Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1N3KmGn1dvahREaRq0zZ9ix9l9M.roa
File: 1N3KmGn1dvahREaRq0zZ9ix9l9M.roa (raw, json)
Hash identifier: Qnw7M7+KYBETbE0CyFr+azeI/dx7m3AzIfDqydoUR1c=
Subject key identifier: D4:DD:CA:98:69:F5:76:F6:A1:44:46:91:AB:4C:D9:F6:2C:7D:97:D3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FECA37A3747B6B5B542766C2AF43290B9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1N3KmGn1dvahREaRq0zZ9ix9l9M.roa
Signing time: Thu 06 Jun 2024 08:21:27 +0000
ROA not before: Thu 06 Jun 2024 08:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 2a0f:eb03::/32 maxlen: 32
2a0f:ed00::/32 maxlen: 32
2a0f:ed05::/32 maxlen: 32
2a0f:ed07::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Jun 2024 08:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:a3:7a:37:47:b6:b5:b5:42:76:6c:2a:f4:32:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 6 08:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ddca9869f576f6a1444691ab4cd9f62c7d97d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:e7:34:63:33:30:e8:45:42:de:bc:6c:7b:
50:f6:2d:ad:a7:78:e7:99:c5:6c:3d:d1:0a:49:0b:
6e:df:93:6d:eb:58:91:54:cb:a3:e4:9d:c1:88:b5:
00:68:20:f2:20:3e:83:da:1b:ac:2c:37:e6:19:0d:
6c:cf:e6:f5:27:e3:2b:f0:7a:99:83:a3:cb:0f:a9:
56:69:2b:de:df:5b:19:d7:5c:ce:58:d1:11:cc:44:
9a:38:db:cd:20:70:fc:c8:98:c3:c5:35:56:be:45:
45:8c:73:6e:e2:9d:1e:f1:58:f3:eb:01:42:25:a4:
3f:37:6e:87:92:c3:ea:80:6c:6f:7b:34:fe:84:3a:
73:35:ce:a3:ac:eb:8b:7b:2f:a4:e3:23:18:77:8b:
7f:45:23:2c:16:b6:f3:dc:ec:e6:ac:77:1c:94:9a:
46:ed:88:be:52:bc:7f:a8:6d:fd:b5:e7:23:b1:7f:
d8:fd:b0:53:7b:36:31:fd:de:68:b1:ca:6f:a2:7d:
93:71:eb:e4:72:58:81:a8:b8:cf:a6:26:a4:d6:b2:
68:61:92:7c:89:6e:36:cb:c8:4d:77:7f:ab:d2:da:
2f:4f:b3:d8:92:cf:ad:e4:10:8a:ab:a3:42:9e:ff:
dd:29:82:3c:ff:4f:4e:bb:93:c5:3e:29:32:a1:a0:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:CA:98:69:F5:76:F6:A1:44:46:91:AB:4C:D9:F6:2C:7D:97:D3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/1N3KmGn1dvahREaRq0zZ9ix9l9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:eb03::/32
2a0f:ed00::/32
2a0f:ed05::/32
2a0f:ed07::/32
2a13:a442::-2a13:a444:ffff:ffff:ffff:ffff:ffff:ffff
2a13:a446::/32
Signature Algorithm: sha256WithRSAEncryption
2b:a7:5b:43:29:5d:db:16:90:e0:13:31:51:1d:bd:ad:8a:e0:
d9:4b:56:dc:9d:dc:55:ec:75:61:22:2c:5a:27:98:3f:b9:73:
19:24:eb:68:3b:84:66:08:0f:fa:e8:c9:87:31:c8:e8:46:79:
fb:eb:d5:d7:c7:f2:82:d8:e7:ff:06:1a:0f:6a:ab:65:3a:1f:
74:69:5d:c2:62:33:75:cd:28:0a:6b:22:3f:4f:1a:4d:cf:fd:
dd:65:b8:24:e6:ad:78:ce:d1:88:8d:3c:ae:ce:67:b6:e0:ee:
a3:0d:fc:41:26:43:f8:e8:a2:36:f8:e1:9d:69:51:0a:76:ed:
f9:c3:24:73:17:b9:ad:50:71:cf:b2:83:90:97:73:24:c8:33:
74:b9:62:ff:47:c0:17:ae:96:5c:d5:4f:f3:87:ef:1d:e3:5e:
4c:80:bc:4e:b9:53:cf:70:4f:f9:34:80:5b:f6:b4:57:76:b7:
7d:04:d4:ce:19:7b:a4:ea:a7:4f:f5:25:99:3c:f0:f8:c7:f1:
6b:7d:0b:5f:06:c4:30:19:a4:e9:62:fa:39:99:08:3d:c7:94:
45:1d:5e:52:bd:71:af:73:cf:f2:ca:27:e7:59:33:65:c1:9f:
07:5f:28:4d:61:58:96:57:58:8a:6d:53:e8:f6:47:12:00:cb:
07:92:2c:3b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAY/so3o3R7a1tUJ2bCr0MpC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwNjA2MDgyMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGRkY2E5ODY5ZjU3NmY2YTE0NDQ2OTFhYjRjZDlmNjJjN2Q5N2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bXnNGMzMOhFQt68bHtQ9i2tp3jn
mcVsPdEKSQtu35Nt61iRVMuj5J3BiLUAaCDyID6D2husLDfmGQ1sz+b1J+Mr8HqZ
g6PLD6lWaSve31sZ11zOWNERzESaONvNIHD8yJjDxTVWvkVFjHNu4p0e8Vjz6wFC
JaQ/N26HksPqgGxvezT+hDpzNc6jrOuLey+k4yMYd4t/RSMsFrbz3OzmrHcclJpG
7Yi+Urx/qG39tecjsX/Y/bBTezYx/d5oscpvon2TcevkcliBqLjPpiak1rJoYZJ8
iW42y8hNd3+r0tovT7PYks+t5BCKq6NCnv/dKYI8/09Ou5PFPikyoaAk7QIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNTdyphp9Xb2oURGkatM2fYsfZfTMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMU4zS21HbjFkdmFoUkVhUnEwelo5aXg5bDlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAAjAzAwUAKg/rAwMF
ACoP7QADBQAqD+0FAwUAKg/tBzAOAwUBKhOkQgMFACoTpEQDBQAqE6RGMA0GCSqG
SIb3DQEBCwUAA4IBAQArp1tDKV3bFpDgEzFRHb2tiuDZS1bcndxV7HVhIixaJ5g/
uXMZJOtoO4RmCA/66MmHMcjoRnn769XXx/KC2Of/BhoPaqtlOh90aV3CYjN1zSgK
ayI/TxpNz/3dZbgk5q14ztGIjTyuzme24O6jDfxBJkP46KI2+OGdaVEKdu35wyRz
F7mtUHHPsoOQl3MkyDN0uWL/R8AXrpZc1U/zh+8d415MgLxOuVPPcE/5NIBb9rRX
drd9BNTOGXuk6qdP9SWZPPD4x/FrfQtfBsQwGaTpYvo5mQg9x5RFHV5SvXGvc8/y
yifnWTNlwZ8HXyhNYViWV1iKbVPo9kcSAMsHkiw7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:15 2025 by rpki-client