Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/yBw8Wbas7-_tbRh6wsiDwd7vMkg.roa
File: yBw8Wbas7-_tbRh6wsiDwd7vMkg.roa (raw, json)
Hash identifier: SdtOdBUOFhKTvC/us3uxfeRVUzJc0vZo8cO+pLbWrTU=
Subject key identifier: C8:1C:3C:59:B6:AC:EF:EF:ED:6D:18:7A:C2:C8:83:C1:DE:EF:32:48
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 01910CE909A2D3857B2FBBDB8B5DDF6132D2
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/yBw8Wbas7-_tbRh6wsiDwd7vMkg.roa
Signing time: Thu 01 Aug 2024 07:48:04 +0000
ROA not before: Thu 01 Aug 2024 07:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 2a0f:bf01::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:e9:09:a2:d3:85:7b:2f:bb:db:8b:5d:df:61:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Aug 1 07:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c81c3c59b6acefefed6d187ac2c883c1deef3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:26:a8:32:20:ce:be:78:97:25:29:c6:61:
1e:cc:5b:19:9b:86:6e:30:59:04:3f:26:60:0e:d9:
b7:f7:50:83:03:2b:6f:4f:1a:55:73:4c:5e:3c:91:
eb:57:78:58:58:52:c8:d0:1d:e0:01:c1:99:bd:de:
22:db:32:77:4f:ad:f7:20:30:fd:5e:ea:05:93:cf:
34:5d:9d:f2:47:90:9b:3e:cd:67:59:a6:46:df:3a:
87:1a:2b:96:7e:3b:46:b5:60:76:14:80:8b:e9:0f:
bc:c8:73:3e:58:fd:69:81:ce:94:e6:89:06:f6:75:
2f:14:27:7c:ba:13:fa:6f:7d:f8:b4:9f:a7:61:23:
6f:ef:eb:64:6e:0e:db:2d:69:6f:45:04:04:80:1c:
05:91:e8:d0:c8:39:ce:94:11:75:80:0b:bf:e6:20:
4e:27:e5:b2:da:85:fb:55:e9:71:da:6a:43:9a:f1:
03:1d:07:c6:ae:b1:6a:27:93:2a:5c:69:c8:a0:8e:
74:8c:18:13:e5:25:ed:73:ea:b5:5a:9d:2f:1f:27:
7c:e3:ef:e4:4a:d3:89:80:6f:ce:dc:e4:fd:51:00:
9c:86:f9:73:51:4a:e0:29:db:e6:58:1c:2e:43:a8:
52:a1:69:d2:12:d0:2f:fb:65:85:da:f0:88:86:66:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:3C:59:B6:AC:EF:EF:ED:6D:18:7A:C2:C8:83:C1:DE:EF:32:48
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/yBw8Wbas7-_tbRh6wsiDwd7vMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bf01::/32
Signature Algorithm: sha256WithRSAEncryption
bb:37:67:13:3b:3f:c4:9a:c5:ce:20:1e:74:58:ed:0e:b9:d4:
67:1b:4e:26:d6:c4:d2:3c:65:a0:39:61:19:c9:0c:41:a1:76:
20:d8:40:1b:75:2f:97:8a:aa:74:6e:a5:e3:55:33:76:e6:56:
db:dc:92:6a:f4:a4:a2:2a:3b:08:7a:b7:4a:02:1c:ec:29:d8:
e2:a2:df:44:66:78:26:7e:3c:de:b5:8c:76:ce:74:8d:06:36:
6e:46:c3:66:8e:16:01:78:c3:98:e8:be:24:01:da:e9:1e:53:
b4:20:6b:e6:fe:6b:79:91:a2:25:57:66:53:e7:6f:16:05:8f:
23:c9:b2:a2:3f:04:c3:c0:87:b5:0c:5e:d6:51:10:7f:7f:41:
f2:db:6b:bb:d4:e5:7e:ad:db:05:12:d5:bc:c0:84:3b:bf:97:
5c:00:52:c0:76:95:b1:d9:55:f0:d7:82:08:89:61:d6:d5:9e:
d9:40:49:56:4e:8e:7b:c0:8d:44:61:3c:6d:63:15:06:d1:d3:
3e:3a:9c:b4:d9:f5:15:ea:36:7a:34:a4:a3:8c:63:f6:45:15:
2d:fd:a6:43:78:60:8a:5b:87:47:c6:a6:2f:eb:cf:d6:72:c0:
cc:d2:44:a3:85:50:3c:b9:1e:63:b7:6a:87:f4:f8:e9:08:f1:
fa:7a:9c:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZEM6Qmi04V7L7vbi13fYTLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjFkNzUyOGJlNzEzYTRiYTJjYjRkYjVlNThkNjRkODgy
ZWI1NTUwHhcNMjQwODAxMDc0ODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODFjM2M1OWI2YWNlZmVmZWQ2ZDE4N2FjMmM4ODNjMWRlZWYzMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfwmqDIgzr54lyUpxmEezFsZm4Zu
MFkEPyZgDtm391CDAytvTxpVc0xePJHrV3hYWFLI0B3gAcGZvd4i2zJ3T633IDD9
XuoFk880XZ3yR5CbPs1nWaZG3zqHGiuWfjtGtWB2FICL6Q+8yHM+WP1pgc6U5okG
9nUvFCd8uhP6b334tJ+nYSNv7+tkbg7bLWlvRQQEgBwFkejQyDnOlBF1gAu/5iBO
J+Wy2oX7Velx2mpDmvEDHQfGrrFqJ5MqXGnIoI50jBgT5SXtc+q1Wp0vHyd84+/k
StOJgG/O3OT9UQCchvlzUUrgKdvmWBwuQ6hSoWnSEtAv+2WF2vCIhmaPewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMgcPFm2rO/v7W0YesLIg8He7zJIMB8GA1UdIwQY
MBaAFHAh11KL5xOkuiy0215Y1k2ILrVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAt
OTI4MWYwZDIzZGJmLzEveUJ3OFdiYXM3LV90YlJoNndzaUR3ZDd2TWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wMWIwYzAtMWI4Ny00ZDZmLTllOTAtOTI4MWYwZDIzZGJm
LzEvY0NIWFVvdm5FNlM2TExUYlhsaldUWWd1dFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg+/ATAN
BgkqhkiG9w0BAQsFAAOCAQEAuzdnEzs/xJrFziAedFjtDrnUZxtOJtbE0jxloDlh
GckMQaF2INhAG3Uvl4qqdG6l41UzduZW29ySavSkoio7CHq3SgIc7CnY4qLfRGZ4
Jn483rWMds50jQY2bkbDZo4WAXjDmOi+JAHa6R5TtCBr5v5reZGiJVdmU+dvFgWP
I8myoj8Ew8CHtQxe1lEQf39B8ttru9Tlfq3bBRLVvMCEO7+XXABSwHaVsdlV8NeC
CIlh1tWe2UBJVk6Oe8CNRGE8bWMVBtHTPjqctNn1Feo2ejSko4xj9kUVLf2mQ3hg
iluHR8amL+vP1nLAzNJEo4VQPLkeY7dqh/T46Qjx+nqcOw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:50 2025 by rpki-client