Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8YOxWNVoNOryl42EoIWLDPR4-KU.roa
File: 8YOxWNVoNOryl42EoIWLDPR4-KU.roa (raw, json)
Hash identifier: RseXBIgnMrD/Xn90SAbE5N52LeN7iKeTyZskE77kKPM=
Subject key identifier: F1:83:B1:58:D5:68:34:EA:F2:97:8D:84:A0:85:8B:0C:F4:78:F8:A5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018FF71FCE0F94F6120FCF683D5B9C371364
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8YOxWNVoNOryl42EoIWLDPR4-KU.roa
Signing time: Sat 08 Jun 2024 09:13:27 +0000
ROA not before: Sat 08 Jun 2024 09:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 2a07:8a40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 10:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f7:1f:ce:0f:94:f6:12:0f:cf:68:3d:5b:9c:37:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 8 09:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f183b158d56834eaf2978d84a0858b0cf478f8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:1b:75:2a:42:2c:f9:0a:3e:16:5b:29:e8:
ca:c3:22:e6:3d:16:e0:32:eb:04:c8:35:5c:19:47:
6e:7f:83:08:4b:3f:1d:d2:ae:38:94:cc:5e:da:a1:
7f:80:d4:58:f3:7c:3c:ec:ab:9c:3b:35:89:67:8e:
bf:cd:51:ef:8d:fd:9a:e4:ec:8a:af:79:8d:60:e2:
1a:5a:a8:50:56:81:83:cf:57:ff:e8:d2:a7:48:e6:
36:fd:38:e4:b2:1b:43:8c:e5:21:c0:0e:f4:0e:8f:
5f:09:23:88:f5:0b:6f:a8:a2:aa:c8:0b:0f:98:cd:
84:cd:e5:56:60:98:d1:3a:c1:96:3c:b3:a7:e3:0f:
b1:08:bd:ed:ef:41:17:b9:00:cc:22:9b:c2:6e:28:
f6:45:d2:37:63:65:60:80:4c:c0:76:cf:6e:da:c4:
9f:dc:c6:14:e0:af:de:11:30:69:d8:fc:10:ae:54:
fd:bf:d5:e1:c7:81:44:51:70:ce:ea:f6:56:bf:e5:
c0:39:db:49:27:1a:da:85:54:3f:b5:d1:0d:35:cb:
78:fe:53:e9:7a:5d:50:0a:05:21:61:96:03:bb:df:
71:13:85:61:3f:2a:45:01:38:8a:74:c9:b8:c6:6f:
2a:ee:13:5d:39:19:3d:aa:d2:78:5b:21:3b:5a:ab:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:B1:58:D5:68:34:EA:F2:97:8D:84:A0:85:8B:0C:F4:78:F8:A5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8YOxWNVoNOryl42EoIWLDPR4-KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
3f:29:7c:8e:cf:0d:1c:57:f2:a4:70:65:56:e5:35:fa:90:27:
dc:73:4e:45:2f:94:5f:28:6d:27:2c:a1:45:cd:bc:e4:dc:57:
18:0c:a5:85:6c:0c:c0:0e:d9:d5:20:e3:3d:cd:a0:00:ce:3b:
6f:a3:11:c8:bf:09:bd:c4:5a:d9:15:23:2c:23:71:12:a5:38:
53:9e:8a:c1:39:bb:f2:3d:e5:ad:be:5b:61:fb:d6:c8:a2:f6:
b6:d5:c6:dc:43:b2:c8:1c:de:84:8b:1d:b5:d5:57:00:de:a1:
39:64:01:08:22:2f:7e:6d:ed:38:59:d2:be:7f:33:2d:ab:4d:
af:b4:3b:e1:12:b7:b2:42:a8:30:c1:d9:64:31:12:9e:0f:a2:
70:47:60:7e:ba:98:d2:2c:23:49:08:3f:9d:50:f8:1d:fc:21:
f3:76:af:e2:19:1d:13:9b:87:1f:2d:60:a2:18:71:c3:84:b2:
94:d6:c2:15:5c:e2:e0:ea:cd:d9:19:cf:97:49:e7:93:b5:5d:
3d:5f:96:06:b1:cd:b5:0a:4d:ef:dd:4d:f8:91:70:a6:5c:46:
db:a0:1d:c6:09:af:df:38:ff:59:39:4a:db:14:a3:51:05:ac:
db:39:fd:ea:55:6f:6c:aa:e3:7a:ab:3c:dd:48:39:20:03:29:
35:03:38:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY/3H84PlPYSD89oPVucNxNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNjA4MDkxMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTgzYjE1OGQ1NjgzNGVhZjI5NzhkODRhMDg1OGIwY2Y0NzhmOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizAbdSpCLPkKPhZbKejKwyLmPRbg
MusEyDVcGUduf4MISz8d0q44lMxe2qF/gNRY83w87KucOzWJZ46/zVHvjf2a5OyK
r3mNYOIaWqhQVoGDz1f/6NKnSOY2/TjkshtDjOUhwA70Do9fCSOI9QtvqKKqyAsP
mM2EzeVWYJjROsGWPLOn4w+xCL3t70EXuQDMIpvCbij2RdI3Y2VggEzAds9u2sSf
3MYU4K/eETBp2PwQrlT9v9Xhx4FEUXDO6vZWv+XAOdtJJxrahVQ/tdENNct4/lPp
el1QCgUhYZYDu99xE4VhPypFATiKdMm4xm8q7hNdORk9qtJ4WyE7Wqum8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPGDsVjVaDTq8peNhKCFiwz0ePilMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOFlPeFdOVm9OT3J5bDQyRW9JV0xEUFI0LUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgeKQDAN
BgkqhkiG9w0BAQsFAAOCAQEAPyl8js8NHFfypHBlVuU1+pAn3HNORS+UXyhtJyyh
Rc285NxXGAylhWwMwA7Z1SDjPc2gAM47b6MRyL8JvcRa2RUjLCNxEqU4U56KwTm7
8j3lrb5bYfvWyKL2ttXG3EOyyBzehIsdtdVXAN6hOWQBCCIvfm3tOFnSvn8zLatN
r7Q74RK3skKoMMHZZDESng+icEdgfrqY0iwjSQg/nVD4Hfwh83av4hkdE5uHHy1g
ohhxw4SylNbCFVzi4OrN2RnPl0nnk7VdPV+WBrHNtQpN791N+JFwplxG26Adxgmv
3zj/WTlK2xSjUQWs2zn96lVvbKrjeqs83Ug5IAMpNQM46g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:18 2025 by rpki-client