Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3QhEdudiz9KVK1Intgj6Du2o9zg.roa
File: 3QhEdudiz9KVK1Intgj6Du2o9zg.roa (raw, json)
Hash identifier: jvlEARbtFB7g1CMvwh8vRpV4HnGlR5WNorVegZUYLqg=
Subject key identifier: DD:08:44:76:E7:62:CF:D2:95:2B:52:27:B6:08:FA:0E:ED:A8:F7:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192522C0331ECF42B65ED3C0359B6BC6DBA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3QhEdudiz9KVK1Intgj6Du2o9zg.roa
Signing time: Thu 03 Oct 2024 11:37:49 +0000
ROA not before: Thu 03 Oct 2024 11:37:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:2d02::/32 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Nov 2024 14:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:2c:03:31:ec:f4:2b:65:ed:3c:03:59:b6:bc:6d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 3 11:37:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd084476e762cfd2952b5227b608fa0eeda8f738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:97:ae:f5:63:10:9f:4c:8c:dd:94:67:2b:
32:5c:d2:90:83:7d:f3:9b:f1:33:c2:7b:a5:5f:dd:
7d:cd:33:5a:7e:a6:a0:db:1b:66:c0:6a:ff:05:e3:
d1:60:be:96:49:8d:7b:2f:ad:30:01:85:78:a4:57:
02:59:0e:91:c8:e5:ce:04:af:20:a1:28:1a:0c:cb:
ce:84:c5:59:79:c7:15:69:ae:d7:2a:b4:8f:6a:f6:
81:f9:dd:64:a6:a4:40:df:26:87:3a:36:85:b2:bd:
99:cb:33:83:68:39:e6:93:b6:15:b2:50:b9:56:3e:
ed:e2:e1:4d:dc:a9:af:15:ec:45:ab:c2:e9:46:7a:
95:5b:b5:2b:e8:89:c8:4a:c1:0c:3e:0b:17:77:d7:
a6:40:dd:db:2b:fa:77:fb:99:6b:62:2a:a4:e7:2f:
50:a4:13:1f:54:ef:c4:95:52:85:6f:13:5f:48:cb:
fd:41:d0:82:63:fb:fd:0c:ea:72:38:01:3d:22:62:
b3:f2:09:c3:c2:2d:08:5a:48:f9:d2:73:44:58:42:
a1:6f:26:47:e2:11:3b:3b:ad:23:fe:4d:01:bd:0a:
94:3f:76:b0:4b:fc:49:19:58:88:39:cc:d2:17:a6:
f4:6a:58:30:e9:6a:ef:b8:5f:fd:6b:02:5c:52:56:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:44:76:E7:62:CF:D2:95:2B:52:27:B6:08:FA:0E:ED:A8:F7:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3QhEdudiz9KVK1Intgj6Du2o9zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0f:3d80:123::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c5:86:21:54:36:8f:12:1e:95:10:0b:77:27:5a:3c:ef:65:
7c:0d:de:31:a4:7a:a1:93:1d:49:87:2d:d1:9b:7a:08:e8:7b:
01:7b:0e:78:1c:20:b1:4c:cc:2a:47:21:31:26:28:34:03:09:
b3:47:8e:a9:c5:20:86:ae:b4:49:66:79:30:b7:c1:b9:dd:49:
8a:83:8a:02:6b:ea:b6:9f:bf:c5:80:9b:1d:40:81:4a:57:31:
f1:d4:09:23:33:29:db:6c:33:cb:82:a3:b9:c2:4a:14:1b:1a:
7b:31:b8:77:cc:c1:1f:f6:87:e8:3d:0f:80:48:bf:33:08:8e:
f3:34:14:7f:1a:1f:a7:ca:05:a4:1e:71:65:6c:82:f0:56:3e:
c3:d3:95:33:42:9a:4b:bb:55:87:a9:22:e4:ab:63:fa:27:64:
04:b0:b2:2b:15:0c:b1:c6:06:62:ac:3c:77:90:12:f4:50:c5:
d4:e8:39:d0:8e:4a:6b:bd:31:19:da:35:6c:dd:c4:2b:c9:69:
f4:26:8c:00:46:e3:00:07:0e:31:0b:64:3f:ee:47:82:9b:ac:
23:74:61:fd:8d:a0:ac:44:64:67:a3:fd:e2:a6:53:50:2a:93:
2d:89:bd:62:cf:74:c5:ca:70:81:47:f1:54:19:2b:97:cb:7f:
f1:3c:e6:14
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZJSLAMx7PQrZe08A1m2vG26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMDAzMTEzNzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDA4NDQ3NmU3NjJjZmQyOTUyYjUyMjdiNjA4ZmEwZWVkYThmNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39mXrvVjEJ9MjN2UZysyXNKQg33z
m/EzwnulX919zTNafqag2xtmwGr/BePRYL6WSY17L60wAYV4pFcCWQ6RyOXOBK8g
oSgaDMvOhMVZeccVaa7XKrSPavaB+d1kpqRA3yaHOjaFsr2ZyzODaDnmk7YVslC5
Vj7t4uFN3KmvFexFq8LpRnqVW7Ur6InISsEMPgsXd9emQN3bK/p3+5lrYiqk5y9Q
pBMfVO/ElVKFbxNfSMv9QdCCY/v9DOpyOAE9ImKz8gnDwi0IWkj50nNEWEKhbyZH
4hE7O60j/k0BvQqUP3awS/xJGViIOczSF6b0algw6WrvuF/9awJcUlYH5wIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFN0IRHbnYs/SlStSJ7YI+g7tqPc4MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvM1FoRWR1ZGl6OUtWSzFJbnRnajZEdTJvOXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAKgotAgMH
ACoPPYABIzANBgkqhkiG9w0BAQsFAAOCAQEAb8WGIVQ2jxIelRALdydaPO9lfA3e
MaR6oZMdSYct0Zt6COh7AXsOeBwgsUzMKkchMSYoNAMJs0eOqcUghq60SWZ5MLfB
ud1JioOKAmvqtp+/xYCbHUCBSlcx8dQJIzMp22wzy4KjucJKFBsaezG4d8zBH/aH
6D0PgEi/MwiO8zQUfxofp8oFpB5xZWyC8FY+w9OVM0KaS7tVh6ki5Ktj+idkBLCy
KxUMscYGYqw8d5AS9FDF1Og50I5Ka70xGdo1bN3EK8lp9CaMAEbjAAcOMQtkP+5H
gpusI3Rh/Y2grERkZ6P94qZTUCqTLYm9Ys90xcpwgUfxVBkrl8t/8TzmFA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:41 2025 by rpki-client