Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/848uaYI-EEOIaPdj2MW6Z1H4pH4.roa
File: 848uaYI-EEOIaPdj2MW6Z1H4pH4.roa (raw, json)
Hash identifier: xlaoPYnffjjIiCZs9L6qtRcBKBU4tGmtusLRUOzjEk8=
Subject key identifier: F3:8F:2E:69:82:3E:10:43:88:68:F7:63:D8:C5:BA:67:51:F8:A4:7E
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01903A8E2D9EE7E056A392E2DD35FBB43289
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/848uaYI-EEOIaPdj2MW6Z1H4pH4.roa
Signing time: Fri 21 Jun 2024 11:28:34 +0000
ROA not before: Fri 21 Jun 2024 11:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a07:6080::/32 maxlen: 32
2a07:6081::/32 maxlen: 32
2a07:6082::/32 maxlen: 32
2a07:6083::/32 maxlen: 32
2a07:6084::/32 maxlen: 32
2a07:6085::/32 maxlen: 32
2a07:6086::/32 maxlen: 32
2a07:6087::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:8e:2d:9e:e7:e0:56:a3:92:e2:dd:35:fb:b4:32:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 21 11:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f38f2e69823e10438868f763d8c5ba6751f8a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:b4:e6:bd:9e:97:7f:92:29:b2:33:56:1b:
94:34:d9:ef:5f:e4:f2:2c:58:e4:a9:0e:e4:35:5a:
27:70:34:2b:71:34:34:7f:10:17:88:d6:5d:ef:4f:
9b:ee:e4:a1:6c:63:4a:ed:bb:8c:f8:11:f1:fe:9e:
99:70:fc:1a:a9:e9:19:76:86:ef:9a:08:5e:17:cd:
10:d0:79:91:56:8a:72:1a:b4:43:59:0d:02:f7:50:
99:c1:aa:0e:1c:79:ec:88:97:9f:9d:fb:ee:f3:69:
ca:b4:2d:d7:2e:ad:50:11:04:6b:32:fe:5a:fd:47:
f8:4b:ec:0c:03:48:3c:06:57:a2:11:88:00:20:4a:
1c:ad:f9:47:5c:77:e8:4b:bc:4e:d1:19:b6:2c:ab:
4b:cc:8c:83:ce:80:fe:25:e5:45:0a:2a:49:20:e5:
bb:d8:90:d2:61:0d:44:0a:d0:07:73:44:7a:67:01:
d0:39:93:01:0c:f2:d7:55:34:35:b4:c0:52:f2:e2:
9c:ce:47:0a:58:16:8c:cf:c9:d5:2b:3a:fc:02:ee:
f9:1f:c1:5b:81:97:41:9d:6b:e8:aa:b4:4c:2a:72:
9f:d5:00:2b:86:82:98:ef:e3:59:92:4e:6e:47:2a:
9a:52:72:bd:5b:c5:00:a0:d4:f8:3f:a3:66:f5:88:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:2E:69:82:3E:10:43:88:68:F7:63:D8:C5:BA:67:51:F8:A4:7E
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/848uaYI-EEOIaPdj2MW6Z1H4pH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6080::/29
Signature Algorithm: sha256WithRSAEncryption
83:01:99:b1:31:f7:1d:76:a5:44:89:c8:3b:ee:c2:58:52:f8:
55:fd:6a:1f:54:2d:19:f3:2d:b7:9e:65:fe:8f:76:41:d9:28:
69:5c:8e:11:af:e5:b1:68:2d:40:79:21:e2:36:43:72:f1:40:
5a:2a:10:f2:d5:d4:4c:28:66:e1:af:c6:4a:86:3b:ce:1b:b0:
70:37:fd:f6:be:86:c5:97:5d:25:40:3d:84:b2:88:d9:02:38:
b2:0d:ae:90:a6:a9:93:7c:93:45:cc:bb:12:f9:1b:c2:12:a8:
cf:3f:2b:63:92:e7:e9:58:65:66:a8:c8:15:cb:99:aa:bd:ff:
64:d8:59:a2:0d:74:42:74:e3:4e:f6:e3:45:e8:87:21:7d:3d:
64:d1:ff:8a:2d:d4:09:9b:29:86:b7:b9:85:a1:7e:3e:97:d9:
6d:4b:52:86:4e:7d:53:14:cb:3d:22:34:dc:b2:e3:4d:6f:34:
8f:c2:3c:a0:e2:b7:25:26:6e:96:92:c2:b3:6b:eb:d2:b6:f7:
2c:7b:3d:1d:4a:82:b3:01:b0:fb:7c:3b:fa:84:93:1b:4b:36:
50:98:01:d2:7d:20:b1:5c:10:71:44:56:68:7c:2e:9e:80:41:
ca:0f:13:5c:ee:65:c9:60:5c:b1:41:10:9b:1e:4f:52:22:e9:
11:81:b4:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZA6ji2e5+BWo5Li3TX7tDKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjQwNjIxMTEyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzhmMmU2OTgyM2UxMDQzODg2OGY3NjNkOGM1YmE2NzUxZjhhNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr205r2el3+SKbIzVhuUNNnvX+Ty
LFjkqQ7kNVoncDQrcTQ0fxAXiNZd70+b7uShbGNK7buM+BHx/p6ZcPwaqekZdobv
mgheF80Q0HmRVopyGrRDWQ0C91CZwaoOHHnsiJefnfvu82nKtC3XLq1QEQRrMv5a
/Uf4S+wMA0g8BleiEYgAIEocrflHXHfoS7xO0Rm2LKtLzIyDzoD+JeVFCipJIOW7
2JDSYQ1ECtAHc0R6ZwHQOZMBDPLXVTQ1tMBS8uKczkcKWBaMz8nVKzr8Au75H8Fb
gZdBnWvoqrRMKnKf1QArhoKY7+NZkk5uRyqaUnK9W8UAoNT4P6Nm9Yga3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPOPLmmCPhBDiGj3Y9jFumdR+KR+MB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvODQ4dWFZSS1FRU9JYVBkajJNVzZaMUg0cEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgdggDAN
BgkqhkiG9w0BAQsFAAOCAQEAgwGZsTH3HXalRInIO+7CWFL4Vf1qH1QtGfMtt55l
/o92QdkoaVyOEa/lsWgtQHkh4jZDcvFAWioQ8tXUTChm4a/GSoY7zhuwcDf99r6G
xZddJUA9hLKI2QI4sg2ukKapk3yTRcy7EvkbwhKozz8rY5Ln6VhlZqjIFcuZqr3/
ZNhZog10QnTjTvbjReiHIX09ZNH/ii3UCZsphre5haF+PpfZbUtShk59UxTLPSI0
3LLjTW80j8I8oOK3JSZulpLCs2vr0rb3LHs9HUqCswGw+3w7+oSTG0s2UJgB0n0g
sVwQcURWaHwunoBByg8TXO5lyWBcsUEQmx5PUiLpEYG0vw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:20:05 2025 by rpki-client