Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/92FpVvVpLyuuy7DGy_ukLvyrq_E.roa
File: 92FpVvVpLyuuy7DGy_ukLvyrq_E.roa (raw, json)
Hash identifier: ASQRrTOXNEmFpAvXdmLT0UyXTZTu8zDiM3i6Zjl8mTg=
Subject key identifier: F7:61:69:56:F5:69:2F:2B:AE:CB:B0:C6:CB:FB:A4:2E:FC:AB:AB:F1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D3B28E23E451C1C0FA320DC1A52495D40
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/92FpVvVpLyuuy7DGy_ukLvyrq_E.roa
Signing time: Wed 24 Jan 2024 11:09:11 +0000
ROA not before: Wed 24 Jan 2024 11:09:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:2d02::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:28:e2:3e:45:1c:1c:0f:a3:20:dc:1a:52:49:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 24 11:09:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7616956f5692f2baecbb0c6cbfba42efcababf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:cb:98:7c:e9:28:89:4d:a0:25:4c:54:c1:
48:86:33:a7:95:53:61:92:c3:e1:41:fc:93:ed:e0:
1f:58:c7:11:87:24:fb:b8:cf:be:4f:a0:64:05:1a:
77:ca:05:73:4f:a3:a7:60:0a:81:66:31:d1:14:7c:
b9:e1:38:14:bc:0e:f8:bf:bb:42:b6:8e:0d:4e:99:
3f:31:d8:bd:98:ac:79:2a:8d:b9:87:51:e0:e0:82:
99:62:f3:f6:c4:c9:df:8c:b1:ab:43:e4:2a:c9:05:
ad:f6:1f:49:a7:e9:6c:68:24:39:10:32:ba:e7:db:
e3:c6:5c:f7:8a:6f:96:34:ca:14:f0:ea:82:07:2c:
33:d1:bb:11:a0:7e:9e:50:9d:8f:97:04:b4:49:88:
62:93:e7:dc:b3:77:6b:33:5b:93:be:b4:a9:73:e1:
76:3e:46:5d:9a:46:f4:d2:22:87:26:f2:7c:93:c4:
73:7c:c4:78:dc:e6:f8:c8:e0:e9:7d:9e:42:cc:73:
0f:97:57:fb:a8:13:71:9d:e3:a5:a0:16:6e:4b:7c:
a8:61:d7:9b:a5:44:b6:12:f9:2b:27:5e:ec:90:e0:
6c:03:9c:18:0b:33:b1:a1:93:cb:ff:60:cd:63:97:
ed:4d:49:5b:0b:f1:dc:c7:06:16:f1:64:7c:48:74:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:69:56:F5:69:2F:2B:AE:CB:B0:C6:CB:FB:A4:2E:FC:AB:AB:F1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/92FpVvVpLyuuy7DGy_ukLvyrq_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
b7:d1:76:68:45:ce:bf:0b:eb:7d:be:ec:8a:53:99:53:09:06:
5d:db:c3:d2:80:d9:dc:50:49:ef:34:43:c8:a8:22:88:07:22:
49:65:fa:65:0b:29:a7:6f:ec:70:bb:48:51:e3:e9:23:3b:9c:
5f:ba:e0:33:d3:8a:4b:bc:6b:d3:ce:c9:c9:48:5f:ba:03:c5:
0d:62:71:15:a4:bd:ef:7f:0e:1c:04:c3:5c:db:9d:a5:3a:70:
42:da:ea:ce:4a:7d:a4:36:fa:77:10:07:ea:59:29:38:99:ff:
85:6a:d5:6d:8b:0d:b2:ea:17:be:27:f9:5c:45:e1:d1:83:dc:
c9:d1:68:5c:46:60:24:a6:7f:4c:2a:6c:37:27:33:c9:22:0b:
3d:17:50:e4:35:06:85:a8:b8:03:b7:4d:f0:55:da:f0:51:07:
49:f1:1d:07:1a:2d:e5:df:f9:90:0e:4d:49:05:7c:62:d4:cb:
45:d1:81:86:98:57:8e:c4:d8:af:4a:9c:66:65:85:87:36:69:
5a:8d:76:5e:8f:28:bf:36:b5:84:cb:43:cf:d4:e6:88:95:39:
dc:c6:e0:20:a8:86:75:0a:90:10:9e:50:61:26:9c:78:b8:6b:
e3:f8:8c:12:88:76:dd:fb:8f:71:a9:6e:fc:25:48:e3:6b:e9:
5a:a8:2b:b3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY07KOI+RRwcD6Mg3BpSSV1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTI0MTEwOTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzYxNjk1NmY1NjkyZjJiYWVjYmIwYzZjYmZiYTQyZWZjYWJhYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg3LmHzpKIlNoCVMVMFIhjOnlVNh
ksPhQfyT7eAfWMcRhyT7uM++T6BkBRp3ygVzT6OnYAqBZjHRFHy54TgUvA74v7tC
to4NTpk/Mdi9mKx5Ko25h1Hg4IKZYvP2xMnfjLGrQ+QqyQWt9h9Jp+lsaCQ5EDK6
59vjxlz3im+WNMoU8OqCBywz0bsRoH6eUJ2PlwS0SYhik+fcs3drM1uTvrSpc+F2
PkZdmkb00iKHJvJ8k8RzfMR43Ob4yODpfZ5CzHMPl1f7qBNxneOloBZuS3yoYdeb
pUS2EvkrJ17skOBsA5wYCzOxoZPL/2DNY5ftTUlbC/HcxwYW8WR8SHSYvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPdhaVb1aS8rrsuwxsv7pC78q6vxMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOTJGcFZ2VnBMeXV1eTdER3lfdWtMdnlycV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgotAjAN
BgkqhkiG9w0BAQsFAAOCAQEAt9F2aEXOvwvrfb7silOZUwkGXdvD0oDZ3FBJ7zRD
yKgiiAciSWX6ZQspp2/scLtIUePpIzucX7rgM9OKS7xr087JyUhfugPFDWJxFaS9
738OHATDXNudpTpwQtrqzkp9pDb6dxAH6lkpOJn/hWrVbYsNsuoXvif5XEXh0YPc
ydFoXEZgJKZ/TCpsNyczySILPRdQ5DUGhai4A7dN8FXa8FEHSfEdBxot5d/5kA5N
SQV8YtTLRdGBhphXjsTYr0qcZmWFhzZpWo12Xo8ovza1hMtDz9TmiJU53MbgIKiG
dQqQEJ5QYSaceLhr4/iMEoh23fuPcalu/CVI42vpWqgrsw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:01:39 2025 by rpki-client