Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/emfWMcPBwLOWrWkkLyjjREKRp5c.roa
File: emfWMcPBwLOWrWkkLyjjREKRp5c.roa (raw, json)
Hash identifier: 7nxAM1iooNuRqtTV/0LfH0KOOuDPQ8nIDz/EtR7Ln6c=
Subject key identifier: 7A:67:D6:31:C3:C1:C0:B3:96:AD:69:24:2F:28:E3:44:42:91:A7:97
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01916B291F30A1AB975F71F758FDB9A098FF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/emfWMcPBwLOWrWkkLyjjREKRp5c.roa
Signing time: Mon 19 Aug 2024 15:02:22 +0000
ROA not before: Mon 19 Aug 2024 15:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a09:17c1:66::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:77::/48 maxlen: 48
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 20:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:29:1f:30:a1:ab:97:5f:71:f7:58:fd:b9:a0:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 15:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a67d631c3c1c0b396ad69242f28e3444291a797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:6a:b3:a6:a6:4b:24:10:1a:7a:86:0d:a0:
10:00:42:2d:1d:30:f9:d9:cf:e2:fc:71:87:f0:71:
72:b8:de:45:bd:9c:3c:ce:dc:1c:e6:88:cf:0d:2b:
d7:07:d4:1f:85:5f:c1:00:34:c6:93:83:41:6a:2c:
0c:cf:a2:5f:f7:b7:8b:02:66:ea:23:9c:b6:da:15:
b1:c5:42:fe:59:49:fa:8d:af:c9:73:6a:a6:64:40:
da:65:06:58:cd:9f:d1:65:4d:d1:e0:4a:1e:32:e9:
c2:52:03:72:89:bd:4e:e4:b8:e7:82:b6:a3:24:68:
ff:64:66:4e:73:92:bc:28:ea:cd:a2:76:e5:2d:b9:
4a:4d:d2:5f:b7:1e:d1:ec:45:82:f9:7c:f7:7a:03:
07:d8:77:b7:cd:fc:e9:9c:ad:79:4d:5c:23:46:37:
79:1d:9d:eb:70:e3:75:53:c6:7c:1f:f4:9e:22:62:
64:c8:85:48:a0:03:a1:76:f7:51:b4:ca:08:ae:2f:
39:f0:e3:53:e9:c5:f8:77:88:a0:08:f1:a2:2b:3f:
08:8d:b3:01:72:9c:02:c1:fe:fb:8c:17:68:82:a5:
65:ef:af:8a:b8:2b:c4:b4:83:82:09:f9:3e:95:e3:
a4:86:2e:87:46:3a:3c:e1:cf:69:af:84:72:fd:28:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:D6:31:C3:C1:C0:B3:96:AD:69:24:2F:28:E3:44:42:91:A7:97
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/emfWMcPBwLOWrWkkLyjjREKRp5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c1:66::/48
2a0c:7886:99::/48
2a0e:15c7:88::/48
2a0e:f603:66::/48
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:1584:77::/48
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d4:bf:ed:b7:1e:4d:b9:69:18:19:c8:ba:15:15:46:41:97:
be:a8:86:da:a6:76:3b:da:a5:63:b7:a1:74:cd:da:bf:25:20:
e7:a6:fc:b1:35:c3:a1:8c:81:10:31:b6:e2:53:a0:44:4c:0d:
72:1a:22:a6:27:f4:dd:ca:2e:e5:eb:10:2f:e8:7c:f6:f8:c3:
2a:ff:cb:b9:ad:3d:77:a3:ad:fb:aa:fb:ad:da:02:2c:f7:3a:
89:0e:bd:ee:77:5a:20:a2:f6:45:12:80:72:bc:38:5d:c0:bf:
1b:77:67:bd:1a:b7:05:ca:12:92:25:f5:25:87:90:f4:ff:41:
40:b7:8a:2e:26:b8:67:5d:08:9e:c4:8b:c7:c9:d3:d4:c6:24:
5d:95:8f:79:69:3b:8d:01:20:b6:c1:9a:9d:19:5d:b0:a7:01:
fe:c6:f1:cd:6a:55:ab:e4:04:86:8d:82:63:0c:34:74:e6:42:
85:87:5e:48:a6:28:8c:2d:71:a0:3b:b3:1c:b2:ea:d9:98:d4:
b3:7c:ce:50:0c:ba:10:37:ca:38:f2:d4:27:ed:57:f4:57:cb:
e0:de:0c:4f:a2:23:48:ec:85:57:f4:c9:5a:ec:5e:a1:c9:42:
d0:93:8b:45:81:c3:f8:21:e0:1d:b6:da:3f:9d:58:1b:56:1a:
7f:87:9c:5e
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZFrKR8woauXX3H3WP25oJj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODE5MTUwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTY3ZDYzMWMzYzFjMGIzOTZhZDY5MjQyZjI4ZTM0NDQyOTFhNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Zqs6amSyQQGnqGDaAQAEItHTD5
2c/i/HGH8HFyuN5FvZw8ztwc5ojPDSvXB9QfhV/BADTGk4NBaiwMz6Jf97eLAmbq
I5y22hWxxUL+WUn6ja/Jc2qmZEDaZQZYzZ/RZU3R4EoeMunCUgNyib1O5Ljngraj
JGj/ZGZOc5K8KOrNonblLblKTdJftx7R7EWC+Xz3egMH2He3zfzpnK15TVwjRjd5
HZ3rcON1U8Z8H/SeImJkyIVIoAOhdvdRtMoIri858ONT6cX4d4igCPGiKz8IjbMB
cpwCwf77jBdogqVl76+KuCvEtIOCCfk+leOkhi6HRjo84c9pr4Ry/Sh0oQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFHpn1jHDwcCzlq1pJC8o40RCkaeXMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZW1mV01jUEJ3TE9Xcldra0x5ampSRUtScDVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAIwfgMHACoJ
F8EAZgMHACoMeIYAmQMHACoOFccAiAMHACoO9gMAZgMHACoPEgYAVQMHACoPEgYA
ZgMHACoPFYQAdwMHACoP4cEAIgMHACoP4gIARAMHASoP5sYBAAMHACoP58YAZgMH
ACoP58YAdwMHACoP6kQAZgMHACoP6kQAdzANBgkqhkiG9w0BAQsFAAOCAQEAGtS/
7bceTblpGBnIuhUVRkGXvqiG2qZ2O9qlY7ehdM3avyUg56b8sTXDoYyBEDG24lOg
REwNchoipif03cou5esQL+h89vjDKv/Lua09d6Ot+6r7rdoCLPc6iQ697ndaIKL2
RRKAcrw4XcC/G3dnvRq3BcoSkiX1JYeQ9P9BQLeKLia4Z10InsSLx8nT1MYkXZWP
eWk7jQEgtsGanRldsKcB/sbxzWpVq+QEho2CYww0dOZChYdeSKYojC1xoDuzHLLq
2ZjUs3zOUAy6EDfKOPLUJ+1X9FfL4N4MT6IjSOyFV/TJWuxeoclC0JOLRYHD+CHg
HbbaP51YG1Yaf4ecXg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:23 2025 by rpki-client