Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/hENSbVJqH4lvjUKgXQkLqFxRR1A.roa
File: hENSbVJqH4lvjUKgXQkLqFxRR1A.roa (raw, json)
Hash identifier: uvTujC9rJLIXKTez2kt7HR8knknar6bywzhHPrRFH1E=
Subject key identifier: 84:43:52:6D:52:6A:1F:89:6F:8D:42:A0:5D:09:0B:A8:5C:51:47:50
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0191F562A653FC8475D0403DAD43BCD27C9D
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/hENSbVJqH4lvjUKgXQkLqFxRR1A.roa
Signing time: Sun 15 Sep 2024 11:12:48 +0000
ROA not before: Sun 15 Sep 2024 11:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214345
IP address blocks: 2001:3a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 17 Sep 2024 12:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:62:a6:53:fc:84:75:d0:40:3d:ad:43:bc:d2:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Sep 15 11:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8443526d526a1f896f8d42a05d090ba85c514750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:3f:71:5d:44:69:01:16:64:13:c2:b9:5c:
3f:14:70:99:22:1d:09:de:42:22:78:00:a2:89:39:
f0:4a:11:35:85:47:92:a0:08:1f:16:d0:32:e2:7c:
8f:eb:da:91:0b:50:af:e6:a0:c9:c6:f7:77:d0:a5:
cf:56:a3:0b:70:22:31:64:bd:60:c0:09:c3:a5:e9:
08:a0:1f:0b:e9:c2:1b:22:12:9c:1c:f0:fc:5f:ae:
1d:ac:33:55:68:f9:65:b6:5d:27:db:41:0f:46:8a:
5d:d0:cf:e3:79:8b:17:88:30:b7:77:77:44:ab:a6:
a3:c9:0a:66:be:0e:37:61:ab:ee:a5:7d:3a:86:75:
aa:55:b2:8d:3d:8b:fc:6e:8f:93:4f:b1:ea:32:51:
05:25:a5:b5:c9:d3:4d:20:72:3b:87:a9:61:0a:f4:
8e:b3:57:57:eb:16:52:8c:64:4a:a6:98:a2:84:27:
63:fe:3b:34:7c:f6:f0:c8:f4:10:a4:7b:5b:ba:7f:
67:bd:2a:dc:77:11:e2:79:e5:7b:23:9d:e0:ab:21:
0b:93:72:0d:11:7a:4e:7d:2d:31:d4:31:c0:06:33:
12:c9:4d:46:f2:47:52:7f:8c:31:5f:a1:d7:21:56:
1c:88:c3:ca:26:b0:49:1b:72:6d:d0:cb:79:d3:7d:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:43:52:6D:52:6A:1F:89:6F:8D:42:A0:5D:09:0B:A8:5C:51:47:50
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/hENSbVJqH4lvjUKgXQkLqFxRR1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
4e:c0:eb:25:6d:03:af:bc:a5:4b:e8:80:ae:ad:db:0d:88:f7:
ec:5d:35:03:a8:d1:40:29:99:f2:82:9d:83:27:1d:d9:c7:ff:
dc:1d:c2:eb:6f:90:ad:5a:f3:06:57:99:e5:e3:7f:2f:8d:48:
05:75:a0:2c:2b:03:57:18:74:bc:73:3b:00:d6:9b:06:56:a5:
37:19:2c:8f:d6:05:16:47:8b:c8:82:ae:19:02:8a:d8:f2:1f:
9e:1e:a3:29:6d:16:69:f0:91:26:76:df:d7:3c:a6:8b:4a:84:
78:b9:b4:ae:b1:e3:af:f8:0a:0f:5d:27:fd:69:f2:f2:b5:f0:
d3:5c:eb:40:cc:ea:dc:e4:22:e3:6f:05:0e:53:af:0e:d2:b0:
49:6c:53:39:69:49:bd:e3:27:7f:7c:34:d0:17:d0:f4:c0:70:
e8:7e:87:06:98:1c:8c:40:7f:2a:9c:ab:0f:ec:d7:ed:2f:b8:
cc:6f:61:c8:43:c3:7b:b1:87:a6:fa:4a:9b:ef:21:09:52:7c:
fc:3b:29:d0:7d:f0:4c:8f:98:bd:2e:cb:4c:ef:83:dc:2d:64:
12:66:de:fd:d6:a9:87:c4:67:4b:e4:4b:2b:34:11:6d:98:37:
2d:0a:ac:c1:25:93:e6:f1:39:39:2b:a6:1e:15:bc:03:87:15:
5f:5c:ca:73
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZH1YqZT/IR10EA9rUO80nydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk
OTYyNzgwHhcNMjQwOTE1MTExMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDQzNTI2ZDUyNmExZjg5NmY4ZDQyYTA1ZDA5MGJhODVjNTE0NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WU/cV1EaQEWZBPCuVw/FHCZIh0J
3kIieACiiTnwShE1hUeSoAgfFtAy4nyP69qRC1Cv5qDJxvd30KXPVqMLcCIxZL1g
wAnDpekIoB8L6cIbIhKcHPD8X64drDNVaPlltl0n20EPRopd0M/jeYsXiDC3d3dE
q6ajyQpmvg43YavupX06hnWqVbKNPYv8bo+TT7HqMlEFJaW1ydNNIHI7h6lhCvSO
s1dX6xZSjGRKppiihCdj/js0fPbwyPQQpHtbun9nvSrcdxHieeV7I53gqyELk3IN
EXpOfS0x1DHABjMSyU1G8kdSf4wxX6HXIVYciMPKJrBJG3Jt0Mt5031XiQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIRDUm1Sah+Jb41CoF0JC6hcUUdQMB8GA1UdIwQY
MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt
MjhmNGRhZDM3OGZjLzEvaEVOU2JWSnFINGx2alVLZ1hRa0xxRnhSUjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj
LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAE6gDAN
BgkqhkiG9w0BAQsFAAOCAQEATsDrJW0Dr7ylS+iArq3bDYj37F01A6jRQCmZ8oKd
gycd2cf/3B3C62+QrVrzBleZ5eN/L41IBXWgLCsDVxh0vHM7ANabBlalNxksj9YF
FkeLyIKuGQKK2PIfnh6jKW0WafCRJnbf1zymi0qEeLm0rrHjr/gKD10n/Wny8rXw
01zrQMzq3OQi428FDlOvDtKwSWxTOWlJveMnf3w00BfQ9MBw6H6HBpgcjEB/Kpyr
D+zX7S+4zG9hyEPDe7GHpvpKm+8hCVJ8/Dsp0H3wTI+YvS7LTO+D3C1kEmbe/dap
h8RnS+RLKzQRbZg3LQqswSWT5vE5OSumHhW8A4cVX1zKcw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:17:08 2025 by rpki-client