Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/v7PxhP6rOWjjNS94awfVZZUdtys.roa
File: v7PxhP6rOWjjNS94awfVZZUdtys.roa (raw, json)
Hash identifier: F1+2aqj/8Cpm42sxL5/exsvEuT+hHu3/bHK/BGyp2LQ=
Subject key identifier: BF:B3:F1:84:FE:AB:39:68:E3:35:2F:78:6B:07:D5:65:95:1D:B7:2B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01911689A481B5F940E6632ACB99E2E9520F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/v7PxhP6rOWjjNS94awfVZZUdtys.roa
Signing time: Sat 03 Aug 2024 04:40:04 +0000
ROA not before: Sat 03 Aug 2024 04:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 2a05:9080:2::/48 maxlen: 48
2a05:9080:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 13:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:16:89:a4:81:b5:f9:40:e6:63:2a:cb:99:e2:e9:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 3 04:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb3f184feab3968e3352f786b07d565951db72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:f0:08:16:19:0b:48:d7:d7:50:4c:13:d8:
49:65:2e:5e:e5:63:bd:12:33:b6:61:90:b0:84:ec:
4e:35:48:ef:27:db:7c:13:90:e2:03:d3:a0:a5:8b:
42:cf:a7:41:6f:8b:83:e1:0f:e1:7a:ed:76:81:cd:
2f:6a:f0:e3:3a:30:a2:5c:0e:b6:d5:90:35:c3:6d:
05:5a:ea:8d:8b:c0:01:e0:37:27:65:ae:37:e2:9e:
99:98:c8:6d:b6:a9:f9:ad:2d:4c:64:8d:23:49:13:
a9:91:a9:45:72:3e:ab:18:90:ad:ae:12:5c:b6:d1:
f7:56:84:90:64:bf:6b:c8:fe:f5:ab:58:a7:1b:0f:
e8:9f:98:b4:51:5e:50:ff:6c:bf:00:9a:d5:d0:e0:
4d:47:3f:38:93:fc:6f:66:cf:d2:08:e1:2d:f8:e8:
82:bb:81:12:80:e8:0f:09:cb:ab:5b:a4:fe:84:46:
38:70:0b:e9:91:45:e0:f7:e0:ec:be:18:82:c4:1b:
cf:1c:04:5b:9b:fd:1a:45:32:c5:5c:e0:50:7f:39:
d1:85:5b:30:48:0f:35:83:9d:ac:02:4e:a8:e0:7d:
bc:12:04:c8:53:d4:90:70:c4:85:6d:7e:40:17:ca:
ea:2e:5b:f9:fe:39:fe:ba:0b:0f:21:2a:b6:02:ee:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:F1:84:FE:AB:39:68:E3:35:2F:78:6B:07:D5:65:95:1D:B7:2B
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/v7PxhP6rOWjjNS94awfVZZUdtys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:2::/48
2a05:9080:7::/48
Signature Algorithm: sha256WithRSAEncryption
bd:ee:18:db:66:a2:7d:e3:42:8a:cf:46:78:f9:65:36:76:91:
32:e3:75:44:b1:7a:a4:78:b8:ce:c3:44:29:db:e3:43:66:19:
61:1a:02:0d:4e:53:af:7b:31:7b:23:92:cd:7a:bd:c5:af:b3:
f6:5f:64:68:22:d5:e6:1c:82:af:31:0d:fd:53:aa:67:aa:f3:
eb:bc:08:6f:b6:ca:b7:3b:86:a1:3f:9d:d5:6a:6f:e9:f4:ae:
8b:88:86:c8:90:c2:fe:38:a1:60:25:1d:41:25:d7:ac:00:86:
ef:60:f5:a6:69:9f:e1:60:4a:03:01:7c:5b:41:bf:40:b8:48:
80:73:9e:c3:7f:c8:65:d6:af:1f:c2:f6:51:c2:ce:a9:4f:c5:
0a:df:51:21:59:96:17:1d:84:a2:d6:81:55:67:6e:61:b2:05:
63:73:43:cf:89:df:70:f6:9f:bf:e6:d5:aa:51:8a:84:c4:78:
14:b8:94:59:88:4b:f6:db:02:e2:76:74:6b:4a:99:ef:02:b0:
39:6b:d4:ac:6e:7b:92:ab:64:e1:03:56:56:2b:30:00:a8:de:
be:c1:bc:f5:d0:36:a5:e3:91:f2:4e:aa:5b:5c:82:e2:81:de:
5f:eb:25:80:d0:c3:e9:93:e6:c6:2a:85:a2:95:b0:19:d5:6c:
31:3d:44:90
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZEWiaSBtflA5mMqy5ni6VIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwODAzMDQ0MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmIzZjE4NGZlYWIzOTY4ZTMzNTJmNzg2YjA3ZDU2NTk1MWRiNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHwCBYZC0jX11BME9hJZS5e5WO9
EjO2YZCwhOxONUjvJ9t8E5DiA9OgpYtCz6dBb4uD4Q/heu12gc0vavDjOjCiXA62
1ZA1w20FWuqNi8AB4DcnZa434p6ZmMhttqn5rS1MZI0jSROpkalFcj6rGJCtrhJc
ttH3VoSQZL9ryP71q1inGw/on5i0UV5Q/2y/AJrV0OBNRz84k/xvZs/SCOEt+OiC
u4ESgOgPCcurW6T+hEY4cAvpkUXg9+DsvhiCxBvPHARbm/0aRTLFXOBQfznRhVsw
SA81g52sAk6o4H28EgTIU9SQcMSFbX5AF8rqLlv5/jn+ugsPISq2Au6l6QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL+z8YT+qzlo4zUveGsH1WWVHbcrMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvdjdQeGhQNnJPV2pqTlM5NGF3ZlZaWlVkdHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWQgAAC
AwcAKgWQgAAHMA0GCSqGSIb3DQEBCwUAA4IBAQC97hjbZqJ940KKz0Z4+WU2dpEy
43VEsXqkeLjOw0Qp2+NDZhlhGgINTlOvezF7I5LNer3Fr7P2X2RoItXmHIKvMQ39
U6pnqvPrvAhvtsq3O4ahP53Vam/p9K6LiIbIkML+OKFgJR1BJdesAIbvYPWmaZ/h
YEoDAXxbQb9AuEiAc57Df8hl1q8fwvZRws6pT8UK31EhWZYXHYSi1oFVZ25hsgVj
c0PPid9w9p+/5tWqUYqExHgUuJRZiEv22wLidnRrSpnvArA5a9SsbnuSq2ThA1ZW
KzAAqN6+wbz10Dal45HyTqpbXILigd5f6yWA0MPpk+bGKoWilbAZ1WwxPUSQ
-----END CERTIFICATE-----
Generated at Tue Aug 6 18:22:43 2024 by rpki-client on console-ams.rpki-client.org