Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/eMv3XfHUl2ApYDNBO5jPFxpoIs0.roa
File: eMv3XfHUl2ApYDNBO5jPFxpoIs0.roa (raw, json)
Hash identifier: /irMIlQaY0IKx7fA/rn8YhR2WuE8md8lGhO/KsU5q8w=
Subject key identifier: 78:CB:F7:5D:F1:D4:97:60:29:60:33:41:3B:98:CF:17:1A:68:22:CD
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019421B1BD76FBE65280F3C3FA4C35ECFD7D
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/eMv3XfHUl2ApYDNBO5jPFxpoIs0.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212128
IP address blocks: 2a10:cbc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 Jan 2025 18:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bd:76:fb:e6:52:80:f3:c3:fa:4c:35:ec:fd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78cbf75df1d49760296033413b98cf171a6822cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ec:82:11:d6:ec:b9:db:9b:a9:3f:c0:79:85:
ff:46:a4:3d:ab:47:6c:9d:46:c8:3c:aa:cc:45:9c:
04:a5:c2:f7:f1:07:77:b5:17:aa:59:2f:59:62:40:
1b:be:01:84:d8:05:53:7d:0f:ac:08:19:cc:3e:24:
12:c0:d2:82:a8:30:5d:eb:8c:68:12:3e:42:00:ea:
b9:f3:97:7e:d2:40:74:fc:d3:f4:30:2b:68:e9:e7:
43:37:c9:75:a4:be:58:10:03:7f:9f:31:bd:6b:79:
78:a1:93:db:5a:c9:c5:c9:bf:b7:e5:5d:09:61:d9:
68:33:13:db:ef:3f:77:a3:05:c9:91:b5:e3:7d:3d:
18:55:35:6e:31:c4:db:ca:d2:1b:9e:a2:a8:5c:11:
70:96:7e:53:9a:8c:88:ca:d8:b1:ef:b8:8d:b7:69:
89:35:d4:c8:f1:58:fd:f0:d2:18:31:3a:4d:8b:77:
0f:a6:6c:4b:46:fb:93:a1:62:2b:4c:f7:bc:79:b3:
8c:eb:53:df:20:4e:13:d9:29:16:4c:ea:b5:ca:36:
4f:e8:56:eb:f3:7c:d4:d9:78:bc:4a:c5:04:d9:eb:
99:f9:fb:c7:28:f7:4a:85:75:9f:22:12:bf:80:cf:
08:8f:cd:a3:5f:57:3c:5d:7d:ca:60:d9:22:70:f9:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:F7:5D:F1:D4:97:60:29:60:33:41:3B:98:CF:17:1A:68:22:CD
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/eMv3XfHUl2ApYDNBO5jPFxpoIs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:f7:54:3c:4f:4f:a6:9e:b7:40:99:fc:aa:97:1a:2d:74:74:
a2:e7:2f:04:e2:a1:11:d2:87:d9:69:62:a8:8b:f7:8a:fc:9e:
5d:ed:00:2e:75:48:33:c3:3f:70:93:ee:20:84:dd:38:ca:e4:
ac:59:14:09:2c:24:55:3e:a1:43:92:8f:b6:5f:65:8a:6a:95:
ac:04:3e:87:df:8c:07:20:be:de:e6:62:45:fd:25:cb:69:22:
05:16:34:ae:d0:e5:55:50:2e:00:ad:35:07:66:0f:ea:e5:c4:
59:0c:0e:fa:68:b3:20:01:88:c0:74:a2:b9:03:5e:f7:70:a2:
9d:05:67:57:6f:51:4a:81:46:f5:2e:8b:b8:49:02:04:77:68:
fc:3b:58:5f:00:70:d1:1b:d2:fb:56:12:2c:2e:8a:bc:5a:3d:
d2:97:1c:20:4d:70:42:43:16:02:07:31:b1:1d:a1:bd:fc:49:
90:8a:de:0a:53:3b:27:02:00:6f:12:ab:a2:9b:23:08:28:fe:
c9:fb:48:11:27:d8:16:9a:1e:52:7c:5e:0a:c1:11:df:61:cb:
30:2a:19:6b:6c:70:45:d1:22:29:40:c1:7a:77:a7:09:14:50:
8c:f5:00:84:bc:2a:0b:71:64:52:bb:b4:3f:67:b8:c4:c9:ff:
29:83:47:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhsb12++ZSgPPD+kw17P19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjUwMTAxMTE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGNiZjc1ZGYxZDQ5NzYwMjk2MDMzNDEzYjk4Y2YxNzFhNjgyMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eyCEdbsudubqT/AeYX/RqQ9q0ds
nUbIPKrMRZwEpcL38Qd3tReqWS9ZYkAbvgGE2AVTfQ+sCBnMPiQSwNKCqDBd64xo
Ej5CAOq585d+0kB0/NP0MCto6edDN8l1pL5YEAN/nzG9a3l4oZPbWsnFyb+35V0J
YdloMxPb7z93owXJkbXjfT0YVTVuMcTbytIbnqKoXBFwln5TmoyIytix77iNt2mJ
NdTI8Vj98NIYMTpNi3cPpmxLRvuToWIrTPe8ebOM61PfIE4T2SkWTOq1yjZP6Fbr
83zU2Xi8SsUE2euZ+fvHKPdKhXWfIhK/gM8Ij82jX1c8XX3KYNkicPmSewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHjL913x1JdgKWAzQTuYzxcaaCLNMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvZU12M1hmSFVsMkFwWUROQk81alBGeHBvSXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhDLwDAN
BgkqhkiG9w0BAQsFAAOCAQEAbPdUPE9Ppp63QJn8qpcaLXR0oucvBOKhEdKH2Wli
qIv3ivyeXe0ALnVIM8M/cJPuIITdOMrkrFkUCSwkVT6hQ5KPtl9limqVrAQ+h9+M
ByC+3uZiRf0ly2kiBRY0rtDlVVAuAK01B2YP6uXEWQwO+mizIAGIwHSiuQNe93Ci
nQVnV29RSoFG9S6LuEkCBHdo/DtYXwBw0RvS+1YSLC6KvFo90pccIE1wQkMWAgcx
sR2hvfxJkIreClM7JwIAbxKropsjCCj+yftIESfYFpoeUnxeCsER32HLMCoZa2xw
RdEiKUDBenenCRRQjPUAhLwqC3FkUru0P2e4xMn/KYNH5w==
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:24:30 2025 by rpki-client