Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/96iYWHxXZEiMw6qhu0ow70mdh9k.roa
File: 96iYWHxXZEiMw6qhu0ow70mdh9k.roa (raw, json)
Hash identifier: q7sP0jy8BGeNdoPkJoKHr4lEY49tGg+x1aGfqmm5MKo=
Subject key identifier: F7:A8:98:58:7C:57:64:48:8C:C3:AA:A1:BB:4A:30:EF:49:9D:87:D9
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0192B49E2A35EE4A4F6544ACF80C9F2F8864
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/96iYWHxXZEiMw6qhu0ow70mdh9k.roa
Signing time: Tue 22 Oct 2024 14:25:17 +0000
ROA not before: Tue 22 Oct 2024 14:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 2a05:9080:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Nov 2024 10:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:9e:2a:35:ee:4a:4f:65:44:ac:f8:0c:9f:2f:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 22 14:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7a898587c5764488cc3aaa1bb4a30ef499d87d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:36:c8:aa:ad:ea:ca:06:5e:62:10:06:c3:
2e:a2:48:af:83:2b:e2:17:53:c9:69:48:c3:8b:ca:
e6:99:6e:75:db:67:f5:a3:ae:cd:78:f9:81:55:ab:
63:75:cb:a4:8a:0f:7a:5d:84:08:9d:4c:70:b4:86:
ee:e9:cf:0a:41:19:ee:69:02:e3:18:63:f3:dc:f8:
aa:d6:bf:31:e5:7f:d4:3f:f3:1b:25:39:4a:10:f1:
75:58:eb:8a:61:f8:30:1a:6c:98:2d:61:2f:dc:ea:
63:62:30:aa:70:d6:87:61:58:db:d1:97:b8:0e:48:
79:b4:e5:d8:0d:c4:3b:9a:3e:8a:cd:5e:0a:93:7b:
1f:b2:35:c5:55:86:cb:17:67:05:3f:f7:b4:ad:0f:
36:08:da:e8:7e:37:ef:f3:38:20:cb:49:27:91:2c:
ad:66:7a:f2:50:6d:75:db:5b:f8:e1:9d:3c:df:3d:
c0:9b:85:30:33:8c:58:9c:18:01:23:8e:29:46:91:
54:3a:48:bb:7b:05:1f:02:be:d4:6d:12:1c:56:bc:
50:b9:77:34:47:48:d9:c5:07:e3:71:ad:72:25:b2:
47:98:fa:8a:2c:e8:59:cb:d3:0a:47:2d:69:67:5b:
22:1f:21:b6:12:5e:a4:6a:f1:fd:76:32:86:00:21:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:98:58:7C:57:64:48:8C:C3:AA:A1:BB:4A:30:EF:49:9D:87:D9
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/96iYWHxXZEiMw6qhu0ow70mdh9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:7::/48
Signature Algorithm: sha256WithRSAEncryption
d7:7f:c9:1c:b4:f3:90:84:c1:be:38:17:0c:98:88:84:d0:1a:
8d:5f:0d:c2:f1:bf:38:b4:58:43:ea:d5:4c:e9:c9:6c:d0:90:
cf:c0:b5:85:eb:c9:11:7e:f3:c1:a2:9f:26:85:5c:d3:5e:16:
bd:af:ce:77:28:f9:a9:f9:e6:4b:c4:1c:90:6e:46:78:b3:5d:
cc:56:6a:06:f3:ba:32:6b:93:4b:ed:d8:ed:56:6b:5c:5f:44:
ab:f4:60:13:d7:eb:c4:f2:3e:4a:43:0e:5d:0e:41:b8:06:7f:
3b:39:da:b2:22:5f:e4:7b:1d:b6:6c:0e:2f:b8:1f:46:4f:2b:
6c:de:b9:04:9b:49:a1:79:57:53:47:7e:32:3b:04:14:d2:5d:
29:a9:72:f1:d1:31:f8:67:67:ac:16:c5:f5:4d:72:d5:38:ef:
a5:97:8a:45:6b:f7:e0:e5:de:5f:0d:a9:e0:d8:42:eb:ca:91:
e9:eb:a7:c4:0d:da:52:78:bd:45:a9:3e:76:7f:67:db:88:71:
40:2e:6e:d7:a1:c9:db:fb:7e:35:d1:0c:43:1e:31:37:f2:fa:
cc:d2:82:d4:b7:df:94:bb:f3:81:66:fb:e3:09:60:50:c5:43:
b6:43:d8:98:7e:03:7a:9e:9c:1f:22:6c:be:7c:a5:f6:50:1c:
cf:09:d7:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZK0nio17kpPZUSs+AyfL4hkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQxMDIyMTQyNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2E4OTg1ODdjNTc2NDQ4OGNjM2FhYTFiYjRhMzBlZjQ5OWQ4N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn42yKqt6soGXmIQBsMuokivgyvi
F1PJaUjDi8rmmW5122f1o67NePmBVatjdcukig96XYQInUxwtIbu6c8KQRnuaQLj
GGPz3Piq1r8x5X/UP/MbJTlKEPF1WOuKYfgwGmyYLWEv3OpjYjCqcNaHYVjb0Ze4
Dkh5tOXYDcQ7mj6KzV4Kk3sfsjXFVYbLF2cFP/e0rQ82CNrofjfv8zggy0knkSyt
ZnryUG1121v44Z083z3Am4UwM4xYnBgBI44pRpFUOki7ewUfAr7UbRIcVrxQuXc0
R0jZxQfjca1yJbJHmPqKLOhZy9MKRy1pZ1siHyG2El6kavH9djKGACEabQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPeomFh8V2RIjMOqobtKMO9JnYfZMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvOTZpWVdIeFhaRWlNdzZxaHUwb3c3MG1kaDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWQgAAH
MA0GCSqGSIb3DQEBCwUAA4IBAQDXf8kctPOQhMG+OBcMmIiE0BqNXw3C8b84tFhD
6tVM6cls0JDPwLWF68kRfvPBop8mhVzTXha9r853KPmp+eZLxByQbkZ4s13MVmoG
87oya5NL7djtVmtcX0Sr9GAT1+vE8j5KQw5dDkG4Bn87OdqyIl/kex22bA4vuB9G
Tyts3rkEm0mheVdTR34yOwQU0l0pqXLx0TH4Z2esFsX1TXLVOO+ll4pFa/fg5d5f
Dang2ELrypHp66fEDdpSeL1FqT52f2fbiHFALm7Xocnb+3410QxDHjE38vrM0oLU
t9+Uu/OBZvvjCWBQxUO2Q9iYfgN6npwfImy+fKX2UBzPCddA
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:07 2024 by rpki-client on console-fra.rpki-client.org