Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FMqRqApCglvyCx8zPBN_RJie3PI.roa
File: FMqRqApCglvyCx8zPBN_RJie3PI.roa (raw, json)
Hash identifier: HgmqqxXkQLVbDw1ANE3s8TEGibq5EUI0zuA66GIHdJ8=
Subject key identifier: 14:CA:91:A8:0A:42:82:5B:F2:0B:1F:33:3C:13:7F:44:98:9E:DC:F2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFAB94A6E9FBCFBBFA94A33C0D9C4A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FMqRqApCglvyCx8zPBN_RJie3PI.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207415
IP address blocks: 2a09:5301:7220::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ab:94:a6:e9:fb:cf:bb:fa:94:a3:3c:0d:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14ca91a80a42825bf20b1f333c137f44989edcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:db:5d:3e:19:d0:7a:da:98:8c:cc:45:9c:
65:a0:1c:29:aa:6c:8b:8d:99:cd:68:24:14:5a:8a:
52:6a:56:18:d8:e4:dd:88:63:28:48:23:12:e5:e2:
53:fc:3b:ae:3a:03:ab:37:0b:26:81:3a:bd:16:99:
bd:37:3c:23:db:90:66:d3:4f:f2:8d:72:63:6c:88:
cc:87:f7:57:97:0f:e4:b6:93:75:c5:b5:ff:dc:6f:
57:40:b7:36:21:75:32:25:8c:9e:f2:d0:ca:ea:47:
66:23:a8:a5:cc:9e:bc:ec:38:81:95:1e:54:cf:2e:
4e:4c:85:fb:ab:ea:b9:05:f8:20:b0:1d:3e:e5:fd:
fd:4a:ec:81:94:62:c7:4f:8f:16:4b:a7:87:37:c4:
9c:42:49:78:ea:29:c4:a6:b4:a0:e0:0e:c7:e7:ae:
65:ba:22:00:bb:0a:43:4b:aa:a2:d5:fb:0c:ef:ae:
8d:dc:6a:b1:a0:93:06:f3:30:78:80:dd:5d:82:b9:
c2:27:3b:c6:e8:e0:96:81:b6:39:95:25:51:8a:67:
5c:ae:b0:c6:13:63:0a:f6:3c:64:3f:8d:32:42:61:
8d:67:0d:e1:7b:9a:8b:34:b1:29:52:f2:d5:34:f8:
af:25:28:27:44:e4:0e:2e:0a:ac:46:f0:1b:82:8d:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:91:A8:0A:42:82:5B:F2:0B:1F:33:3C:13:7F:44:98:9E:DC:F2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/FMqRqApCglvyCx8zPBN_RJie3PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5301:7220::/48
Signature Algorithm: sha256WithRSAEncryption
56:e1:d1:9e:4c:52:88:9e:2f:e8:75:dc:b1:26:9f:6e:4b:97:
3c:7a:d4:a6:d5:cf:bc:13:e5:7e:f6:2b:67:56:80:4b:4a:35:
5a:03:32:c8:68:8c:f5:0c:a1:23:e8:59:99:ef:5a:36:68:99:
2b:e4:e1:63:8f:68:4b:a3:2f:4f:61:04:c8:5b:58:ac:a7:02:
81:2d:08:13:f7:69:b4:3c:ac:79:c2:f5:9f:c2:50:78:e6:93:
b0:8d:b6:ca:3a:2c:d8:9e:9f:47:22:6d:14:1d:4a:0a:c3:dd:
f6:41:19:43:c5:38:ca:c3:7a:67:34:b2:59:c9:b8:60:aa:42:
f1:f0:23:bc:d9:9e:1b:96:3b:a2:a3:52:99:88:ec:e8:ca:2a:
bf:88:23:5e:06:7b:38:73:1b:e7:19:13:25:d3:cf:ec:e9:41:
d8:1b:99:ae:7c:1c:46:6e:e9:76:51:88:b0:11:b4:69:86:a3:
e7:56:a8:21:b0:f1:7c:d6:11:2a:6d:2e:7f:d5:16:69:86:49:
9d:fa:06:c6:7f:5d:59:6f:5f:b6:5f:1e:f4:8a:8e:10:75:4f:
bc:7f:4a:78:91:61:28:82:29:f1:39:79:0b:2e:01:2a:45:2a:
00:73:88:9e:12:93:eb:6d:4d:e9:f4:24:7b:4c:8a:34:f9:bc:
36:8e:97:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzI36uUpun7z7v6lKM8DZxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGNhOTFhODBhNDI4MjViZjIwYjFmMzMzYzEzN2Y0NDk4OWVkY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1fbXT4Z0HramIzMRZxloBwpqmyL
jZnNaCQUWopSalYY2OTdiGMoSCMS5eJT/DuuOgOrNwsmgTq9Fpm9Nzwj25Bm00/y
jXJjbIjMh/dXlw/ktpN1xbX/3G9XQLc2IXUyJYye8tDK6kdmI6ilzJ687DiBlR5U
zy5OTIX7q+q5BfggsB0+5f39SuyBlGLHT48WS6eHN8ScQkl46inEprSg4A7H565l
uiIAuwpDS6qi1fsM766N3GqxoJMG8zB4gN1dgrnCJzvG6OCWgbY5lSVRimdcrrDG
E2MK9jxkP40yQmGNZw3he5qLNLEpUvLVNPivJSgnROQOLgqsRvAbgo3OyQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBTKkagKQoJb8gsfMzwTf0SYntzyMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvRk1xUnFBcENnbHZ5Q3g4elBCTl9SSmllM1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKglTAXIg
MA0GCSqGSIb3DQEBCwUAA4IBAQBW4dGeTFKIni/oddyxJp9uS5c8etSm1c+8E+V+
9itnVoBLSjVaAzLIaIz1DKEj6FmZ71o2aJkr5OFjj2hLoy9PYQTIW1ispwKBLQgT
92m0PKx5wvWfwlB45pOwjbbKOizYnp9HIm0UHUoKw932QRlDxTjKw3pnNLJZybhg
qkLx8CO82Z4bljuio1KZiOzoyiq/iCNeBns4cxvnGRMl08/s6UHYG5mufBxGbul2
UYiwEbRphqPnVqghsPF81hEqbS5/1RZphkmd+gbGf11Zb1+2Xx70io4QdU+8f0p4
kWEoginxOXkLLgEqRSoAc4ieEpPrbU3p9CR7TIo0+bw2jpdP
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:37 2025 by rpki-client