Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OOez4yWvlSmvqPbWtHiY8DtBsCk.roa
File: OOez4yWvlSmvqPbWtHiY8DtBsCk.roa (raw, json)
Hash identifier: rpX2OrfGnMRXfQ94oLZMT2hzojFcmT3BxpgBSKPzAL0=
Subject key identifier: 38:E7:B3:E3:25:AF:95:29:AF:A8:F6:D6:B4:78:98:F0:3B:41:B0:29
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE5EF1DD8EBB3E5EB29F2B0375F36
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OOez4yWvlSmvqPbWtHiY8DtBsCk.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207754
IP address blocks: 2a06:e881:7104::/46 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 13:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e5:ef:1d:d8:eb:b3:e5:eb:29:f2:b0:37:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e7b3e325af9529afa8f6d6b47898f03b41b029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:1e:82:82:b1:dd:44:10:8a:7d:f3:73:d3:
71:e4:d1:f5:1c:01:83:ab:2a:e5:90:8f:38:cb:bc:
7d:ec:b6:a8:f3:bc:4c:eb:03:eb:82:90:56:60:5a:
31:34:a6:0d:7c:b3:fb:66:26:52:6d:9a:0b:e1:65:
5c:d8:3a:61:5d:14:5b:8c:22:23:11:41:28:cc:e3:
80:59:53:e3:8d:f3:21:17:86:d4:c0:30:09:e7:e8:
8a:44:48:a0:8d:49:57:65:15:f4:bc:82:be:d1:f9:
63:72:c1:bd:23:cb:61:cd:fd:e2:35:bc:2c:ee:51:
a7:d0:b3:ad:03:18:e6:7d:46:02:1a:0a:ad:69:e5:
72:4e:12:5b:76:5f:6b:dd:bf:18:8a:8d:aa:d2:5b:
bf:c9:05:e7:ba:bc:7b:02:5c:ea:d7:b6:7a:b8:2c:
b0:46:ff:79:71:1b:da:e5:6e:22:67:d9:73:58:c3:
5b:fc:63:6d:98:2c:c4:5e:e5:8a:96:76:e8:81:3b:
2b:8b:b9:bf:27:99:2c:12:e0:63:f6:88:61:76:90:
79:f4:4c:2f:6f:b0:3a:dd:49:f3:79:c9:f5:70:25:
ca:53:b3:e8:06:a1:22:04:df:97:27:2f:fa:7c:6e:
79:9a:ea:b7:32:9d:86:cf:c7:d0:fd:38:59:47:73:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:B3:E3:25:AF:95:29:AF:A8:F6:D6:B4:78:98:F0:3B:41:B0:29
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OOez4yWvlSmvqPbWtHiY8DtBsCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7104::/46
Signature Algorithm: sha256WithRSAEncryption
be:95:48:1d:3d:e5:ce:92:73:37:6e:8b:3a:5b:6b:4d:88:d5:
5f:2f:40:a1:da:d2:18:46:5d:23:6e:f1:a9:44:b1:b5:d8:61:
ec:f0:a9:8d:3f:2d:10:80:aa:b2:b2:96:1f:20:52:60:8e:e7:
04:55:2a:22:74:73:a7:83:9e:c6:75:0f:cc:63:8a:96:04:08:
a1:d7:a6:a2:e1:82:b0:15:1b:7c:5f:14:3d:42:6f:3e:04:f8:
81:91:76:61:f5:c3:bc:7f:10:d3:61:bb:05:93:2e:91:ec:5d:
2f:cf:d6:bd:bb:e9:cd:d6:7b:6c:a8:93:1a:9b:25:74:bf:4c:
4d:8b:41:62:c0:e8:72:5f:fb:fe:9b:1f:b9:dd:57:02:e3:71:
8b:fd:5f:83:84:95:34:cd:58:49:86:73:5f:85:f5:a1:8b:bd:
cb:7b:8b:44:79:dc:7e:0e:6c:1f:5a:4e:ce:20:c4:b1:b5:04:
0a:3c:a8:d9:2a:92:40:a5:60:53:4e:49:41:8d:67:1d:0a:21:
4a:20:40:cd:47:83:f6:4b:27:47:c5:80:b3:aa:58:16:41:6d:
5d:4c:b3:86:fb:8f:72:19:43:f0:1c:e2:23:d3:77:65:87:44:
45:1f:82:11:7b:4b:b6:6a:85:b5:f6:22:f7:92:bd:b8:41:b1:
5d:0a:4b:44
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/eXvHdjrs+XrKfKwN182MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU3YjNlMzI1YWY5NTI5YWZhOGY2ZDZiNDc4OThmMDNiNDFiMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8AegoKx3UQQin3zc9Nx5NH1HAGD
qyrlkI84y7x97Lao87xM6wPrgpBWYFoxNKYNfLP7ZiZSbZoL4WVc2DphXRRbjCIj
EUEozOOAWVPjjfMhF4bUwDAJ5+iKREigjUlXZRX0vIK+0fljcsG9I8thzf3iNbws
7lGn0LOtAxjmfUYCGgqtaeVyThJbdl9r3b8Yio2q0lu/yQXnurx7Alzq17Z6uCyw
Rv95cRva5W4iZ9lzWMNb/GNtmCzEXuWKlnbogTsri7m/J5ksEuBj9ohhdpB59Ewv
b7A63Unzecn1cCXKU7PoBqEiBN+XJy/6fG55muq3Mp2Gz8fQ/ThZR3PAjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDjns+Mlr5Upr6j21rR4mPA7QbApMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvT09lejR5V3ZsU212cVBiV3RIaVk4RHRCc0NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgbogXEE
MA0GCSqGSIb3DQEBCwUAA4IBAQC+lUgdPeXOknM3bos6W2tNiNVfL0Ch2tIYRl0j
bvGpRLG12GHs8KmNPy0QgKqyspYfIFJgjucEVSoidHOng57GdQ/MY4qWBAih16ai
4YKwFRt8XxQ9Qm8+BPiBkXZh9cO8fxDTYbsFky6R7F0vz9a9u+nN1ntsqJMamyV0
v0xNi0FiwOhyX/v+mx+53VcC43GL/V+DhJU0zVhJhnNfhfWhi73Le4tEedx+Dmwf
Wk7OIMSxtQQKPKjZKpJApWBTTklBjWcdCiFKIEDNR4P2SydHxYCzqlgWQW1dTLOG
+49yGUPwHOIj03dlh0RFH4IRe0u2aoW19iL3kr24QbFdCktE
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:58 2025 by rpki-client