Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/owNa7_hKMn6F4QKOGsobxkTqAsY.roa
File: owNa7_hKMn6F4QKOGsobxkTqAsY.roa (raw, json)
Hash identifier: 2SRaS5PFs0j3ItgZlWvy+JM1xkkN0tmgKgsNg1+p/l4=
Subject key identifier: A3:03:5A:EF:F8:4A:32:7E:85:E1:02:8E:1A:CA:1B:C6:44:EA:02:C6
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 018CC8712B1B191DC65658D7CA9F6F850D01
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/owNa7_hKMn6F4QKOGsobxkTqAsY.roa
Signing time: Tue 02 Jan 2024 04:31:48 +0000
ROA not before: Tue 02 Jan 2024 04:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56997
IP address blocks: 2001:67c:a00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:2b:1b:19:1d:c6:56:58:d7:ca:9f:6f:85:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: Jan 2 04:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3035aeff84a327e85e1028e1aca1bc644ea02c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:7c:fa:30:63:db:6d:a2:75:51:83:42:41:
26:8e:7b:6a:6d:fa:0a:0d:96:a4:75:2f:93:b6:83:
03:c0:7a:43:80:d0:2a:7a:f4:7b:54:20:83:51:97:
1e:03:ea:4d:93:45:24:0a:3f:26:3e:e0:41:06:ae:
0b:a8:7c:6a:81:75:b4:1d:92:b5:16:ac:ea:9e:15:
43:2a:fc:c0:f3:ea:92:41:ab:a5:2e:11:b4:41:16:
77:cb:78:8d:48:96:fa:f0:85:6a:e9:7e:a6:37:aa:
18:84:6d:d8:6f:b4:2a:b1:b3:af:e2:22:88:8a:89:
10:9e:a8:2b:5b:e8:8a:f2:e2:70:72:2b:e4:78:7f:
14:d6:4c:e0:22:88:e1:8c:27:53:a1:ea:13:b3:b3:
a8:ca:69:a4:48:05:b8:76:ac:21:67:c0:cc:c6:e1:
d7:59:ba:09:c8:4b:9e:5e:ea:69:5f:a3:80:13:ba:
8f:dd:8c:6c:d8:76:83:1b:5e:4f:86:fd:33:f3:35:
77:46:59:18:e0:bf:31:60:6e:c5:5c:a2:2e:ba:48:
a1:30:0f:b4:b0:6a:f6:2f:19:d1:22:fb:f3:2b:a4:
85:06:81:e2:b5:e3:43:b3:e2:be:84:ef:67:29:88:
29:d7:e7:83:7f:92:98:1b:9c:08:58:28:88:3b:9f:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:03:5A:EF:F8:4A:32:7E:85:E1:02:8E:1A:CA:1B:C6:44:EA:02:C6
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/owNa7_hKMn6F4QKOGsobxkTqAsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a00::/48
Signature Algorithm: sha256WithRSAEncryption
5a:ee:6c:8a:ff:70:0a:86:f8:ba:dd:52:c5:df:2f:dd:7d:dd:
87:b4:34:1b:58:db:10:7a:8d:8f:af:f9:08:77:40:68:d7:de:
50:d3:b9:2a:a2:0f:be:11:47:8e:31:16:89:af:57:55:4c:45:
f9:86:db:ad:fd:e9:bf:76:8d:ff:12:0c:2d:9a:37:27:b3:95:
a9:9e:f0:b7:62:37:1c:81:b2:c0:85:58:cc:30:04:8c:23:50:
71:6c:56:0a:76:be:fe:d3:cf:f3:b1:ef:c2:a6:5d:7a:87:d1:
3f:99:f2:33:5e:3b:63:a0:6b:6e:3e:be:50:59:c6:c7:1d:93:
81:b9:e7:8a:82:0f:6c:98:2e:f1:4a:27:8c:48:36:d1:77:23:
29:98:01:1d:93:34:fb:a2:e6:7b:e8:92:d9:3d:f9:d7:fd:03:
e2:60:d2:e6:39:42:c1:0d:1a:64:6c:70:5a:cc:81:11:7e:93:
05:0d:41:87:9b:c2:5e:fe:b0:8e:fa:0e:8d:ee:93:c9:1e:63:
18:2b:b5:17:e3:d9:23:da:31:38:af:60:f8:1f:61:a5:c6:07:
2e:2a:a7:d7:c5:70:53:fa:5b:24:02:8d:76:5c:34:1a:c1:d1:
5e:91:09:a1:87:bc:d8:f2:5e:e9:94:ca:90:e6:65:86:74:a4:
8d:93:79:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIcSsbGR3GVljXyp9vhQ0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTEwYjY1MWJmYmRmMDljODQ4NmE4MTM2MjAwMDA1YmVm
YjQ5N2QwHhcNMjQwMTAyMDQzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzAzNWFlZmY4NGEzMjdlODVlMTAyOGUxYWNhMWJjNjQ0ZWEwMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/V8+jBj222idVGDQkEmjntqbfoK
DZakdS+TtoMDwHpDgNAqevR7VCCDUZceA+pNk0UkCj8mPuBBBq4LqHxqgXW0HZK1
FqzqnhVDKvzA8+qSQaulLhG0QRZ3y3iNSJb68IVq6X6mN6oYhG3Yb7QqsbOv4iKI
iokQnqgrW+iK8uJwcivkeH8U1kzgIojhjCdToeoTs7OoymmkSAW4dqwhZ8DMxuHX
WboJyEueXuppX6OAE7qP3Yxs2HaDG15Phv0z8zV3RlkY4L8xYG7FXKIuukihMA+0
sGr2LxnRIvvzK6SFBoHiteNDs+K+hO9nKYgp1+eDf5KYG5wIWCiIO5/QkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKMDWu/4SjJ+heECjhrKG8ZE6gLGMB8GA1UdIwQY
MBaAFLdRC2Ub+98JyEhqgTYgAAW++0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjct
MmNiODg3N2ZkOTcwLzEvb3dOYTdfaEtNbjZGNFFLT0dzb2J4a1RxQXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iZmYxYzMtMDA4NC00MmJiLWJjZjctMmNiODg3N2ZkOTcw
LzEvdDFFTFpSdjczd25JU0dxQk5pQUFCYjc3U1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAoA
MA0GCSqGSIb3DQEBCwUAA4IBAQBa7myK/3AKhvi63VLF3y/dfd2HtDQbWNsQeo2P
r/kId0Bo195Q07kqog++EUeOMRaJr1dVTEX5htut/em/do3/Egwtmjcns5WpnvC3
YjccgbLAhVjMMASMI1BxbFYKdr7+08/zse/Cpl16h9E/mfIzXjtjoGtuPr5QWcbH
HZOBueeKgg9smC7xSieMSDbRdyMpmAEdkzT7ouZ76JLZPfnX/QPiYNLmOULBDRpk
bHBazIERfpMFDUGHm8Je/rCO+g6N7pPJHmMYK7UX49kj2jE4r2D4H2GlxgcuKqfX
xXBT+lskAo12XDQawdFekQmhh7zY8l7plMqQ5mWGdKSNk3kN
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:15 2025 by rpki-client