Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/biuKKSlpq2-0RaoYRYP3AD6Vk6U.roa
File: biuKKSlpq2-0RaoYRYP3AD6Vk6U.roa (raw, json)
Hash identifier: yJWPc9hb1eey4B9G2ddUZ0sHk7a9RfZbK2gNHBvf7bc=
Subject key identifier: 6E:2B:8A:29:29:69:AB:6F:B4:45:AA:18:45:83:F7:00:3E:95:93:A5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190DE4715D5A231E02D6D4E7E749F1E3BAC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/biuKKSlpq2-0RaoYRYP3AD6Vk6U.roa
Signing time: Tue 23 Jul 2024 06:28:38 +0000
ROA not before: Tue 23 Jul 2024 06:28:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151814
IP address blocks: 2a0f:c400::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Aug 2024 08:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:47:15:d5:a2:31:e0:2d:6d:4e:7e:74:9f:1e:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 23 06:28:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e2b8a292969ab6fb445aa184583f7003e9593a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:88:26:b2:5f:2e:83:52:f8:13:7c:13:0e:
9d:0e:3c:6b:e8:d7:7e:4d:0c:c2:1c:fd:b7:bd:dd:
b0:bb:88:ec:b9:15:bc:f0:12:b4:a8:78:c8:8b:0c:
6f:ab:ee:53:b2:f6:43:f8:72:f9:8c:a7:94:d8:f5:
f0:a7:d6:a0:f1:a6:7d:27:23:1c:ad:aa:d8:18:9f:
38:d2:31:35:fb:d6:84:81:78:93:0f:06:f1:40:60:
36:88:b9:50:57:29:d4:cc:45:a7:44:69:0e:8b:81:
35:54:d1:0c:c3:32:d7:b3:0f:58:3c:6b:ae:64:52:
4b:cf:1b:c3:55:c0:95:5c:8f:47:79:5c:11:d9:8a:
41:43:33:09:ea:86:04:a7:e8:35:e1:ea:7c:f6:01:
f9:7e:54:14:60:fc:ec:4e:3b:ec:67:15:e0:2a:a9:
27:63:bd:d8:18:25:61:c3:24:35:93:59:03:3d:f7:
c5:b3:ac:ac:aa:d9:80:d5:a3:67:09:ba:f7:55:1c:
df:c6:02:9e:33:04:67:ec:f7:a0:d0:b8:13:b5:24:
1a:c1:2a:50:8a:d8:eb:cd:c9:d9:a9:a7:f9:6c:45:
c9:8e:cd:0e:93:66:b3:c8:63:91:ff:30:77:ff:ae:
dd:2f:3a:47:c0:36:74:d8:41:03:29:d8:5c:d4:7c:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:8A:29:29:69:AB:6F:B4:45:AA:18:45:83:F7:00:3E:95:93:A5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/biuKKSlpq2-0RaoYRYP3AD6Vk6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c400::/29
2a0f:dec0::/29
2a0f:e540::/29
2a12:d5c0::/29
2a12:d6c0::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
bc:6e:14:99:ce:e9:d0:5f:e4:23:c9:25:e0:aa:66:9d:ce:6b:
7b:de:be:86:04:b0:51:90:54:5f:ed:fc:df:27:e1:05:92:70:
5f:64:15:97:11:31:a4:d7:28:4e:20:ff:63:26:69:d9:ea:48:
35:0b:5f:86:bd:51:37:9b:ca:7b:ba:c2:85:c5:e9:44:af:f2:
7f:fa:64:b5:6e:3e:1a:d3:cb:f2:39:f3:5f:78:cd:ef:04:fb:
8b:4f:31:b5:40:82:88:19:f2:e1:f2:24:08:ba:bf:fc:5b:f8:
aa:65:ef:62:a0:bb:4f:f9:7e:b2:60:5b:39:7f:5b:10:de:b6:
6b:46:7e:ad:d8:39:28:35:0d:63:75:ea:03:bf:45:a7:61:44:
3d:b1:37:cc:b3:28:b0:f3:7f:35:9f:b1:6a:39:2d:14:96:4b:
b2:a3:e2:8b:c3:b5:45:2d:57:2f:34:cf:40:b8:7a:5a:12:8e:
a8:2f:e4:1f:55:32:55:44:dd:9c:31:67:ba:98:dd:50:bb:c5:
17:ea:e9:18:6e:1d:85:e2:06:cc:7c:02:8a:64:b3:8e:31:7e:
20:37:e8:b8:53:b7:1b:ed:29:1b:cc:cd:3e:55:8d:16:a7:56:
86:f2:8a:a1:95:ba:ea:41:47:b2:5e:e3:6a:94:7c:24:16:bf:
aa:3a:71:25
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZDeRxXVojHgLW1OfnSfHjusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNzIzMDYyODM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTJiOGEyOTI5NjlhYjZmYjQ0NWFhMTg0NTgzZjcwMDNlOTU5M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4GIJrJfLoNS+BN8Ew6dDjxr6Nd+
TQzCHP23vd2wu4jsuRW88BK0qHjIiwxvq+5TsvZD+HL5jKeU2PXwp9ag8aZ9JyMc
rarYGJ840jE1+9aEgXiTDwbxQGA2iLlQVynUzEWnRGkOi4E1VNEMwzLXsw9YPGuu
ZFJLzxvDVcCVXI9HeVwR2YpBQzMJ6oYEp+g14ep89gH5flQUYPzsTjvsZxXgKqkn
Y73YGCVhwyQ1k1kDPffFs6ysqtmA1aNnCbr3VRzfxgKeMwRn7Peg0LgTtSQawSpQ
itjrzcnZqaf5bEXJjs0Ok2azyGOR/zB3/67dLzpHwDZ02EEDKdhc1HzfdQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFG4riikpaatvtEWqGEWD9wA+lZOlMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvYml1S0tTbHBxMi0wUmFvWVJZUDNBRDZWazZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKg/EAAMF
AyoP3sADBQMqD+VAAwUDKhLVwAMFAyoS1sADBQMqE0kAMA0GCSqGSIb3DQEBCwUA
A4IBAQC8bhSZzunQX+QjySXgqmadzmt73r6GBLBRkFRf7fzfJ+EFknBfZBWXETGk
1yhOIP9jJmnZ6kg1C1+GvVE3m8p7usKFxelEr/J/+mS1bj4a08vyOfNfeM3vBPuL
TzG1QIKIGfLh8iQIur/8W/iqZe9ioLtP+X6yYFs5f1sQ3rZrRn6t2DkoNQ1jdeoD
v0WnYUQ9sTfMsyiw8381n7FqOS0Ulkuyo+KLw7VFLVcvNM9AuHpaEo6oL+QfVTJV
RN2cMWe6mN1Qu8UX6ukYbh2F4gbMfAKKZLOOMX4gN+i4U7cb7SkbzM0+VY0Wp1aG
8oqhlbrqQUeyXuNqlHwkFr+qOnEl
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:58 2025 by rpki-client