Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/6PdSE0va-_gVvhXv_75qH3rQYPU.roa
File: 6PdSE0va-_gVvhXv_75qH3rQYPU.roa (raw, json)
Hash identifier: 70bW9t+9gTCMeJncl52a5eSPMIHvcj2oFkj/zgDNck4=
Subject key identifier: E8:F7:52:13:4B:DA:FB:F8:15:BE:15:EF:FF:BE:6A:1F:7A:D0:60:F5
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 01926CC60DF94401AF3DF24743168CE97429
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/6PdSE0va-_gVvhXv_75qH3rQYPU.roa
Signing time: Tue 08 Oct 2024 15:36:11 +0000
ROA not before: Tue 08 Oct 2024 15:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34578
IP address blocks: 2a00:9480::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:c6:0d:f9:44:01:af:3d:f2:47:43:16:8c:e9:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Oct 8 15:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f752134bdafbf815be15efffbe6a1f7ad060f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:48:eb:f8:c8:c2:e8:b7:49:f9:fd:83:05:
4e:16:46:2f:d2:15:82:32:e9:c9:65:57:91:07:40:
a8:f6:c9:ee:9f:08:de:01:29:e6:5b:c5:35:33:bb:
d4:18:aa:1e:1b:58:cf:37:44:f2:e4:3f:58:3b:09:
64:0a:06:3b:fd:33:a4:7b:1d:52:c4:11:7e:66:8b:
e4:9a:86:2a:49:d0:d7:9b:2d:8e:68:35:e1:cd:b5:
29:9b:6a:11:86:8b:a2:47:75:a7:3e:1d:b0:fc:b3:
eb:72:68:22:88:ca:43:30:56:e6:df:98:d6:78:0c:
a5:a8:4e:f0:34:16:98:34:f1:7c:64:6b:28:45:b4:
ac:cc:eb:7e:e5:3d:4b:df:c6:ed:19:0d:df:c2:cf:
b3:98:04:71:1f:74:3d:89:33:32:af:97:d3:35:8e:
ab:35:fd:57:4a:a5:61:d2:51:46:f9:4d:7d:ef:c4:
c8:6a:ea:33:18:e1:1a:08:ba:1b:ff:31:b6:4f:71:
62:fc:c9:f0:5a:52:80:17:be:71:95:98:37:d6:e1:
6c:0c:ae:34:be:e6:e5:6a:b9:93:67:c3:ab:95:92:
46:5a:47:19:40:4f:a0:08:2b:64:fc:07:50:fc:db:
be:e6:3e:f0:a2:32:8a:9b:b2:73:c8:a4:8d:99:37:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:52:13:4B:DA:FB:F8:15:BE:15:EF:FF:BE:6A:1F:7A:D0:60:F5
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/6PdSE0va-_gVvhXv_75qH3rQYPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:9480::/32
Signature Algorithm: sha256WithRSAEncryption
72:39:cb:2f:c2:ef:3d:c2:49:be:a3:08:d2:59:b2:40:54:09:
3b:fa:7d:47:e2:75:d3:9c:ac:3b:a3:03:84:1d:a7:26:5b:34:
de:5c:be:4d:32:c0:c2:5c:98:19:dc:3e:47:dd:ac:2e:92:8d:
0c:14:ca:a3:33:28:26:cc:cd:44:5b:5c:32:6a:a3:c3:c0:54:
de:1e:17:6c:42:12:4f:4b:58:79:0e:32:66:4b:33:0d:54:46:
17:fd:c2:89:1c:fa:4c:16:49:da:db:9d:c8:82:ec:b1:ef:ad:
62:de:f3:30:df:14:b5:f0:ee:fc:c3:26:53:0e:1c:a2:03:24:
76:bb:45:0a:93:fe:92:ab:ee:87:f0:79:5e:14:97:7b:fe:43:
43:27:bf:36:ea:ba:39:46:50:64:8e:3b:a7:c3:75:1f:18:6c:
bf:df:2a:06:34:be:b8:47:30:7b:5d:34:b3:8c:12:bc:13:e9:
1b:12:09:89:87:57:f3:07:6f:e9:43:9b:de:a8:e9:a1:2c:7c:
b9:47:21:b6:e6:3f:dc:ba:00:3a:b5:31:9a:18:6d:22:f6:d6:
f5:6f:25:eb:2d:3e:ff:ff:5b:6c:c3:e9:72:77:d4:85:fa:cc:
7a:43:57:db:4d:06:ba:ac:a6:bf:83:15:84:06:db:d2:44:2b:
5f:e0:f7:d0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZJsxg35RAGvPfJHQxaM6XQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjQxMDA4MTUzNjExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGY3NTIxMzRiZGFmYmY4MTViZTE1ZWZmZmJlNmExZjdhZDA2MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJI6/jIwui3Sfn9gwVOFkYv0hWC
MunJZVeRB0Co9snunwjeASnmW8U1M7vUGKoeG1jPN0Ty5D9YOwlkCgY7/TOkex1S
xBF+ZovkmoYqSdDXmy2OaDXhzbUpm2oRhouiR3WnPh2w/LPrcmgiiMpDMFbm35jW
eAylqE7wNBaYNPF8ZGsoRbSszOt+5T1L38btGQ3fws+zmARxH3Q9iTMyr5fTNY6r
Nf1XSqVh0lFG+U1978TIauozGOEaCLob/zG2T3Fi/MnwWlKAF75xlZg31uFsDK40
vublarmTZ8OrlZJGWkcZQE+gCCtk/AdQ/Nu+5j7wojKKm7JzyKSNmTcihQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOj3UhNL2vv4Fb4V7/++ah960GD1MB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvNlBkU0UwdmEtX2dWdmhYdl83NXFIM3JRWVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCUgDAN
BgkqhkiG9w0BAQsFAAOCAQEAcjnLL8LvPcJJvqMI0lmyQFQJO/p9R+J105ysO6MD
hB2nJls03ly+TTLAwlyYGdw+R92sLpKNDBTKozMoJszNRFtcMmqjw8BU3h4XbEIS
T0tYeQ4yZkszDVRGF/3CiRz6TBZJ2tudyILsse+tYt7zMN8UtfDu/MMmUw4cogMk
drtFCpP+kqvuh/B5XhSXe/5DQye/Nuq6OUZQZI47p8N1Hxhsv98qBjS+uEcwe100
s4wSvBPpGxIJiYdX8wdv6UOb3qjpoSx8uUchtuY/3LoAOrUxmhhtIvbW9W8l6y0+
//9bbMPpcnfUhfrMekNX200Guqymv4MVhAbb0kQrX+D30A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:53 2025 by rpki-client