Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cCflFRwKiu0JFPwBRU6NQdFajNg.roa
File: cCflFRwKiu0JFPwBRU6NQdFajNg.roa (raw, json)
Hash identifier: w7xARixr26IdePo+oBckcGsrZMpQIA14S4ywjhOp0rQ=
Subject key identifier: 70:27:E5:15:1C:0A:8A:ED:09:14:FC:01:45:4E:8D:41:D1:5A:8C:D8
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEA7B0249598317B6A45C7C028864
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cCflFRwKiu0JFPwBRU6NQdFajNg.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210464
IP address blocks: 2a0a:79c7:f7d0::/44 maxlen: 44
2a0a:79c7:f7e0::/44 maxlen: 44
2a0a:79c7:f7f0::/44 maxlen: 44
2a0a:79c7:f800::/48 maxlen: 48
2a0a:79c7:f898::/48 maxlen: 48
2a0a:79c7:f899::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Jan 2025 20:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:7b:02:49:59:83:17:b6:a4:5c:7c:02:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7027e5151c0a8aed0914fc01454e8d41d15a8cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:f6:46:45:5b:7e:b2:58:58:93:eb:fe:e5:
00:8b:28:af:8e:07:97:56:61:0e:22:ca:76:b5:1f:
c1:53:f3:4a:95:71:44:b8:0d:1b:d9:bc:77:99:f3:
08:56:c3:be:8b:7f:b1:d0:39:af:42:61:c2:92:46:
b5:8c:12:3e:3a:03:bd:65:82:e9:7b:56:10:33:65:
52:4d:dd:7c:ca:6c:1d:ba:19:d7:06:99:e5:e7:9c:
fa:5f:94:58:bd:3f:af:f8:64:9a:24:8a:a9:0c:57:
85:23:93:96:41:d2:3a:f0:0e:b1:55:e0:19:8f:af:
ce:5b:6f:49:3d:9a:2a:0a:fb:d7:e1:07:7b:c7:f7:
40:63:7f:49:3b:db:29:9d:bd:38:e1:e2:9c:a9:d7:
52:b9:f9:8c:64:ae:9c:a2:f9:0e:d7:c6:ce:30:83:
73:92:34:be:ba:aa:8e:ca:b3:aa:88:e0:ba:12:f2:
d6:cf:47:a3:c9:94:f9:ec:c5:b8:76:95:b2:64:4e:
a3:92:c2:fd:24:bf:37:ff:81:90:d8:b9:22:16:dc:
80:a6:a4:96:f1:4f:29:f8:99:bf:62:ca:df:70:7b:
21:e2:e2:ce:4b:b7:a5:0f:4f:3d:0c:4d:fc:ec:fd:
75:4c:44:bd:bd:d2:03:4a:9d:75:5f:dd:41:9b:87:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:27:E5:15:1C:0A:8A:ED:09:14:FC:01:45:4E:8D:41:D1:5A:8C:D8
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cCflFRwKiu0JFPwBRU6NQdFajNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:f7d0::-2a0a:79c7:f800:ffff:ffff:ffff:ffff:ffff
2a0a:79c7:f898::/47
Signature Algorithm: sha256WithRSAEncryption
85:27:20:30:b0:ce:f9:87:91:7d:79:79:68:24:33:36:c9:e5:
01:a2:5c:93:9f:a1:77:ce:c9:db:d7:26:e9:52:a4:1e:32:71:
bf:8c:ba:2c:7d:6c:17:b1:61:f2:16:a8:00:97:0c:39:e2:da:
78:d2:c6:08:4a:ef:95:75:49:f8:ef:29:f1:03:8a:90:5e:55:
d4:fd:44:49:af:8d:57:f1:c5:aa:c8:2c:14:15:9d:8b:c8:d7:
80:af:5f:71:5c:a8:de:bd:d9:52:03:8a:5a:c2:d1:99:6b:19:
f8:bc:2e:f7:bb:75:f1:11:0c:a0:36:f9:54:6a:87:ef:8f:95:
0e:a6:21:db:4a:85:8a:73:fd:8b:5a:2f:e0:be:9d:4e:d6:be:
dc:be:62:97:5d:af:0b:90:bd:d5:99:47:37:45:38:0b:19:dc:
26:c5:8e:5f:fb:02:af:18:62:a9:55:27:0a:09:3f:5f:2d:bd:
cb:37:aa:d0:90:00:66:70:21:7d:1f:47:9a:b5:b2:81:6d:c4:
95:29:c0:1a:c6:59:b2:3a:28:36:e0:21:a6:77:c7:3a:26:22:
20:44:b2:63:c0:35:e8:71:ee:cd:5e:e3:40:80:ee:55:ff:c5:
a1:c7:a2:91:bc:9c:9a:98:a3:46:8d:3a:e6:96:0c:95:10:9c:
f9:e1:71:52
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQl/ep7AklZgxe2pFx8AohkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI3ZTUxNTFjMGE4YWVkMDkxNGZjMDE0NTRlOGQ0MWQxNWE4Y2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmP2RkVbfrJYWJPr/uUAiyivjgeX
VmEOIsp2tR/BU/NKlXFEuA0b2bx3mfMIVsO+i3+x0DmvQmHCkka1jBI+OgO9ZYLp
e1YQM2VSTd18ymwduhnXBpnl55z6X5RYvT+v+GSaJIqpDFeFI5OWQdI68A6xVeAZ
j6/OW29JPZoqCvvX4Qd7x/dAY39JO9spnb044eKcqddSufmMZK6covkO18bOMINz
kjS+uqqOyrOqiOC6EvLWz0ejyZT57MW4dpWyZE6jksL9JL83/4GQ2LkiFtyApqSW
8U8p+Jm/YsrfcHsh4uLOS7elD089DE387P11TES9vdIDSp11X91Bm4eyBwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHAn5RUcCortCRT8AUVOjUHRWozYMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvY0NmbEZSd0tpdTBKRlB3QlJVNk5RZEZhak5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwQqCnnH
99ADBwAqCnnH+AADBwEqCnnH+JgwDQYJKoZIhvcNAQELBQADggEBAIUnIDCwzvmH
kX15eWgkMzbJ5QGiXJOfoXfOydvXJulSpB4ycb+Muix9bBexYfIWqACXDDni2njS
xghK75V1SfjvKfEDipBeVdT9REmvjVfxxarILBQVnYvI14CvX3FcqN692VIDilrC
0ZlrGfi8Lve7dfERDKA2+VRqh++PlQ6mIdtKhYpz/YtaL+C+nU7Wvty+YpddrwuQ
vdWZRzdFOAsZ3CbFjl/7Aq8YYqlVJwoJP18tvcs3qtCQAGZwIX0fR5q1soFtxJUp
wBrGWbI6KDbgIaZ3xzomIiBEsmPANehx7s1e40CA7lX/xaHHopG8nJqYo0aNOuaW
DJUQnPnhcVI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:15 2025 by rpki-client