Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/EwlmQN7sLkKgNJ5udHWtTU1fznM.roa
File: EwlmQN7sLkKgNJ5udHWtTU1fznM.roa (raw, json)
Hash identifier: HTAwp1rKurAVKX6lGbax5LhDcqRr5e08br3udtyCq/Y=
Subject key identifier: 13:09:66:40:DE:EC:2E:42:A0:34:9E:6E:74:75:AD:4D:4D:5F:CE:73
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 018CC727489F1D69ED6349030C22067CABEB
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/EwlmQN7sLkKgNJ5udHWtTU1fznM.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202039
IP address blocks: 2001:678:764::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:9f:1d:69:ed:63:49:03:0c:22:06:7c:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13096640deec2e42a0349e6e7475ad4d4d5fce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:78:9d:14:53:e9:0a:65:5a:c7:dd:53:4e:
30:fa:85:4a:f7:36:38:93:11:9e:2a:e1:77:4a:b1:
83:fd:bb:20:09:1a:34:e3:b8:49:28:f6:43:f3:50:
d0:b3:d4:25:e3:9a:4f:37:b3:51:4f:ae:04:b5:a3:
45:a6:b7:b1:89:7f:8c:96:0c:cd:77:ab:f6:0e:ca:
0a:52:e8:aa:e0:d0:c5:46:95:43:bc:e5:0c:b7:97:
1d:fd:ba:12:ba:f8:d0:ba:ab:f2:4a:01:92:54:ae:
55:c0:58:00:8b:f6:df:fd:d6:d9:7f:8b:fe:0a:cc:
a8:25:9c:8f:74:d6:54:29:05:62:e8:3a:65:74:2b:
60:47:82:2f:ee:7d:91:e5:f6:1a:cd:e8:95:81:a4:
2b:ea:38:a2:a7:85:44:73:d8:32:81:4a:9a:54:34:
6a:af:5b:00:79:ba:08:ea:49:4b:7b:a3:91:4e:80:
c7:d4:12:09:6d:37:ff:a0:c5:e4:5d:f8:22:3f:0d:
4e:33:5a:0e:e5:9a:8c:2f:28:f6:9d:78:ee:64:b7:
cc:90:ea:6f:30:92:40:ad:e1:ed:a5:c7:c3:6f:83:
a6:b2:2b:32:d4:d1:58:46:10:4a:5f:a3:90:93:19:
a5:29:ae:f0:6f:b1:39:28:a6:3a:24:f2:75:48:64:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:66:40:DE:EC:2E:42:A0:34:9E:6E:74:75:AD:4D:4D:5F:CE:73
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/EwlmQN7sLkKgNJ5udHWtTU1fznM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:764::/48
Signature Algorithm: sha256WithRSAEncryption
83:47:d4:ce:f1:a2:46:69:20:02:4a:42:47:24:6b:1d:43:55:
0f:cc:89:c1:9c:73:54:34:4b:bb:37:fe:22:db:31:11:de:d6:
aa:5f:d8:01:8b:81:f6:86:30:8e:62:2d:7d:28:45:e2:6d:70:
f1:99:d6:c6:7b:33:c8:ce:65:16:8d:d0:1f:47:41:0a:f9:1f:
ac:1c:1e:dd:cd:15:85:fd:58:d9:99:3f:73:64:9a:18:05:ac:
96:d4:13:40:b2:38:fb:60:18:41:ae:7b:f4:48:0b:62:11:85:
14:58:eb:a1:3f:8e:98:95:b4:b8:ea:87:58:61:cd:0e:c5:e0:
a2:97:c5:8e:37:e2:d6:57:8d:65:b0:6d:ed:15:33:94:7a:21:
6a:27:dd:aa:11:0a:4e:29:19:30:f0:6e:db:e0:5e:63:6a:15:
c6:f4:18:57:f4:cd:c6:da:e9:28:1d:3e:4a:b3:24:05:f6:d3:
81:b7:db:39:b9:1e:b6:b1:36:93:f6:bf:c1:02:ea:37:38:12:
74:08:3f:0a:17:7f:f4:57:f9:80:a8:12:99:e6:6a:01:1c:13:
07:cf:e9:f3:33:2b:7d:3b:6f:e8:71:ff:16:51:2a:14:70:07:
0e:f9:54:e1:10:16:35:bc:a5:f6:f6:76:cc:c7:05:04:fb:16:
51:59:f1:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzHJ0ifHWntY0kDDCIGfKvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjQwMTAxMjIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzA5NjY0MGRlZWMyZTQyYTAzNDllNmU3NDc1YWQ0ZDRkNWZjZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFB4nRRT6QplWsfdU04w+oVK9zY4
kxGeKuF3SrGD/bsgCRo047hJKPZD81DQs9Ql45pPN7NRT64EtaNFprexiX+MlgzN
d6v2DsoKUuiq4NDFRpVDvOUMt5cd/boSuvjQuqvySgGSVK5VwFgAi/bf/dbZf4v+
CsyoJZyPdNZUKQVi6DpldCtgR4Iv7n2R5fYazeiVgaQr6jiip4VEc9gygUqaVDRq
r1sAeboI6klLe6ORToDH1BIJbTf/oMXkXfgiPw1OM1oO5ZqMLyj2nXjuZLfMkOpv
MJJAreHtpcfDb4Omsisy1NFYRhBKX6OQkxmlKa7wb7E5KKY6JPJ1SGTH9wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBMJZkDe7C5CoDSebnR1rU1NX85zMB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvRXdsbVFON3NMa0tnTko1dWRIV3RUVTFmem5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAdk
MA0GCSqGSIb3DQEBCwUAA4IBAQCDR9TO8aJGaSACSkJHJGsdQ1UPzInBnHNUNEu7
N/4i2zER3taqX9gBi4H2hjCOYi19KEXibXDxmdbGezPIzmUWjdAfR0EK+R+sHB7d
zRWF/VjZmT9zZJoYBayW1BNAsjj7YBhBrnv0SAtiEYUUWOuhP46YlbS46odYYc0O
xeCil8WON+LWV41lsG3tFTOUeiFqJ92qEQpOKRkw8G7b4F5jahXG9BhX9M3G2uko
HT5KsyQF9tOBt9s5uR62sTaT9r/BAuo3OBJ0CD8KF3/0V/mAqBKZ5moBHBMHz+nz
Myt9O2/ocf8WUSoUcAcO+VThEBY1vKX29nbMxwUE+xZRWfEX
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:06:36 2025 by rpki-client