Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/s3xN3EuKyCaYnSH-ezxDexmB20Q.roa
File: s3xN3EuKyCaYnSH-ezxDexmB20Q.roa (raw, json)
Hash identifier: LQ60hRL6xjznjAQ2w/wkWJ/AJ/Q5sFaId7RoqI+m/2I=
Subject key identifier: B3:7C:4D:DC:4B:8A:C8:26:98:9D:21:FE:7B:3C:43:7B:19:81:DB:44
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC493085C612FAA81E6FCB9E63E1EC509
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/s3xN3EuKyCaYnSH-ezxDexmB20Q.roa
Signing time: Mon 01 Jan 2024 10:30:19 +0000
ROA not before: Mon 01 Jan 2024 10:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28771
IP address blocks: 2a01:190:167b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:08:5c:61:2f:aa:81:e6:fc:b9:e6:3e:1e:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b37c4ddc4b8ac826989d21fe7b3c437b1981db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:4e:6f:a3:01:97:63:07:74:14:ab:78:95:
67:75:df:ad:48:5c:54:47:00:5d:05:5e:f0:7a:39:
c2:f4:cf:8c:af:57:5f:a9:c4:57:b7:3e:01:e1:d5:
e8:53:3d:25:4b:29:2a:51:1e:7b:1d:11:d3:cf:0f:
3f:2a:c9:ab:b5:7a:d4:92:7a:fa:45:fc:13:ef:65:
a4:98:20:f4:3e:ac:05:f9:44:20:bf:3d:65:b1:35:
d4:e8:af:f0:26:03:ef:6d:2e:b7:58:76:c5:eb:b3:
ae:57:e4:15:8f:b3:6b:a2:5c:55:98:d9:0c:f0:12:
00:30:ed:1d:8b:50:20:4a:fc:83:84:b4:91:5a:56:
7d:33:e9:ff:4d:80:43:7f:5a:e0:8d:eb:23:be:97:
7a:99:18:13:73:d1:a9:83:03:47:10:fe:1a:4a:be:
81:c6:81:7f:9a:5f:7c:a0:3d:99:86:73:61:08:44:
18:86:67:b7:b6:a3:23:bc:1f:67:de:10:37:8e:4b:
bb:b8:84:7e:a8:d0:a2:34:ca:6d:2e:a8:aa:34:d5:
3a:c8:4e:21:f4:b1:4f:77:e5:0e:d9:3c:73:a2:ff:
da:1b:4c:c2:b5:8f:1c:92:0e:8c:1a:30:21:5f:da:
32:da:de:45:9f:3d:83:62:6c:54:23:da:db:81:33:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:4D:DC:4B:8A:C8:26:98:9D:21:FE:7B:3C:43:7B:19:81:DB:44
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/s3xN3EuKyCaYnSH-ezxDexmB20Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:167b::/48
Signature Algorithm: sha256WithRSAEncryption
99:92:48:76:51:3f:33:33:da:d6:94:69:f6:07:9d:1f:df:8a:
ff:ff:38:e7:bc:b2:ec:61:f1:02:60:7f:99:27:2c:db:c0:4d:
45:de:12:2d:66:c5:7e:29:c1:e8:dd:86:57:65:9c:ae:50:3a:
68:11:ce:80:eb:41:bf:ae:7a:c8:74:68:0e:75:27:ad:4d:d3:
00:e3:c9:65:0c:74:42:50:36:24:88:b7:af:89:30:0e:f2:24:
23:d2:96:d3:dc:28:a5:aa:37:eb:70:23:e1:bc:ae:a5:aa:d0:
5e:10:86:8d:84:88:b7:c3:f4:46:77:38:55:e3:2c:45:41:9c:
8a:a6:5a:3e:9c:04:6c:64:71:f8:52:7e:77:75:98:36:4f:4b:
ba:63:aa:c4:05:62:82:03:f4:80:56:d6:7e:69:11:e6:f6:0d:
5f:53:7c:42:90:79:ec:82:ec:a2:52:4e:a2:a4:f3:87:60:e3:
90:4d:85:20:f3:67:d8:7e:07:57:4e:d8:3f:34:f7:10:f5:3f:
99:d3:be:14:9e:18:05:f4:dd:68:a9:96:aa:95:37:d4:f8:16:
8d:ce:0b:2c:ab:bf:72:66:2e:8c:89:6f:04:4a:71:af:40:82:
d3:0d:c9:c7:90:bc:1e:cf:74:da:e0:3b:b3:a1:b8:1a:c7:bf:
15:85:01:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEkwhcYS+qgeb8ueY+HsUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjQwMTAxMTAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzdjNGRkYzRiOGFjODI2OTg5ZDIxZmU3YjNjNDM3YjE5ODFkYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh69Ob6MBl2MHdBSreJVndd+tSFxU
RwBdBV7wejnC9M+Mr1dfqcRXtz4B4dXoUz0lSykqUR57HRHTzw8/KsmrtXrUknr6
RfwT72WkmCD0PqwF+UQgvz1lsTXU6K/wJgPvbS63WHbF67OuV+QVj7NrolxVmNkM
8BIAMO0di1AgSvyDhLSRWlZ9M+n/TYBDf1rgjesjvpd6mRgTc9GpgwNHEP4aSr6B
xoF/ml98oD2ZhnNhCEQYhme3tqMjvB9n3hA3jku7uIR+qNCiNMptLqiqNNU6yE4h
9LFPd+UO2Txzov/aG0zCtY8ckg6MGjAhX9oy2t5Fnz2DYmxUI9rbgTNACQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLN8TdxLisgmmJ0h/ns8Q3sZgdtEMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvczN4TjNFdUt5Q2FZblNILWV6eERleG1CMjBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBZ7
MA0GCSqGSIb3DQEBCwUAA4IBAQCZkkh2UT8zM9rWlGn2B50f34r//zjnvLLsYfEC
YH+ZJyzbwE1F3hItZsV+KcHo3YZXZZyuUDpoEc6A60G/rnrIdGgOdSetTdMA48ll
DHRCUDYkiLeviTAO8iQj0pbT3CilqjfrcCPhvK6lqtBeEIaNhIi3w/RGdzhV4yxF
QZyKplo+nARsZHH4Un53dZg2T0u6Y6rEBWKCA/SAVtZ+aRHm9g1fU3xCkHnsguyi
Uk6ipPOHYOOQTYUg82fYfgdXTtg/NPcQ9T+Z074UnhgF9N1oqZaqlTfU+BaNzgss
q79yZi6MiW8ESnGvQILTDcnHkLwez3Ta4Duzobgax78VhQE+
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:29 2025 by rpki-client