2:27:af:5c:c2:d3:62:7b:74:b1:
93:b5:14:63:48:ca:35:56:ab:2f:25:d7:23:cf:54:eb:01:a5:
80:58:db:46:4d:eb:a5:84:fb:70:10:87:09:22:ca:42:6c:3b:
36:c2:cd:9b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRaG2F3Rusle4eZ5P+twvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjUwMTAxMjM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGNiYjc5MDg2NWI1YzdlMmMxNjZlZDhkZTMxZTVhN2UyMDBkMWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDkx+6K4atPxTVc2fSOQ0fh2ADxM
Fhbnn+et1e3W4iaISqv3/yXAvUf7ZPcKe2CJ0fPPqWET5fEbJkhzwjG+lbPrPeqc
k8RV+Oqr7uCkjY59GnIB5UOU8y1Pc+Z5eBU7Poc/cH1Xcsuuyrgq23fw1s8trGkO
mKGQDmJW/lVANDyGKtAo56mnsdamkGFLV6s0nP3ywzd3y2klAjo2ItAIjmdITBt+
+UqO5jZnu71jJ36wnjFr+Dz+5pl9XLuAOb62MRmzJtiCQb+e1IaSzQyC9XNrDSsy
CiVKMwau8rMfv35WWsaFfnk+0a6VMVs/K9LLXyxQRRtOQd78vdoQ0RQPxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNDLt5CGW1x+LBZu2N4x5afiANG6MB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvME11M2tJWmJYSDRzRm03WTNqSGxwLUlBMGJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEygDAN
BgkqhkiG9w0BAQsFAAOCAQEAF8tLuPH+/VlD4W4AGaBKx6f89ad+H7Pqw0ZCouEb
cFkE+XHoRTfo/Hm+XI0FyRGeR14sNOISRCuGMFRSFzC468hPuLH9bMOBy+qCjKlf
mv7uENfOiYyVecFuCgHTu9YItv8E4G3D7tHvBrU89mxusW6OlJSeDvKvW6f63wfN
5a9BigqNZU1TKd+AHcBH74Tp6emJ09m6gmSiA9fu+6LI0eQUivLvc6j82zFBIJ8Q
bVhxi8XE5HoFxRy5XHTa9pNBN81jj5y8PdCDhGAX60DSJ69cwtNie3Sxk7UUY0jK
NVarLyXXI89U6wGlgFjbRk3rpYT7cBCHCSLKQmw7NsLNmw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:29 2025 by rpki-client