Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JeTSv81DSgNZXAJqddzGbQncmZw.roa
File: JeTSv81DSgNZXAJqddzGbQncmZw.roa (raw, json)
Hash identifier: PhkcYtAP9vgdv34EQwmmyji8OrpKn/WLO/zcAE5saO4=
Subject key identifier: 25:E4:D2:BF:CD:43:4A:03:59:5C:02:6A:75:DC:C6:6D:09:DC:99:9C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019197A1B5C4CED0A963FE33D11F41BECFBF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JeTSv81DSgNZXAJqddzGbQncmZw.roa
Signing time: Wed 28 Aug 2024 06:17:22 +0000
ROA not before: Wed 28 Aug 2024 06:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d05:bc34::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0f:ee00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Aug 2024 14:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:a1:b5:c4:ce:d0:a9:63:fe:33:d1:1f:41:be:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 06:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25e4d2bfcd434a03595c026a75dcc66d09dc999c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:63:ec:0c:4c:62:c1:1a:2e:fa:7d:b5:a9:
dc:f7:80:1f:86:89:41:01:65:2a:ae:11:e9:41:e6:
13:57:ce:a7:ed:40:22:1a:8c:ba:88:f4:f9:19:40:
3e:18:22:61:04:0b:e5:9e:a4:68:cb:81:1d:fa:8e:
93:7b:97:47:bc:8d:12:00:00:f7:31:2b:67:73:bf:
05:de:2c:17:16:13:32:2c:bc:b4:8a:e2:92:1a:f6:
9a:d7:59:2a:6f:46:ff:bc:76:e0:67:e2:0f:cb:e8:
ee:5f:5a:e7:e2:65:d4:4e:15:b8:97:b4:55:ae:72:
ff:68:94:b6:2a:99:3e:ae:1c:a3:e0:96:b0:8d:c5:
41:dd:26:b1:c1:4e:6c:f1:d5:cf:00:e8:3a:30:2e:
19:b5:9b:d1:2e:ab:8d:42:34:b6:fa:01:03:97:a4:
e1:ca:5d:af:9b:96:95:46:f5:6a:35:be:b3:1d:f4:
84:50:fb:55:db:bc:c6:0e:02:2f:e6:17:0f:37:06:
a0:56:b1:d6:73:12:41:ab:7e:d9:38:1d:f6:1a:2c:
c9:64:39:00:9f:39:90:c3:8a:6d:b0:af:ec:cc:8a:
ac:56:3c:2a:bf:22:ef:49:c7:d6:e1:7f:3b:f3:61:
cf:51:81:b6:d1:77:a0:0e:ca:03:9e:aa:0d:fb:20:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:D2:BF:CD:43:4A:03:59:5C:02:6A:75:DC:C6:6D:09:DC:99:9C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JeTSv81DSgNZXAJqddzGbQncmZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d05:bc34::/48
2a0a:2d06:66::/48
2a0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
21:0d:cb:94:00:9d:95:d4:36:36:c1:25:cf:ea:97:75:13:5b:
f2:0f:19:3c:ff:36:77:8b:88:c3:95:4b:2c:2d:aa:d9:95:c8:
1e:4e:26:5d:a6:d4:54:55:c4:77:2d:ec:48:90:70:73:01:4a:
5e:e9:45:e9:7b:52:6f:cd:d3:a3:f8:42:59:02:98:c1:51:c5:
4c:ee:f0:03:e4:32:5f:49:4e:f2:e8:f8:4a:cf:4c:f2:cc:ae:
7f:03:37:e6:c0:db:56:6d:06:d5:43:e9:40:b1:df:14:95:44:
cd:39:7c:54:3a:16:fb:f8:46:25:a6:29:ad:17:c6:4e:4d:6f:
7a:c2:29:8f:ae:09:af:98:2f:cc:fb:cc:0f:58:f3:39:f2:eb:
7b:08:13:2e:dc:7e:fc:28:80:2d:a8:24:4f:44:27:0c:38:97:
8c:33:7c:0f:a0:77:05:bb:49:6a:e7:58:9c:0b:94:c2:be:10:
fc:f5:26:ae:34:44:0d:44:84:ae:66:21:c9:a5:71:8f:1b:55:
d4:23:f2:8f:2d:97:22:56:7e:95:0c:cf:ac:78:5a:03:a6:68:
e4:8a:27:e9:8d:08:e8:08:30:b6:85:0b:2e:e1:e9:3c:59:59:
0a:8d:33:75:46:bf:96:fa:5a:47:05:df:f9:82:3d:43:0d:d5:
5a:6e:c6:40
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZGXobXEztCpY/4z0R9Bvs+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODI4MDYxNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWU0ZDJiZmNkNDM0YTAzNTk1YzAyNmE3NWRjYzY2ZDA5ZGM5OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9tj7AxMYsEaLvp9tanc94AfholB
AWUqrhHpQeYTV86n7UAiGoy6iPT5GUA+GCJhBAvlnqRoy4Ed+o6Te5dHvI0SAAD3
MStnc78F3iwXFhMyLLy0iuKSGvaa11kqb0b/vHbgZ+IPy+juX1rn4mXUThW4l7RV
rnL/aJS2Kpk+rhyj4JawjcVB3SaxwU5s8dXPAOg6MC4ZtZvRLquNQjS2+gEDl6Th
yl2vm5aVRvVqNb6zHfSEUPtV27zGDgIv5hcPNwagVrHWcxJBq37ZOB32GizJZDkA
nzmQw4ptsK/szIqsVjwqvyLvScfW4X8782HPUYG20XegDsoDnqoN+yARLwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFCXk0r/NQ0oDWVwCanXcxm0J3JmcMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSmVUU3Y4MURTZ05aWEFKcWRkekdiUW5jbVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwcAKgotBbw0
AwcAKgotBgBmAwUAKg/uADANBgkqhkiG9w0BAQsFAAOCAQEAIQ3LlACdldQ2NsEl
z+qXdRNb8g8ZPP82d4uIw5VLLC2q2ZXIHk4mXabUVFXEdy3sSJBwcwFKXulF6XtS
b83To/hCWQKYwVHFTO7wA+QyX0lO8uj4Ss9M8syufwM35sDbVm0G1UPpQLHfFJVE
zTl8VDoW+/hGJaYprRfGTk1vesIpj64Jr5gvzPvMD1jzOfLrewgTLtx+/CiALagk
T0QnDDiXjDN8D6B3BbtJaudYnAuUwr4Q/PUmrjREDUSErmYhyaVxjxtV1CPyjy2X
IlZ+lQzPrHhaA6Zo5Ion6Y0I6AgwtoULLuHpPFlZCo0zdUa/lvpaRwXf+YI9Qw3V
Wm7GQA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:35:15 2025 by rpki-client