Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LHh5Xb7Epxs6lyZtGhRs2iaaF-M.roa
File: LHh5Xb7Epxs6lyZtGhRs2iaaF-M.roa (raw, json)
Hash identifier: b/DHbTFAplaqH/qfTFAy7LGryeFKABZ3fekgTCufbf8=
Subject key identifier: 2C:78:79:5D:BE:C4:A7:1B:3A:97:26:6D:1A:14:6C:DA:26:9A:17:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192993DCD336E0ECA884C3E9A23309CD70E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LHh5Xb7Epxs6lyZtGhRs2iaaF-M.roa
Signing time: Thu 17 Oct 2024 06:50:17 +0000
ROA not before: Thu 17 Oct 2024 06:50:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2106440
IP address blocks: 2a0f:4f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:3d:cd:33:6e:0e:ca:88:4c:3e:9a:23:30:9c:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 17 06:50:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c78795dbec4a71b3a97266d1a146cda269a17e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:9d:04:de:17:ff:e9:4c:c6:5d:4f:9a:05:
0b:c5:fa:72:69:5e:d1:28:42:97:6c:b2:a0:38:2a:
20:f2:dd:0d:15:fc:77:43:b3:90:c8:2d:70:a2:c1:
8e:e8:82:26:9f:e4:ed:60:f7:15:74:3e:42:c2:11:
b0:fa:32:88:b4:35:5f:79:dd:cb:aa:4b:09:80:32:
d9:2e:8e:6b:a8:f6:c2:b9:7e:8c:23:ce:03:f6:2b:
27:b9:8c:c1:c8:0e:1f:1f:51:7f:16:74:35:84:96:
47:63:1e:54:24:2b:9f:01:67:9b:b6:ec:56:a5:01:
43:8f:cd:32:ea:99:53:2e:60:e8:99:55:cf:a9:e2:
bc:64:1b:7c:c0:61:3c:d7:47:84:39:b1:08:fd:5a:
33:e6:e3:51:5b:f3:20:e7:39:86:81:16:b2:05:d7:
68:fd:3e:43:83:61:42:dc:d2:66:e0:f3:55:6b:76:
7a:7f:3f:4f:f4:c3:c4:54:26:0c:9c:06:7e:f5:ef:
ac:00:2f:8e:97:c5:a0:22:e0:36:10:f0:1c:c8:c7:
2c:e6:61:ef:73:6c:a2:b9:a8:a0:47:1f:7d:81:e5:
6f:a2:95:33:bf:de:02:2b:1e:5d:02:d7:a2:49:73:
95:e6:32:db:17:0c:fe:9f:c2:e7:fc:3e:c7:a7:3f:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:79:5D:BE:C4:A7:1B:3A:97:26:6D:1A:14:6C:DA:26:9A:17:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LHh5Xb7Epxs6lyZtGhRs2iaaF-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:22:85:07:38:f8:d2:54:68:9f:f5:e1:3f:67:03:b8:61:c9:
bc:82:dd:0d:f6:ad:7c:a2:57:4f:9f:78:15:90:92:2e:2c:3d:
54:44:99:d8:9c:76:f1:49:dd:f8:3c:07:b4:98:a4:e1:85:db:
b8:28:45:a8:34:b7:30:b8:4a:3c:49:cb:8d:01:3d:51:c0:81:
67:a8:c7:49:22:84:fa:5b:84:87:5c:f0:96:a5:45:41:1f:13:
fd:26:1e:38:b3:00:fd:27:16:03:f0:c2:be:82:48:e0:12:b1:
75:11:fa:7d:8b:13:fe:9d:85:05:39:0e:90:fc:15:2d:e4:50:
3d:24:28:59:63:bc:bc:41:08:ad:fe:c9:24:65:13:d4:e2:4e:
ae:d9:25:fc:c0:42:72:0a:36:f3:39:ee:0e:fe:f6:8b:b9:19:
d9:1f:bb:39:d1:8c:f4:7f:f0:0d:fe:eb:fc:72:66:17:02:3f:
92:66:98:b1:65:3c:e0:f3:25:85:14:46:25:7d:9e:29:48:ba:
46:98:f9:b6:01:f8:48:bf:5c:29:ab:dc:bb:f6:50:b1:3e:e1:
21:f4:72:4a:55:34:2b:67:5f:52:f2:a0:71:40:26:ea:e9:3c:
c2:2e:1a:72:38:01:04:72:c2:e2:9b:88:d1:03:3b:42:3a:10:
73:fa:6d:92
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZKZPc0zbg7KiEw+miMwnNcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMDE3MDY1MDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzc4Nzk1ZGJlYzRhNzFiM2E5NzI2NmQxYTE0NmNkYTI2OWExN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymydBN4X/+lMxl1PmgULxfpyaV7R
KEKXbLKgOCog8t0NFfx3Q7OQyC1wosGO6IImn+TtYPcVdD5CwhGw+jKItDVfed3L
qksJgDLZLo5rqPbCuX6MI84D9isnuYzByA4fH1F/FnQ1hJZHYx5UJCufAWebtuxW
pQFDj80y6plTLmDomVXPqeK8ZBt8wGE810eEObEI/Voz5uNRW/Mg5zmGgRayBddo
/T5Dg2FC3NJm4PNVa3Z6fz9P9MPEVCYMnAZ+9e+sAC+Ol8WgIuA2EPAcyMcs5mHv
c2yiuaigRx99geVvopUzv94CKx5dAteiSXOV5jLbFwz+n8Ln/D7Hpz/K/QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCx4eV2+xKcbOpcmbRoUbNommhfjMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTEhoNVhiN0VweHM2bHladEdoUnMyaWFhRi1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9PgDAN
BgkqhkiG9w0BAQsFAAOCAQEAoyKFBzj40lRon/XhP2cDuGHJvILdDfatfKJXT594
FZCSLiw9VESZ2Jx28Und+DwHtJik4YXbuChFqDS3MLhKPEnLjQE9UcCBZ6jHSSKE
+luEh1zwlqVFQR8T/SYeOLMA/ScWA/DCvoJI4BKxdRH6fYsT/p2FBTkOkPwVLeRQ
PSQoWWO8vEEIrf7JJGUT1OJOrtkl/MBCcgo28znuDv72i7kZ2R+7OdGM9H/wDf7r
/HJmFwI/kmaYsWU84PMlhRRGJX2eKUi6Rpj5tgH4SL9cKavcu/ZQsT7hIfRySlU0
K2dfUvKgcUAm6uk8wi4acjgBBHLC4puI0QM7QjoQc/ptkg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:18 2025 by rpki-client